{"vulnerability": "cve-2026-8461", "sightings": [{"uuid": "57c738ff-45cf-4efe-98a9-6e3ae1a0b83a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mokwvxbso52s", "content": "CVE-2026-8461 - Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder\nCVE ID : CVE-2026-8461\n \n Published : June 18, 2026, 11:29 a.m. | 1\u00a0hour, 40\u00a0minutes ago\n \n Description : An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically ...", "creation_timestamp": "2026-06-18T13:33:14.991357Z"}, {"uuid": "322f7116-4897-4765-b4b4-031c3e06dead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3movwrv5h7f2m", "content": "CVE-2026-8461: FFmpeg MagicYUV decoder CRITICAL heap bug enables DoS/RCE via crafted AVI/MKV/MOV files. Patch to 8.1.2 immediately. Impacts Jellyfin, Nextcloud, more. https://radar.offseq.com/threat/ffmpeg-fixes-pixelsmash-flaw-in-widely-used-video--5ccb783d6ccf419b #OffSeq #FFmpeg #MediaSecurity", "creation_timestamp": "2026-06-22T22:30:16.662594Z"}, {"uuid": "992bf095-8caf-48ee-9c31-81efbc101f85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116796123601952586", "content": "FFmpeg MagicYUV decoder CRITICAL heap out-of-bounds bug (CVE-2026-8461): AVI/MKV/MOV files can trigger DoS or RCE in apps like Jellyfin, Nextcloud. Patch to 8.1.2 ASAP. https://radar.offseq.com/threat/ffmpeg-fixes-pixelsmash-flaw-in-widely-used-video--5ccb783d6ccf419b #OffSeq #FFmpeg #CVE20268461 #infosec", "creation_timestamp": "2026-06-22T22:30:19.749236Z"}, {"uuid": "ab701121-57fb-438d-999b-9c1cacd41deb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8461", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mowkryxxid2t", "content": "\ud83d\udcf0 FFmpeg Tambal Celah Keamanan PixelSmash pada Video Decoder Populer\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/23/ffmpeg-tambal-celah-keamanan-pixelsmash/\n\n#cve-2026-8461 #ffmpeg #jellyfin #keamananSiber #kerentananKeamanan #openSource #pixelsmash #pustakaVideo #rce", "creation_timestamp": "2026-06-23T04:28:14.792594Z"}, {"uuid": "b8084197-a459-41d3-91bd-bbc3978ab6e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/tugate.ch/post/3mowuobekpb2n", "content": "Foi descoberta uma vulnerabilidade cr\u00edtica, denominada PixelSmash, na biblioteca FFmpeg, que pode permitir a execu\u00e7\u00e3o remota de c\u00f3digo em servidores Jellyfin e causar a nega\u00e7\u00e3o de servi\u00e7o em plataformas como Kodi. A falha, identificada como CVE-2026-8461, recebeu uma pontua\u00e7\u00e3o de gravidade significa", "creation_timestamp": "2026-06-23T07:25:06.864830Z"}, {"uuid": "55ff149a-fc69-43a6-a445-eec88c79be55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mox2wvzuwz26", "content": "FFmpeg's MagicYUV decoder flaw (CVE-2026-8461) enables remote code execution via crafted media files. Update now. #FFmpeg #Security #CVE20268461 #MagicYUV #RemoteCodeExecution thedailytechfeed.com/critical-ffm...", "creation_timestamp": "2026-06-23T09:17:19.147527Z"}, {"uuid": "0d4aedb9-6ada-4456-8961-04a051e7fc45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/marcus.mastodon.nickebo.net.ap.brid.gy/post/3moxcgqiftyf2", "content": "If you\u2019re collecting Linux ISOs, have a look at CVE-2026-8461 and patch when a patch is available.", "creation_timestamp": "2026-06-23T11:31:54.485027Z"}, {"uuid": "5f318bfb-7afc-4e26-baee-2f71fcc7dd27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3moxfixt6jw2l", "content": "A video file your server opens by itself can run an attacker's commands.\n\nPixelSmash (CVE-2026-8461) hits anything built on FFmpeg: Jellyfin, Nextcloud, your own upload pipelines.\n\nUpdate FFmpeg to 8.1.2, then watch for media tools spawning a shell.", "creation_timestamp": "2026-06-23T12:26:22.513077Z"}, {"uuid": "821f11d8-6b0b-4158-826e-9a4ac5ef1c83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/116798840149721270", "content": "PixelSmash Vulnerability in FFmpeg Enables Remote Code Execution\nFFmpeg version 8.1.2 patches a high-severity heap overflow (CVE-2026-8461) in the MagicYUV decoder that allows attackers to execute arbitrary code via malicious video files. The flaw impacts a wide range of media applications, including Jellyfin and Nextcloud.\n**Update FFmpeg to version 8.1.2 or later immediately to close the PixelSmash flaw (CVE-2026-8461), and update any apps that bundle it like Jellyfin, Nextcloud, Kodi, or OBS. If you can't update right away, restrict file uploads to trusted users only and isolate any servers that automatically scan or process media files.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/pixelsmash-vulnerability-in-ffmpeg-enables-remote-code-execution-p-9-m-z-b/gD2P6Ple2L", "creation_timestamp": "2026-06-23T13:38:48.880693Z"}, {"uuid": "ea67ae6a-d3dd-43b9-ab26-e6714470026c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3moxkrgsqni2n", "content": "FFmpeg, scoperta la falla PixelSmash: rischio attacchi su Jellyfin, Kodi e Nextcloud\nLa vulnerabilit\u00e0 CVE-2026-8461 nel decoder MagicYUV di...\nhttps://www.ilsoftware.it/ffmpeg-scoperta-la-falla-pixelsmash-rischio-attacchi-su-jellyfin-kodi-e-nextcloud/", "creation_timestamp": "2026-06-23T14:00:35.090788Z"}, {"uuid": "83b99d56-02a9-4ed1-bd62-9b8b97243860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6h6pk2l", "content": "2/ \ud83c\udfac PATCH NOW. PixelSmash (CVE-2026-8461, CVSS 8.8) in FFmpeg's video decoder. One malicious AVI/MKV/MOV file can compromise Jellyfin, Kodi, OBS, Emby, Nextcloud. Zero click on home servers. Fix: FFmpeg 8.1.2, released June 17. (JFrog/BleepingComputer)", "creation_timestamp": "2026-06-23T14:49:39.457399Z"}, {"uuid": "a9cb67e5-4d39-40fd-8c2d-d9a6c03e8594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6hii22l", "content": "2/ \ud83c\udfac PATCH NOW. PixelSmash (CVE-2026-8461, CVSS 8.8) in FFmpeg's video decoder. One malicious AVI/MKV/MOV file can compromise Jellyfin, Kodi, OBS, Emby, Nextcloud. Zero click on home servers. Fix: FFmpeg 8.1.2, released June 17. (JFrog/BleepingComputer)", "creation_timestamp": "2026-06-23T14:49:40.275365Z"}, {"uuid": "5b8540ea-4a3c-4065-a0b4-c09da21abaae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6hkgk2l", "content": "2/ \ud83c\udfac PATCH NOW. PixelSmash (CVE-2026-8461, CVSS 8.8) in FFmpeg's video decoder. One malicious AVI/MKV/MOV file can compromise Jellyfin, Kodi, OBS, Emby, Nextcloud. Zero click on home servers. Fix: FFmpeg 8.1.2, released June 17. (JFrog/BleepingComputer)", "creation_timestamp": "2026-06-23T14:49:41.140400Z"}, {"uuid": "1a476964-d8af-4186-806e-2849d5679383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6hlfs2l", "content": "2/ \ud83c\udfac PATCH NOW. PixelSmash (CVE-2026-8461, CVSS 8.8) in FFmpeg's video decoder. One malicious AVI/MKV/MOV file can compromise Jellyfin, Kodi, OBS, Emby, Nextcloud. Zero click on home servers. Fix: FFmpeg 8.1.2, released June 17. (JFrog/BleepingComputer)", "creation_timestamp": "2026-06-23T14:49:42.032471Z"}, {"uuid": "e514e46d-c445-4f1c-8495-23487eed2746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6hlft2l", "content": "2/ \ud83c\udfac PATCH NOW. PixelSmash (CVE-2026-8461, CVSS 8.8) in FFmpeg's video decoder. One malicious AVI/MKV/MOV file can compromise Jellyfin, Kodi, OBS, Emby, Nextcloud. Zero click on home servers. Fix: FFmpeg 8.1.2, released June 17. (JFrog/BleepingComputer)", "creation_timestamp": "2026-06-23T14:49:42.854403Z"}, {"uuid": "b2c74d06-cd5b-462b-8eb5-202a6eef8616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6hmf32l", "content": "2/ \ud83c\udfac PATCH NOW. PixelSmash (CVE-2026-8461, CVSS 8.8) in FFmpeg's video decoder. One malicious AVI/MKV/MOV file can compromise Jellyfin, Kodi, OBS, Emby, Nextcloud. Zero click on home servers. Fix: FFmpeg 8.1.2, released June 17. (JFrog/BleepingComputer)", "creation_timestamp": "2026-06-23T14:49:43.689672Z"}, {"uuid": "1de690d9-f670-4e9a-a238-18f68711c23b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6hned2l", "content": "2/ \ud83c\udfac PATCH NOW. PixelSmash (CVE-2026-8461, CVSS 8.8) in FFmpeg's video decoder. One malicious AVI/MKV/MOV file can compromise Jellyfin, Kodi, OBS, Emby, Nextcloud. Zero click on home servers. Fix: FFmpeg 8.1.2, released June 17. (JFrog/BleepingComputer)", "creation_timestamp": "2026-06-23T14:49:44.548665Z"}, {"uuid": "b9877a56-051e-48fd-ac71-1975eb2ba779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6hnef2l", "content": "2/ \ud83c\udfac PATCH NOW. PixelSmash (CVE-2026-8461, CVSS 8.8) in FFmpeg's video decoder. One malicious AVI/MKV/MOV file can compromise Jellyfin, Kodi, OBS, Emby, Nextcloud. Zero click on home servers. Fix: FFmpeg 8.1.2, released June 17. (JFrog/BleepingComputer)", "creation_timestamp": "2026-06-23T14:49:46.203064Z"}, {"uuid": "748ab998-bebf-45e5-98f9-8758b4cf8935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3moxnj6hnee2l", "content": "2/ \ud83c\udfac PATCH NOW. PixelSmash (CVE-2026-8461, CVSS 8.8) in FFmpeg's video decoder. One malicious AVI/MKV/MOV file can compromise Jellyfin, Kodi, OBS, Emby, Nextcloud. Zero click on home servers. Fix: FFmpeg 8.1.2, released June 17. (JFrog/BleepingComputer)", "creation_timestamp": "2026-06-23T14:49:45.376469Z"}, {"uuid": "7f38a974-219a-42cb-9399-0ed078b05f2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3moyq2yopls23", "content": "FFmpeg \u306e MagicYUV\u30c7\u30b3\u30fc\u30c0\u30fc\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 PixelSmash-CVE-2026-8461\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-06-24T01:08:07.265584Z"}, {"uuid": "9923d8ac-233c-430f-b9eb-05e4ef84d73b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/niiqo.bsky.social/post/3mozp3ef3og2w", "content": "PixelSmash : une faille FFmpeg expose Jellyfin au RCE\n\nwww.it-connect.fr/pixelsmash-u...\n\nPixelSmash est une faille critique de FFmpeg (CVE-2026-8461) permettant d'ex\u00e9cuter du code \u00e0 distance sur un serveur Jellyfin via un simple fichier vid\u00e9o pi\u00e9g\u00e9.\n\nLe post PixelSmash : une faille FFmp\u2026", "creation_timestamp": "2026-06-24T10:23:05.659368Z"}, {"uuid": "ca4465ef-2f93-41ed-bfcf-d017435f84b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mp2hd3u43l2q", "content": "A critical vulnerability, CVE-2026-8461 (\"PixelSmash\"), in FFmpeg's MagicYUV decoder allows remote code execution via crafted media files. The flaw, with a CVSS score of 8.8, affects applications like Kodi and Jellyfin, enabling attackers to exploit the bug through media file uploads.", "creation_timestamp": "2026-06-24T17:36:55.452364Z"}, {"uuid": "c591dca3-d64a-41dc-bcee-3df97e422e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mp2j3hfug4n2", "content": "PixelSmash flaw turns video files into attack tools Researchers have found a critical FFmpeg flaw that could let attackers use a malicious video file to compromise vulnerable systems. A newly disco...\n\n#Bugs #News #CVE-2026-8461 #ffmpeg #MagicYUV\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-24T18:08:30.237137Z"}, {"uuid": "1a1b4672-0df4-44bd-83de-0a9d8baec957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mp2jk54sbh2c", "content": "PixelSmash CVE-2026-8461: The Tiny Video File Flaw That Could Give Attackers Control Over FFmpeg Systems +\u00a0Video\n\nIntroduction: When a Simple Video Preview Becomes a Security Threat Modern technology depends heavily on invisible software layers that most users never notice. Every time a computer\u2026", "creation_timestamp": "2026-06-24T18:16:35.843454Z"}, {"uuid": "27edc704-2a3d-4707-809b-1fb22cbff3fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/jenbanim.mastodo.neoliber.al.ap.brid.gy/post/3mp4u7aad5yv2", "content": "#Sysadmin #Infosec am I reading correctly that Ubuntu is still triaging the lastest FFMPEG vulnerability and hasn't released a fix?\n\nRunning 24.04 LTS and I don't wanna get pwned\n\nhttps://ubuntu.com/security/CVE-2026-8461", "creation_timestamp": "2026-06-25T16:32:46.041075Z"}, {"uuid": "5f22085f-5c32-4edf-afa2-4e63dd5a0908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/LeoBurr.tiggi.es.ap.brid.gy/post/3mp4osfo6v7i2", "content": "Since I'm not running docker, just upgraded FFMPEG to the latest version that has the https://nvd.nist.gov/vuln/detail/CVE-2026-8461 patch. No need to upgrade to 4.6.2 since that's only a fix for docker images.", "creation_timestamp": "2026-06-25T14:56:05.634723Z"}, {"uuid": "61c02b4d-a7c8-4320-9781-24a006f83bba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mp4qfpi5ucr2", "content": "PixelSmash flaw turns video files into attack tools Researchers have found a critical FFmpeg flaw that could let attackers use a malicious video file to compromise vulnerable systems. A newly disco...\n\n#Bugs #News #CVE-2026-8461 #ffmpeg #MagicYUV\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-25T15:24:50.805797Z"}, {"uuid": "779ad96c-c091-46ee-b51a-b02420f213a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/simli.bsky.social/post/3mp4zqmsvvc2i", "content": "If you use ffmpeg in your workflow, please update to v8.1.2, because this is a really nasty vulnerability (CVE-2026-8461).\n\nffmpeg touches pretty much anything to do with video, so make sure to keep all your video-adjacent software like OBS, Plex, and DaVinci Resolve up to date regularly.", "creation_timestamp": "2026-06-25T18:11:55.795038Z"}, {"uuid": "8907c267-2e98-4e49-bcdd-70b8d2d60978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/xeiaso.net/post/3mp5h5elvmg24", "content": "\"No way to prevent this\" say users of only language where this regularly happens\n\nhttps://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-8461/", "creation_timestamp": "2026-06-25T22:11:38.817470Z"}, {"uuid": "00780728-6886-4419-8370-b976878f45fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/cadey.pony.social.ap.brid.gy/post/3mp5h666dnsf2", "content": "\"No way to prevent this\" say users of only language where this regularly happens\n\nhttps://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-8461/?utm_campaign=mi_irl&utm_medium=social&utm_source=mastodon", "creation_timestamp": "2026-06-25T22:12:21.733547Z"}, {"uuid": "be428f3d-b56a-4e6c-a5e0-c651bcc04c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/some-rss-feeds.bsky.social/post/3mp5mgq6nsp2d", "content": "[some-subscribed-rss] New Post: \"No way to prevent this\" say users of only language where this regularly happens, by  https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-8461/", "creation_timestamp": "2026-06-25T23:46:21.947976Z"}, {"uuid": "8f92e6cf-7313-432d-8712-6b5a98b7affd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mp5vmtrhn32i", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 44 interactions\nCVE-2026-47729: 43 interactions\nCVE-2026-8461: 34 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-8461: 26 interactions\nCVE-2026-47729: 25 interactions\nCVE-2026-20245: 6 interactions\n", "creation_timestamp": "2026-06-26T02:30:50.738153Z"}, {"uuid": "56623063-e51d-4c51-807e-f281ef1329a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8461", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3mp6shsarc22z", "content": "This week's most talked-about vulnerability - here's the exploit - CVE-2026-8461 PixelSmash\nAffected: FFmpeg 8.0.1\nPoC - github.com/Y5neKO/CVE-2... #exploit #cve-2026-8461 #PoC #FFmpeg", "creation_timestamp": "2026-06-26T11:07:05.507612Z"}, {"uuid": "107a3112-d72e-4d4b-8899-48ea2ca15125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8461", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mp6trd2a7k2h", "content": "\ud83d\udce2 CVE-2026-8461 PixelSmash : RCE critique dans FFmpeg via le d\u00e9codeur MagicYUV\n\ud83d\udcdd ## \ud83d\uddd3\ufe0f Contexte\n\nPubli\u00e9 le 23 juin 2026 par SecurityWeek (auteur : Ionut Arg\u2026\nhttps://cyberveille.ch/posts/2026-06-26-cve-2026-8461-pixelsmash-rce-critique-dans-ffmpeg-via-le-decodeur-magicyuv/ #CVE_2026_8461 #Cyberveille", "creation_timestamp": "2026-06-26T11:30:13.140227Z"}, {"uuid": "04a0e67a-fca9-41ba-8b83-d9d9667091ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mpag345cgv2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 45 interactions\nCVE-2026-47729: 38 interactions\nCVE-2026-8461: 34 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-46331: 10 interactions\nCVE-2026-34916: 4 interactions\nCVE-2026-20245: 3 interactions\n", "creation_timestamp": "2026-06-27T02:30:28.606404Z"}, {"uuid": "10536538-34ee-442d-9213-74e9ccd74862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/nemo.eurosky.social/post/3mpaxgcbmgk2a", "content": "\ud83d\udea8 FFmpeg\u2019s MagicYUV decoder bug \u201cPixelSmash\u201d (CVE-2026-8461) can be triggered by a crafted AVI/MKV/MOV to achieve remote code execution. Affected apps include Jellyfin & Nextcloud. Fix: FFmpeg 8.1.2. cyberinsider.com/ffmpeg-pixel... #FFmpeg #CyberSecurity #RCE #CVE #Infosec", "creation_timestamp": "2026-06-27T07:41:18.406315Z"}, {"uuid": "6a2e0440-8427-45cb-a177-2ecf0e1afdb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mpcwkncjr422", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 45 interactions\nCVE-2026-47729: 37 interactions\nCVE-2026-8461: 35 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-9076: 3 interactions\nCVE-2025-60467: 2 interactions\nCVE-2026-20253: 2 interactions\n", "creation_timestamp": "2026-06-28T02:30:49.118092Z"}, {"uuid": "7a37abe8-9a24-407c-a5f3-f91cebf1dd49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mpfgzudnqx2d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 45 interactions\nCVE-2026-47729: 36 interactions\nCVE-2026-8461: 35 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-58053: 4 interactions\nCVE-2026-10643: 3 interactions\nCVE-2026-58049: 3 interactions\n", "creation_timestamp": "2026-06-29T02:30:59.346896Z"}, {"uuid": "141b5c3b-6bb9-44b8-9856-cd529e216861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mpggudv6x32m", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-20230, CVE-2026-12569, CVE-2026-8461, CVE-2026-20245, CVE-2025-25205\nActors: Play, Ransomware, Apt\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-06-29T12:00:33.896829Z"}, {"uuid": "6c813889-9654-468f-872b-87e8f756ef18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mphxidm26u2q", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 48 interactions\nCVE-2026-47729: 36 interactions\nCVE-2026-8461: 35 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-46817: 9 interactions\nCVE-2026-43503: 4 interactions\nCVE-2026-20230: 3 interactions\n", "creation_timestamp": "2026-06-30T02:30:44.286040Z"}, {"uuid": "4372c018-b5b5-47e8-84cc-c78bd7a115a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mpkhxm4m5225", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 41 interactions\nCVE-2026-8461: 30 interactions\nCVE-2026-47729: 29 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-46817: 11 interactions\nCVE-2026-20245: 4 interactions\nCVE-2026-33825: 4 interactions\n", "creation_timestamp": "2026-07-01T02:30:56.064686Z"}, {"uuid": "62c3499f-a189-460f-9a35-8c39ca312ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mpmyftwohd2w", "content": "Top 3 CVE for last 7 days:\nCVE-2026-46817: 30 interactions\nCVE-2026-8461: 27 interactions\nCVE-2026-47729: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-46817: 10 interactions\nCVE-2026-43503: 8 interactions\nCVE-2026-33825: 4 interactions\n", "creation_timestamp": "2026-07-02T02:30:33.206518Z"}, {"uuid": "5d823b67-b3e6-472a-81e6-2ea204460d48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://t.me/true_secator/8343", "content": "JFrog \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043c\u0443\u043b\u044c\u0442\u0438\u043c\u0435\u0434\u0438\u0430 FFmpeg, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-8461 (CVSS 8,8) \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0432 \u043a\u0443\u0447\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libavcodec \u0432 \u0434\u0435\u043a\u043e\u0434\u0435\u0440\u0435 MagicYUV FFmpeg.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 \u0434\u0435\u043a\u043e\u0434\u0435\u0440\u0435 MagicYUV \u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043c\u0435\u0436\u0434\u0443 \u0442\u0435\u043c, \u043a\u0430\u043a \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u0435\u043b\u044c \u043a\u0430\u0434\u0440\u043e\u0432 \u0438 \u0434\u0435\u043a\u043e\u0434\u0435\u0440 \u0432\u044b\u0447\u0438\u0441\u043b\u044f\u044e\u0442 \u0432\u044b\u0441\u043e\u0442\u0443 \u0446\u0432\u0435\u0442\u043e\u0432\u043e\u0439 \u043f\u043b\u043e\u0441\u043a\u043e\u0441\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 PixelSmash \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e FFmpeg. \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0438\u0433\u043d\u0443\u0442\u043e \u043f\u0443\u0442\u0435\u043c \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 AVBuffer FFmpeg - \u043e\u0431\u044a\u0435\u043a\u0442\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u043e\u043c \u0441 \u043f\u043e\u0434\u0441\u0447\u0435\u0442\u043e\u043c \u0441\u0441\u044b\u043b\u043e\u043a, \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u043c\u043e\u043c\u0443 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0438\u043a\u0441\u0435\u043b\u0435\u0439 \u043a\u0430\u0436\u0434\u043e\u0439 \u043f\u043b\u043e\u0441\u043a\u043e\u0441\u0442\u0438.\u00a0\n\n\u0414\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 AVBuffer \u0432 FFmpeg - \u043e\u0431\u044a\u0435\u043a\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u043e\u043c \u0441 \u043f\u043e\u0434\u0441\u0447\u0435\u0442\u043e\u043c \u0441\u0441\u044b\u043b\u043e\u043a, \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u043c\u044b\u0439 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0438\u043a\u0441\u0435\u043b\u0435\u0439 \u043a\u0430\u0436\u0434\u043e\u0439 \u043f\u043b\u043e\u0441\u043a\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c JFrog, \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435\u043c \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u043c \u043c\u0435\u0441\u0442\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043f\u0440\u043e\u0446\u0435\u0441\u0441 FFmpeg \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u0441\u044f \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u043f\u0440\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0438 \u043a\u0443\u0447\u0438.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e PixelSmash \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f RCE \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043c\u0435\u0434\u0438\u0430\u0444\u0430\u0439\u043b\u044b, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0435 \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c\u0443 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 libavcodec \u0438\u0437 FFmpeg \u0434\u043b\u044f \u0434\u0435\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0438\u0434\u0435\u043e.\n\n\u041d\u0430 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0432\u0438\u0434\u0435\u043e\u043f\u043b\u0435\u0435\u0440\u0435 \u0438\u043b\u0438 \u043a\u043e\u0433\u0434\u0430 \u043e\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442 \u0432 \u043f\u0430\u043f\u043a\u0443, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0443\u044e \u044d\u0442\u043e\u0442 \u0444\u0430\u0439\u043b, \u0435\u0441\u043b\u0438 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440 \u043c\u0438\u043d\u0438\u0430\u0442\u044e\u0440 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443.\n\n\u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442, \u043a\u043e\u0433\u0434\u0430 \u043c\u0435\u0434\u0438\u0430\u0444\u0430\u0439\u043b \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043c\u0435\u0434\u0438\u0430\u0441\u0435\u0440\u0432\u0435\u0440, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0447\u0430\u0442\u0430 \u0438\u043b\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0442\u0440\u0430\u043d\u0441\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u0445 (NAS), \u043c\u0435\u0434\u0438\u0430\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0438 \u0441\u043c\u0430\u0440\u0442-\u0442\u0435\u043b\u0435\u0432\u0438\u0437\u043e\u0440\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u044e\u0442 \u043c\u0438\u043d\u0438\u0430\u0442\u044e\u0440\u044b \u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u044b \u0432\u0438\u0434\u0435\u043e.\n\n\u0414\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u0440\u043e\u043c\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043c\u0435\u0434\u0438\u0430\u0444\u0430\u0439\u043b\u0430 - \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043c\u0443\u043b\u044c\u0442\u0438\u043c\u0435\u0434\u0438\u0430.\n\n\u041f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0438\u0434\u0435 \u0444\u0430\u0439\u043b\u0430 AVI, MKV \u0438\u043b\u0438 MOV \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c 50 \u041a\u0411. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 Zero-Click \u0430\u0442\u0430\u043a\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u0442\u043e\u0440\u0440\u0435\u043d\u0442\u044b, \u0435\u0441\u043b\u0438 \u0443 \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u0442\u043e\u0440\u0440\u0435\u043d\u0442-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043c\u0435\u0434\u0438\u0430\u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u043c\u0435\u0434\u0438\u0430\u0442\u0435\u043a\u0438.\n\n\u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0442\u043e\u0440\u0440\u0435\u043d\u0442\u0430 \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u0441\u044f, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443.\n\n\u0412 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0433\u043e \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f Nextcloud, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0439 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0443\u044e \u0441\u0431\u043e\u0440\u043a\u0443 FFmpeg, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0444\u0438\u043b\u044c\u043c\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b FFmpeg \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u043c\u0438\u043d\u0438\u0430\u0442\u044e\u0440.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0438\u043a\u0430\u043a\u043e\u0433\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u043a\u0440\u043e\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0444\u0430\u0439\u043b\u0430 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u043f\u0430\u043f\u043e\u043a, \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u0435\u043b\u0430\u0435\u0442 \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0435, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0441\u043f\u043e\u0441\u043e\u0431 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0431\u0435\u0437\u043e\u0448\u0438\u0431\u043e\u0447\u043d\u044b\u043c.\n\nJFrog \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Kodi, mpv, ffmpegthumbnailer (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c GNOME, KDE, XFCE), Jellyfin, Emby, Nextcloud, Immich, PhotoPrism \u0438 OBS Studio. \n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 Jellyfin. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b FFmpeg 8.1.2, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.", "creation_timestamp": "2026-07-13T13:00:07.279927Z"}, {"uuid": "11a373b4-b00a-4b56-8ff9-c0bdfa9e50ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://t.me/GithubRedTeam/90306", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-8461-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a anyanything\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-23 18:16:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:20.741246Z"}, {"uuid": "f371f6e8-553b-4f65-be74-5f8179e6b06f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://t.me/GithubRedTeam/90374", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #EXP\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-8461-EXP\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Y5neKO\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-24 07:15:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:20.698669Z"}, {"uuid": "555b3780-3e92-45e0-9d4d-5a23164160fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "exploited", "source": "https://t.me/true_secator/8343", "content": "JFrog \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043c\u0443\u043b\u044c\u0442\u0438\u043c\u0435\u0434\u0438\u0430 FFmpeg, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-8461 (CVSS 8,8) \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0432 \u043a\u0443\u0447\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libavcodec \u0432 \u0434\u0435\u043a\u043e\u0434\u0435\u0440\u0435 MagicYUV FFmpeg.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 \u0434\u0435\u043a\u043e\u0434\u0435\u0440\u0435 MagicYUV \u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043c\u0435\u0436\u0434\u0443 \u0442\u0435\u043c, \u043a\u0430\u043a \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u0435\u043b\u044c \u043a\u0430\u0434\u0440\u043e\u0432 \u0438 \u0434\u0435\u043a\u043e\u0434\u0435\u0440 \u0432\u044b\u0447\u0438\u0441\u043b\u044f\u044e\u0442 \u0432\u044b\u0441\u043e\u0442\u0443 \u0446\u0432\u0435\u0442\u043e\u0432\u043e\u0439 \u043f\u043b\u043e\u0441\u043a\u043e\u0441\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 PixelSmash \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e FFmpeg. \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0438\u0433\u043d\u0443\u0442\u043e \u043f\u0443\u0442\u0435\u043c \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 AVBuffer FFmpeg - \u043e\u0431\u044a\u0435\u043a\u0442\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u043e\u043c \u0441 \u043f\u043e\u0434\u0441\u0447\u0435\u0442\u043e\u043c \u0441\u0441\u044b\u043b\u043e\u043a, \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u043c\u043e\u043c\u0443 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0438\u043a\u0441\u0435\u043b\u0435\u0439 \u043a\u0430\u0436\u0434\u043e\u0439 \u043f\u043b\u043e\u0441\u043a\u043e\u0441\u0442\u0438.\u00a0\n\n\u0414\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 AVBuffer \u0432 FFmpeg - \u043e\u0431\u044a\u0435\u043a\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u043e\u043c \u0441 \u043f\u043e\u0434\u0441\u0447\u0435\u0442\u043e\u043c \u0441\u0441\u044b\u043b\u043e\u043a, \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u043c\u044b\u0439 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0438\u043a\u0441\u0435\u043b\u0435\u0439 \u043a\u0430\u0436\u0434\u043e\u0439 \u043f\u043b\u043e\u0441\u043a\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c JFrog, \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435\u043c \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u043c \u043c\u0435\u0441\u0442\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043f\u0440\u043e\u0446\u0435\u0441\u0441 FFmpeg \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u0441\u044f \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u043f\u0440\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0438 \u043a\u0443\u0447\u0438.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e PixelSmash \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f RCE \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043c\u0435\u0434\u0438\u0430\u0444\u0430\u0439\u043b\u044b, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0435 \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c\u0443 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 libavcodec \u0438\u0437 FFmpeg \u0434\u043b\u044f \u0434\u0435\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0438\u0434\u0435\u043e.\n\n\u041d\u0430 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0432\u0438\u0434\u0435\u043e\u043f\u043b\u0435\u0435\u0440\u0435 \u0438\u043b\u0438 \u043a\u043e\u0433\u0434\u0430 \u043e\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442 \u0432 \u043f\u0430\u043f\u043a\u0443, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0443\u044e \u044d\u0442\u043e\u0442 \u0444\u0430\u0439\u043b, \u0435\u0441\u043b\u0438 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440 \u043c\u0438\u043d\u0438\u0430\u0442\u044e\u0440 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443.\n\n\u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442, \u043a\u043e\u0433\u0434\u0430 \u043c\u0435\u0434\u0438\u0430\u0444\u0430\u0439\u043b \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043c\u0435\u0434\u0438\u0430\u0441\u0435\u0440\u0432\u0435\u0440, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0447\u0430\u0442\u0430 \u0438\u043b\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0442\u0440\u0430\u043d\u0441\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u0445 (NAS), \u043c\u0435\u0434\u0438\u0430\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0438 \u0441\u043c\u0430\u0440\u0442-\u0442\u0435\u043b\u0435\u0432\u0438\u0437\u043e\u0440\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u044e\u0442 \u043c\u0438\u043d\u0438\u0430\u0442\u044e\u0440\u044b \u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u044b \u0432\u0438\u0434\u0435\u043e.\n\n\u0414\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u0440\u043e\u043c\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043c\u0435\u0434\u0438\u0430\u0444\u0430\u0439\u043b\u0430 - \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043c\u0443\u043b\u044c\u0442\u0438\u043c\u0435\u0434\u0438\u0430.\n\n\u041f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0438\u0434\u0435 \u0444\u0430\u0439\u043b\u0430 AVI, MKV \u0438\u043b\u0438 MOV \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c 50 \u041a\u0411. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 Zero-Click \u0430\u0442\u0430\u043a\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u0442\u043e\u0440\u0440\u0435\u043d\u0442\u044b, \u0435\u0441\u043b\u0438 \u0443 \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u0442\u043e\u0440\u0440\u0435\u043d\u0442-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043c\u0435\u0434\u0438\u0430\u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u043c\u0435\u0434\u0438\u0430\u0442\u0435\u043a\u0438.\n\n\u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0442\u043e\u0440\u0440\u0435\u043d\u0442\u0430 \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u0441\u044f, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443.\n\n\u0412 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0433\u043e \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f Nextcloud, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0439 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0443\u044e \u0441\u0431\u043e\u0440\u043a\u0443 FFmpeg, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0444\u0438\u043b\u044c\u043c\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b FFmpeg \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u043c\u0438\u043d\u0438\u0430\u0442\u044e\u0440.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0438\u043a\u0430\u043a\u043e\u0433\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u043a\u0440\u043e\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0444\u0430\u0439\u043b\u0430 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u043f\u0430\u043f\u043e\u043a, \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u0435\u043b\u0430\u0435\u0442 \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0435, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0441\u043f\u043e\u0441\u043e\u0431 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0431\u0435\u0437\u043e\u0448\u0438\u0431\u043e\u0447\u043d\u044b\u043c.\n\nJFrog \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Kodi, mpv, ffmpegthumbnailer (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c GNOME, KDE, XFCE), Jellyfin, Emby, Nextcloud, Immich, PhotoPrism \u0438 OBS Studio. \n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 Jellyfin. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b FFmpeg 8.1.2, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.", "creation_timestamp": "2026-07-14T00:00:44.648900Z"}, {"uuid": "b50ce551-3b1b-4dd4-ab95-713cf29ca5c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://t.me/bdufstecru/3262", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0435\u043a\u043e\u0434\u0435\u0440\u0430 MagicYUV \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043c\u0435\u0434\u0430\u0438\u0444\u0430\u0439\u043b\u043e\u0432 FFmpeg \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043c\u0435\u0434\u0438\u0430\u0444\u0430\u0439\u043b\u0430\n\nBDU:2026-08610\nCVE-2026-8461\n\n\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f FFmpeg:\nhttps://www.ffmpeg.org/download.html\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-8461", "creation_timestamp": "2026-07-14T01:00:05.739596Z"}, {"uuid": "110f1d4e-b084-40a2-b51d-28201cad3446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90306", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-8461-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a anyanything\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-23 18:16:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:19.829701Z"}, {"uuid": "c3c77415-4fd3-4464-b272-13c11fd4a877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90374", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #EXP\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-8461-EXP\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Y5neKO\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-24 07:15:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:19.879472Z"}, {"uuid": "4ad5b4fe-295a-45f8-96ec-8af5197cf914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "Telegram/JMPLlqAJKVKStPUctSi0425VFAAqn_JlP0EBk3HwzAKEQKc", "content": "", "creation_timestamp": "2026-07-16T19:00:30.932294Z"}, {"uuid": "6f3f9a46-a7a0-4d20-b845-e23820c19236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "Telegram/aIs3sq9HnkU610gY7fPSzi6cikoSLLRR-L6kmNCRetiiZV0", "content": "", "creation_timestamp": "2026-07-16T19:00:28.637631Z"}, {"uuid": "ee7ca629-c380-496f-9196-4f380b4aafea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "published-proof-of-concept", "source": "Telegram/aIs3sq9HnkU610gY7fPSzi6cikoSLLRR-L6kmNCRetiiZV0", "content": "", "creation_timestamp": "2026-07-18T02:00:06.013386Z"}, {"uuid": "f6b481ee-82a6-426b-b819-e6bfac9ea4b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "published-proof-of-concept", "source": "Telegram/JMPLlqAJKVKStPUctSi0425VFAAqn_JlP0EBk3HwzAKEQKc", "content": "", "creation_timestamp": "2026-07-18T04:00:03.688520Z"}, {"uuid": "a057d520-c1ac-4874-b52e-42afb5a2937e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://t.me/ZerodayAlert/743", "content": "PixelSmash \u0432 FFmpeg \u0431\u044c\u0451\u0442 \u043f\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u00ab\u0431\u0438\u0442\u044b\u0439\u00bb \u0440\u043e\u043b\u0438\u043a\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u043d\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u043d\u0443\u0436\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0432\u0440\u0443\u0447\u043d\u0443\u044e, \u0447\u0442\u043e\u0431\u044b \u043e\u043d \u0441\u0442\u0430\u043b \u0432\u0430\u0448\u0435\u0439 \u0433\u043e\u043b\u043e\u0432\u043d\u043e\u0439 \u0431\u043e\u043b\u044c\u044e. \u041c\u0435\u0434\u0438\u0430\u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u0430\u043c \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441\u043a\u0430\u0447\u0430\u043d\u043d\u044b\u0439 \u0432\u0438\u0434\u0435\u043e\u0440\u043e\u043b\u0438\u043a \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0432\u044c\u044e, \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0440\u043e\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0434\u0438\u0430\u0442\u0435\u043a\u0443, \u0438 \u0438\u043c\u0435\u043d\u043d\u043e \u0432 \u0442\u0430\u043a\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b JFrog \u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PixelSmash \u0432 FFmpeg.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-8461 \u0438 \u043f\u0440\u044f\u0447\u0435\u0442\u0441\u044f \u0432 \u0434\u0435\u043a\u043e\u0434\u0435\u0440\u0435 MagicYUV, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 FFmpeg \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0447\u0430\u0441\u0442\u044c \u0432\u0438\u0434\u0435\u043e\u0444\u0430\u0439\u043b\u043e\u0432. \u0418\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0440\u0430\u0441\u0447\u0451\u0442\u0430\u0445 \u043f\u0430\u043c\u044f\u0442\u0438 \u043a\u043e\u0434 \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442 \u043f\u043e\u0434 \u0446\u0432\u0435\u0442\u043e\u0432\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u0430\u0434\u0440\u0430 \u043c\u0435\u043d\u044c\u0448\u0435 \u043c\u0435\u0441\u0442\u0430, \u0447\u0435\u043c \u043f\u043e\u0442\u043e\u043c \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u0435\u043a\u043e\u0434\u0435\u0440 \u0432\u044b\u0445\u043e\u0434\u0438\u0442 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0431\u0443\u0444\u0435\u0440\u0430.\n\nJFrog \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430 \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 Jellyfin 10.11.9: \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 AVI \u043f\u043e\u043f\u0430\u043b \u0432 \u043c\u0435\u0434\u0438\u0430\u0442\u0435\u043a\u0443, \u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u0430\u043c \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u043b \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 ffprobe, \u0430 \u0431\u0430\u0433 \u0434\u0430\u043b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443. \u0414\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u0434\u0430 \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c ASLR, \u043d\u043e \u0434\u0430\u0436\u0435 \u0431\u0435\u0437 \u044d\u0442\u043e\u0433\u043e PixelSmash \u043c\u043e\u0436\u0435\u0442 \u0443\u0440\u043e\u043d\u0438\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u043f\u043e\u0434\u0432\u0435\u0441\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441. \u0417\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f \u043c\u043e\u0436\u043d\u043e \u043f\u0443\u0442\u0451\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f FFmpeg \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 8.1.2.\n\n#FFmpeg #Jellyfin #PixelSmash #MagicYUV \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:06.026294Z"}, {"uuid": "f9016815-966b-495d-a2e2-29ff11c841ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "published-proof-of-concept", "source": "https://t.me/ZerodayAlert/743", "content": "PixelSmash \u0432 FFmpeg \u0431\u044c\u0451\u0442 \u043f\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u00ab\u0431\u0438\u0442\u044b\u0439\u00bb \u0440\u043e\u043b\u0438\u043a\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u043d\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u043d\u0443\u0436\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0432\u0440\u0443\u0447\u043d\u0443\u044e, \u0447\u0442\u043e\u0431\u044b \u043e\u043d \u0441\u0442\u0430\u043b \u0432\u0430\u0448\u0435\u0439 \u0433\u043e\u043b\u043e\u0432\u043d\u043e\u0439 \u0431\u043e\u043b\u044c\u044e. \u041c\u0435\u0434\u0438\u0430\u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u0430\u043c \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441\u043a\u0430\u0447\u0430\u043d\u043d\u044b\u0439 \u0432\u0438\u0434\u0435\u043e\u0440\u043e\u043b\u0438\u043a \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0432\u044c\u044e, \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0440\u043e\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0434\u0438\u0430\u0442\u0435\u043a\u0443, \u0438 \u0438\u043c\u0435\u043d\u043d\u043e \u0432 \u0442\u0430\u043a\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b JFrog \u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PixelSmash \u0432 FFmpeg.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-8461 \u0438 \u043f\u0440\u044f\u0447\u0435\u0442\u0441\u044f \u0432 \u0434\u0435\u043a\u043e\u0434\u0435\u0440\u0435 MagicYUV, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 FFmpeg \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0447\u0430\u0441\u0442\u044c \u0432\u0438\u0434\u0435\u043e\u0444\u0430\u0439\u043b\u043e\u0432. \u0418\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0440\u0430\u0441\u0447\u0451\u0442\u0430\u0445 \u043f\u0430\u043c\u044f\u0442\u0438 \u043a\u043e\u0434 \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442 \u043f\u043e\u0434 \u0446\u0432\u0435\u0442\u043e\u0432\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u0430\u0434\u0440\u0430 \u043c\u0435\u043d\u044c\u0448\u0435 \u043c\u0435\u0441\u0442\u0430, \u0447\u0435\u043c \u043f\u043e\u0442\u043e\u043c \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u0435\u043a\u043e\u0434\u0435\u0440 \u0432\u044b\u0445\u043e\u0434\u0438\u0442 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0431\u0443\u0444\u0435\u0440\u0430.\n\nJFrog \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430 \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 Jellyfin 10.11.9: \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 AVI \u043f\u043e\u043f\u0430\u043b \u0432 \u043c\u0435\u0434\u0438\u0430\u0442\u0435\u043a\u0443, \u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u0430\u043c \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u043b \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 ffprobe, \u0430 \u0431\u0430\u0433 \u0434\u0430\u043b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443. \u0414\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u0434\u0430 \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c ASLR, \u043d\u043e \u0434\u0430\u0436\u0435 \u0431\u0435\u0437 \u044d\u0442\u043e\u0433\u043e PixelSmash \u043c\u043e\u0436\u0435\u0442 \u0443\u0440\u043e\u043d\u0438\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u043f\u043e\u0434\u0432\u0435\u0441\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441. \u0417\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f \u043c\u043e\u0436\u043d\u043e \u043f\u0443\u0442\u0451\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f FFmpeg \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 8.1.2.\n\n#FFmpeg #Jellyfin #PixelSmash #MagicYUV \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:38.622979Z"}, {"uuid": "d11ba8fb-5992-44ef-a0bd-2e038199bffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/46943", "content": "CVE-2026-8461 PixelSmash\n*\nAffected: FFmpeg 8.0.1 \n*\nPoC", "creation_timestamp": "2026-09-02T06:00:07.152574Z"}, {"uuid": "c16dc428-3390-475a-8e57-30377d9e7eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/46943", "content": "CVE-2026-8461 PixelSmash\n*\nAffected: FFmpeg 8.0.1 \n*\nPoC", "creation_timestamp": "2026-09-03T00:00:51.722528Z"}, {"uuid": "64894a96-6626-4631-8f57-c7410ceddc30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8461", "type": "seen", "source": "https://bsky.app/profile/Network.dongzhim.in.ap.brid.gy/post/3muz2ffkuqnp2", "content": "https://ubuntu.com/security/CVE-2026-8461\nhttps://nvd.nist.gov/vuln/detail/cve-2026-8461\n\u4e3a\u4ec0\u4e48\u4f60\u8981\u628a\u5b9e\u4f8b\u8fc1\u79fb\u5230gentoo\u4e0a", "creation_timestamp": "2026-09-08T12:44:02.218072Z"}, {"uuid": "a7006b88-2d0f-4945-9d0c-81f1743b9d74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84611", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T05:15:15.763930Z"}, {"uuid": "2ba69c2c-cd61-4353-8363-2674cfabb12e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84612", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T05:15:17.648808Z"}, {"uuid": "eaf2d9b3-3f7f-4781-a6ef-aeabd7ec5d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84615", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T05:15:19.593545Z"}, {"uuid": "53ec1605-d236-4b03-a4e3-080347c07d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84616", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T05:15:21.510261Z"}, {"uuid": "f70d0372-e804-4588-bdbb-d64d18ceafd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84617", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T05:15:23.445930Z"}, {"uuid": "2ec66112-87c9-4e15-99b3-fab8b30a0b1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84618", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T05:15:25.363448Z"}, {"uuid": "917f231c-af90-4379-8159-de7b635fdabd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84619", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T05:15:27.281260Z"}, {"uuid": "09290594-9b95-4bbe-9193-b173f5ee7a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84612", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T21:15:49.313179Z"}, {"uuid": "7413f7ee-c0cb-41d2-9745-b45c07c3370f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84611", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T21:15:47.416584Z"}, {"uuid": "1af4fd5a-1a8d-45f1-9d38-9fc926a7f10b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84615", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T21:15:50.855941Z"}, {"uuid": "18fa0ceb-b22d-4b4d-91e9-5ccab13351a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84616", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T21:15:52.800162Z"}, {"uuid": "1e7192bc-539c-46f8-8bb7-b65f2ad594ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84617", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T21:15:54.707391Z"}, {"uuid": "58bdb72c-1c7c-4adb-8a01-d7a09b9f0c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84618", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T21:15:56.608455Z"}, {"uuid": "f86db094-ffa6-44ab-bcae-1925124d6319", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84619", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T21:15:58.814845Z"}, {"uuid": "9c5fc221-9045-4a30-8a71-05c75373ce8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84611", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:00:54.749610Z"}, {"uuid": "f476c3e1-9ecb-4d5e-a63d-92860c39e1d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84612", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:01:27.431412Z"}, {"uuid": "4c1ee212-e24f-405b-bdb1-d1ed3f8bc301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84618", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:01:31.815928Z"}, {"uuid": "e2cf4571-8d51-4f35-b21a-11880f6d6b86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84615", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:01:41.692719Z"}, {"uuid": "d5a375b9-23e4-422b-abeb-e0ed33c293de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84619", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:01:02.295694Z"}, {"uuid": "46b86f0c-a31d-40ca-81cd-86dcecc7250d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84617", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:01:11.454219Z"}, {"uuid": "38307bf9-9d47-45e9-a612-201a321aec36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84616", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:01:22.681977Z"}, {"uuid": "a66bee9d-3acd-4c71-91d7-561506f79aaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84616", "type": "seen", "source": "Telegram/ldEcFziyWqHrxcMhUmfovWp6pabg1VPjb65EzAzTF9XLNoc", "content": "", "creation_timestamp": "2026-09-18T04:00:08.741115Z"}, {"uuid": "45877452-2255-444b-b4ea-22380c52d546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84616", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvslrqqu5r2l", "content": "CVE-2026-84616 is trending. Hype score 12, currently #8 on cvemon.\n\nA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8,\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-84616", "creation_timestamp": "2026-09-18T16:31:41.892565Z"}, {"uuid": "fb964808-a8cb-4cd7-821b-7f96e1527082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84616", "type": "published-proof-of-concept", "source": "Telegram/ldEcFziyWqHrxcMhUmfovWp6pabg1VPjb65EzAzTF9XLNoc", "content": "", "creation_timestamp": "2026-09-19T00:00:24.792241Z"}, {"uuid": "0c1dd935-fa2e-426f-8bb3-9bac2482b248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "Telegram/Yeumbd0afhQFKWhtQ_kYIVtV861DL6U2SRa0YhPEpV3GAh8", "content": "", "creation_timestamp": "2026-09-25T09:00:04.000000Z"}, {"uuid": "2d897914-4b55-4435-bd58-5fbf3cacf3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "published-proof-of-concept", "source": "Telegram/Yeumbd0afhQFKWhtQ_kYIVtV861DL6U2SRa0YhPEpV3GAh8", "content": "", "creation_timestamp": "2026-09-25T09:00:04.000000Z"}]}