{"schema_version":"2","view":"grouped","data":[{"id":46103,"cve_ids":["CVE-2026-86961"],"payload":{"kind":"advisory","title":"CVE-2026-86961","summary":"A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.","evidence":"cve:CVE-2026-86961","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86961","aliases":["CVE-2026-86961"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:14.136Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86961","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:14.136Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:55.945Z"}}},"related_cves":[{"value":"CVE-2026-86961","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:67dc5460-df2d-45cf-9c16-682cb8a428b2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86961","advisory_id":"67dc5460-df2d-45cf-9c16-682cb8a428b2","event_types":["advisory"],"published_at":"2026-10-25T12:37:11.61576+00:00","technologies":["core-cve","ios-and-ipados","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:55.945+00:00","detail_url":"/advisories/advisory%3A67dc5460-df2d-45cf-9c16-682cb8a428b2","group":{"id":"advisory:67dc5460-df2d-45cf-9c16-682cb8a428b2","revision":1,"primary_event_id":45659,"change":"published","superseded_by":[],"changed":{"id":45659,"cve_ids":["CVE-2026-86961"],"payload":{"kind":"advisory","title":"CVE-2026-86961","summary":"A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.","evidence":"cve:CVE-2026-86961","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86961","aliases":["CVE-2026-86961"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:14.136Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86961","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:14.136Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:55.945Z"}}},"related_cves":[{"value":"CVE-2026-86961","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:67dc5460-df2d-45cf-9c16-682cb8a428b2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86961","advisory_id":"67dc5460-df2d-45cf-9c16-682cb8a428b2","event_types":["advisory"],"published_at":"2026-10-25T12:37:11.61576+00:00","technologies":["core-cve","ios-and-ipados","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:55.945+00:00","detail_url":"/events/45659"},"members":[{"id":45659,"cve_ids":["CVE-2026-86961"],"payload":{"kind":"advisory","title":"CVE-2026-86961","summary":"A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.","evidence":"cve:CVE-2026-86961","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86961","aliases":["CVE-2026-86961"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:14.136Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86961","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:14.136Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:55.945Z"}}},"related_cves":[{"value":"CVE-2026-86961","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:67dc5460-df2d-45cf-9c16-682cb8a428b2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86961","advisory_id":"67dc5460-df2d-45cf-9c16-682cb8a428b2","event_types":["advisory"],"published_at":"2026-10-25T12:37:11.61576+00:00","technologies":["core-cve","ios-and-ipados","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:55.945+00:00","detail_url":"/events/45659"}]}},{"id":46100,"cve_ids":["CVE-2026-86922"],"payload":{"kind":"advisory","title":"CVE-2026-86922","summary":"A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously crafted web content may lead to arbitrary code execution.","evidence":"cve:CVE-2026-86922","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86922","aliases":["CVE-2026-86922"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:11.279Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86922","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:11.279Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:52.280Z"}}},"related_cves":[{"value":"CVE-2026-86922","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:de1ce12f-a15c-4d92-b1af-f7255f1810cc","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86922","advisory_id":"de1ce12f-a15c-4d92-b1af-f7255f1810cc","event_types":["advisory"],"published_at":"2026-10-25T12:37:09.448923+00:00","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:52.28+00:00","detail_url":"/advisories/advisory%3Ade1ce12f-a15c-4d92-b1af-f7255f1810cc","group":{"id":"advisory:de1ce12f-a15c-4d92-b1af-f7255f1810cc","revision":1,"primary_event_id":45656,"change":"published","superseded_by":[],"changed":{"id":45656,"cve_ids":["CVE-2026-86922"],"payload":{"kind":"advisory","title":"CVE-2026-86922","summary":"A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously crafted web content may lead to arbitrary code execution.","evidence":"cve:CVE-2026-86922","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86922","aliases":["CVE-2026-86922"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:11.279Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86922","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:11.279Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:52.280Z"}}},"related_cves":[{"value":"CVE-2026-86922","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:de1ce12f-a15c-4d92-b1af-f7255f1810cc","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86922","advisory_id":"de1ce12f-a15c-4d92-b1af-f7255f1810cc","event_types":["advisory"],"published_at":"2026-10-25T12:37:09.448923+00:00","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:52.28+00:00","detail_url":"/events/45656"},"members":[{"id":45656,"cve_ids":["CVE-2026-86922"],"payload":{"kind":"advisory","title":"CVE-2026-86922","summary":"A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously crafted web content may lead to arbitrary code execution.","evidence":"cve:CVE-2026-86922","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86922","aliases":["CVE-2026-86922"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:11.279Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86922","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:11.279Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:52.280Z"}}},"related_cves":[{"value":"CVE-2026-86922","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:de1ce12f-a15c-4d92-b1af-f7255f1810cc","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86922","advisory_id":"de1ce12f-a15c-4d92-b1af-f7255f1810cc","event_types":["advisory"],"published_at":"2026-10-25T12:37:09.448923+00:00","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:52.28+00:00","detail_url":"/events/45656"}]}},{"id":46099,"cve_ids":["CVE-2026-86919"],"payload":{"kind":"advisory","title":"CVE-2026-86919","summary":"A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.","evidence":"cve:CVE-2026-86919","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86919","aliases":["CVE-2026-86919"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:16.541Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"ADJACENT_NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86919","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-121","description":"CWE-121 Stack-based Buffer Overflow"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:16.541Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.749Z"}}},"related_cves":[{"value":"CVE-2026-86919","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cb5eb559-93eb-45b4-89f6-1b4f63f51ba5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86919","advisory_id":"cb5eb559-93eb-45b4-89f6-1b4f63f51ba5","event_types":["advisory"],"published_at":"2026-10-25T12:37:08.837816+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.749+00:00","detail_url":"/advisories/advisory%3Acb5eb559-93eb-45b4-89f6-1b4f63f51ba5","group":{"id":"advisory:cb5eb559-93eb-45b4-89f6-1b4f63f51ba5","revision":1,"primary_event_id":45655,"change":"published","superseded_by":[],"changed":{"id":45655,"cve_ids":["CVE-2026-86919"],"payload":{"kind":"advisory","title":"CVE-2026-86919","summary":"A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.","evidence":"cve:CVE-2026-86919","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86919","aliases":["CVE-2026-86919"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:16.541Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"ADJACENT_NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86919","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-121","description":"CWE-121 Stack-based Buffer Overflow"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:16.541Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.749Z"}}},"related_cves":[{"value":"CVE-2026-86919","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cb5eb559-93eb-45b4-89f6-1b4f63f51ba5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86919","advisory_id":"cb5eb559-93eb-45b4-89f6-1b4f63f51ba5","event_types":["advisory"],"published_at":"2026-10-25T12:37:08.837816+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.749+00:00","detail_url":"/events/45655"},"members":[{"id":45655,"cve_ids":["CVE-2026-86919"],"payload":{"kind":"advisory","title":"CVE-2026-86919","summary":"A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.","evidence":"cve:CVE-2026-86919","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86919","aliases":["CVE-2026-86919"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:16.541Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"ADJACENT_NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86919","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-121","description":"CWE-121 Stack-based Buffer Overflow"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:16.541Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.749Z"}}},"related_cves":[{"value":"CVE-2026-86919","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cb5eb559-93eb-45b4-89f6-1b4f63f51ba5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86919","advisory_id":"cb5eb559-93eb-45b4-89f6-1b4f63f51ba5","event_types":["advisory"],"published_at":"2026-10-25T12:37:08.837816+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.749+00:00","detail_url":"/events/45655"}]}},{"id":46097,"cve_ids":["CVE-2026-84579"],"payload":{"kind":"advisory","title":"CVE-2026-84579","summary":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing a network share may lead to unexpected software execution.","evidence":"cve:CVE-2026-84579","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84579","aliases":["CVE-2026-84579"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:23.356Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-84579","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:23.356Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:37.488Z"}}},"related_cves":[{"value":"CVE-2026-84579","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5755eee9-b4d1-48f7-9c44-114737260ae1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84579","advisory_id":"5755eee9-b4d1-48f7-9c44-114737260ae1","event_types":["advisory"],"published_at":"2026-10-25T12:37:07.606205+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:37.488+00:00","detail_url":"/advisories/advisory%3A5755eee9-b4d1-48f7-9c44-114737260ae1","group":{"id":"advisory:5755eee9-b4d1-48f7-9c44-114737260ae1","revision":1,"primary_event_id":45653,"change":"published","superseded_by":[],"changed":{"id":45653,"cve_ids":["CVE-2026-84579"],"payload":{"kind":"advisory","title":"CVE-2026-84579","summary":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing a network share may lead to unexpected software execution.","evidence":"cve:CVE-2026-84579","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84579","aliases":["CVE-2026-84579"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:23.356Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-84579","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:23.356Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:37.488Z"}}},"related_cves":[{"value":"CVE-2026-84579","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5755eee9-b4d1-48f7-9c44-114737260ae1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84579","advisory_id":"5755eee9-b4d1-48f7-9c44-114737260ae1","event_types":["advisory"],"published_at":"2026-10-25T12:37:07.606205+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:37.488+00:00","detail_url":"/events/45653"},"members":[{"id":45653,"cve_ids":["CVE-2026-84579"],"payload":{"kind":"advisory","title":"CVE-2026-84579","summary":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing a network share may lead to unexpected software execution.","evidence":"cve:CVE-2026-84579","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84579","aliases":["CVE-2026-84579"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:23.356Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-84579","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:23.356Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:37.488Z"}}},"related_cves":[{"value":"CVE-2026-84579","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5755eee9-b4d1-48f7-9c44-114737260ae1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84579","advisory_id":"5755eee9-b4d1-48f7-9c44-114737260ae1","event_types":["advisory"],"published_at":"2026-10-25T12:37:07.606205+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:37.488+00:00","detail_url":"/events/45653"}]}},{"id":46095,"cve_ids":["CVE-2026-28853"],"payload":{"kind":"advisory","title":"CVE-2026-28853","summary":"The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges.","evidence":"cve:CVE-2026-28853","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28853","aliases":["CVE-2026-28853"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"}]}],"modified":"2026-10-21T03:56:12.044Z","provider":"cve","references":["https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28853","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:12.044Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:04.575Z"}}},"related_cves":[{"value":"CVE-2026-28853","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:159c335d-46fa-4b21-ad63-a8a25234a0f1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28853","advisory_id":"159c335d-46fa-4b21-ad63-a8a25234a0f1","event_types":["advisory"],"published_at":"2026-10-25T12:37:06.369332+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:04.575+00:00","detail_url":"/advisories/advisory%3A159c335d-46fa-4b21-ad63-a8a25234a0f1","group":{"id":"advisory:159c335d-46fa-4b21-ad63-a8a25234a0f1","revision":1,"primary_event_id":45651,"change":"published","superseded_by":[],"changed":{"id":45651,"cve_ids":["CVE-2026-28853"],"payload":{"kind":"advisory","title":"CVE-2026-28853","summary":"The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges.","evidence":"cve:CVE-2026-28853","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28853","aliases":["CVE-2026-28853"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"}]}],"modified":"2026-10-21T03:56:12.044Z","provider":"cve","references":["https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28853","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:12.044Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:04.575Z"}}},"related_cves":[{"value":"CVE-2026-28853","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:159c335d-46fa-4b21-ad63-a8a25234a0f1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28853","advisory_id":"159c335d-46fa-4b21-ad63-a8a25234a0f1","event_types":["advisory"],"published_at":"2026-10-25T12:37:06.369332+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:04.575+00:00","detail_url":"/events/45651"},"members":[{"id":45651,"cve_ids":["CVE-2026-28853"],"payload":{"kind":"advisory","title":"CVE-2026-28853","summary":"The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges.","evidence":"cve:CVE-2026-28853","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28853","aliases":["CVE-2026-28853"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"}]}],"modified":"2026-10-21T03:56:12.044Z","provider":"cve","references":["https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28853","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:12.044Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:04.575Z"}}},"related_cves":[{"value":"CVE-2026-28853","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:159c335d-46fa-4b21-ad63-a8a25234a0f1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28853","advisory_id":"159c335d-46fa-4b21-ad63-a8a25234a0f1","event_types":["advisory"],"published_at":"2026-10-25T12:37:06.369332+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:04.575+00:00","detail_url":"/events/45651"}]}},{"id":42646,"cve_ids":["CVE-2026-86940"],"payload":{"kind":"advisory","title":"CVE-2026-86940","summary":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory.","evidence":"cve:CVE-2026-86940","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86940","aliases":["CVE-2026-86940"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T15:11:58.502Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86940","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T15:11:54.706701Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T15:11:58.502Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:53.575Z"}}},"related_cves":[{"value":"CVE-2026-86940","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:dd824c93-8fc7-4662-bb4b-2e6d1b3dd2cf","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86940","advisory_id":"dd824c93-8fc7-4662-bb4b-2e6d1b3dd2cf","event_types":["advisory"],"published_at":"2026-10-25T11:40:52.317927+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:53.575+00:00","detail_url":"/advisories/advisory%3Add824c93-8fc7-4662-bb4b-2e6d1b3dd2cf","group":{"id":"advisory:dd824c93-8fc7-4662-bb4b-2e6d1b3dd2cf","revision":1,"primary_event_id":42253,"change":"published","superseded_by":[],"changed":{"id":42253,"cve_ids":["CVE-2026-86940"],"payload":{"kind":"advisory","title":"CVE-2026-86940","summary":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory.","evidence":"cve:CVE-2026-86940","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86940","aliases":["CVE-2026-86940"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T15:11:58.502Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86940","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T15:11:54.706701Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T15:11:58.502Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:53.575Z"}}},"related_cves":[{"value":"CVE-2026-86940","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:dd824c93-8fc7-4662-bb4b-2e6d1b3dd2cf","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86940","advisory_id":"dd824c93-8fc7-4662-bb4b-2e6d1b3dd2cf","event_types":["advisory"],"published_at":"2026-10-25T11:40:52.317927+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:53.575+00:00","detail_url":"/events/42253"},"members":[{"id":42253,"cve_ids":["CVE-2026-86940"],"payload":{"kind":"advisory","title":"CVE-2026-86940","summary":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory.","evidence":"cve:CVE-2026-86940","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86940","aliases":["CVE-2026-86940"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T15:11:58.502Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86940","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T15:11:54.706701Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T15:11:58.502Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:53.575Z"}}},"related_cves":[{"value":"CVE-2026-86940","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:dd824c93-8fc7-4662-bb4b-2e6d1b3dd2cf","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86940","advisory_id":"dd824c93-8fc7-4662-bb4b-2e6d1b3dd2cf","event_types":["advisory"],"published_at":"2026-10-25T11:40:52.317927+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:53.575+00:00","detail_url":"/events/42253"}]}},{"id":42627,"cve_ids":["CVE-2026-86933"],"payload":{"kind":"advisory","title":"CVE-2026-86933","summary":"A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contacts.","evidence":"cve:CVE-2026-86933","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86933","aliases":["CVE-2026-86933"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:57:08.355Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"LOCAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86933","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:57:04.848929Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:57:08.355Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:53.052Z"}}},"related_cves":[{"value":"CVE-2026-86933","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:23b5e674-26e7-4ca7-8b74-ffa192192a56","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86933","advisory_id":"23b5e674-26e7-4ca7-8b74-ffa192192a56","event_types":["advisory"],"published_at":"2026-10-25T11:40:39.888518+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:53.052+00:00","detail_url":"/advisories/advisory%3A23b5e674-26e7-4ca7-8b74-ffa192192a56","group":{"id":"advisory:23b5e674-26e7-4ca7-8b74-ffa192192a56","revision":1,"primary_event_id":42234,"change":"published","superseded_by":[],"changed":{"id":42234,"cve_ids":["CVE-2026-86933"],"payload":{"kind":"advisory","title":"CVE-2026-86933","summary":"A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contacts.","evidence":"cve:CVE-2026-86933","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86933","aliases":["CVE-2026-86933"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:57:08.355Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"LOCAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86933","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:57:04.848929Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:57:08.355Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:53.052Z"}}},"related_cves":[{"value":"CVE-2026-86933","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:23b5e674-26e7-4ca7-8b74-ffa192192a56","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86933","advisory_id":"23b5e674-26e7-4ca7-8b74-ffa192192a56","event_types":["advisory"],"published_at":"2026-10-25T11:40:39.888518+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:53.052+00:00","detail_url":"/events/42234"},"members":[{"id":42234,"cve_ids":["CVE-2026-86933"],"payload":{"kind":"advisory","title":"CVE-2026-86933","summary":"A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contacts.","evidence":"cve:CVE-2026-86933","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86933","aliases":["CVE-2026-86933"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:57:08.355Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"LOCAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86933","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:57:04.848929Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:57:08.355Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:53.052Z"}}},"related_cves":[{"value":"CVE-2026-86933","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:23b5e674-26e7-4ca7-8b74-ffa192192a56","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86933","advisory_id":"23b5e674-26e7-4ca7-8b74-ffa192192a56","event_types":["advisory"],"published_at":"2026-10-25T11:40:39.888518+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:53.052+00:00","detail_url":"/events/42234"}]}},{"id":42626,"cve_ids":["CVE-2026-86913"],"payload":{"kind":"advisory","title":"CVE-2026-86913","summary":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.","evidence":"cve:CVE-2026-86913","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86913","aliases":["CVE-2026-86913"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:56:36.638Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86913","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:56:33.198658Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:56:36.638Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:50.060Z"}}},"related_cves":[{"value":"CVE-2026-86913","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:12aeb3f8-8840-4cee-84e7-0d3305242ea4","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86913","advisory_id":"12aeb3f8-8840-4cee-84e7-0d3305242ea4","event_types":["advisory"],"published_at":"2026-10-25T11:40:38.931463+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:50.06+00:00","detail_url":"/advisories/advisory%3A12aeb3f8-8840-4cee-84e7-0d3305242ea4","group":{"id":"advisory:12aeb3f8-8840-4cee-84e7-0d3305242ea4","revision":1,"primary_event_id":42233,"change":"published","superseded_by":[],"changed":{"id":42233,"cve_ids":["CVE-2026-86913"],"payload":{"kind":"advisory","title":"CVE-2026-86913","summary":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.","evidence":"cve:CVE-2026-86913","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86913","aliases":["CVE-2026-86913"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:56:36.638Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86913","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:56:33.198658Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:56:36.638Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:50.060Z"}}},"related_cves":[{"value":"CVE-2026-86913","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:12aeb3f8-8840-4cee-84e7-0d3305242ea4","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86913","advisory_id":"12aeb3f8-8840-4cee-84e7-0d3305242ea4","event_types":["advisory"],"published_at":"2026-10-25T11:40:38.931463+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:50.06+00:00","detail_url":"/events/42233"},"members":[{"id":42233,"cve_ids":["CVE-2026-86913"],"payload":{"kind":"advisory","title":"CVE-2026-86913","summary":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.","evidence":"cve:CVE-2026-86913","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86913","aliases":["CVE-2026-86913"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:56:36.638Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86913","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:56:33.198658Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:56:36.638Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:50.060Z"}}},"related_cves":[{"value":"CVE-2026-86913","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:12aeb3f8-8840-4cee-84e7-0d3305242ea4","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86913","advisory_id":"12aeb3f8-8840-4cee-84e7-0d3305242ea4","event_types":["advisory"],"published_at":"2026-10-25T11:40:38.931463+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:50.06+00:00","detail_url":"/events/42233"}]}},{"id":42624,"cve_ids":["CVE-2026-84508"],"payload":{"kind":"advisory","title":"CVE-2026-84508","summary":"This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, visionOS 27. An app may be able to access protected user data.","evidence":"cve:CVE-2026-84508","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84508","aliases":["CVE-2026-84508"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:55:43.182Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149042"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84508","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:55:35.320274Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-284","description":"CWE-284 Improper Access Control"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:55:43.182Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:27.719Z"}}},"related_cves":[{"value":"CVE-2026-84508","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:20f0cf5c-69ed-4a0b-94d0-fd9a3cd97db8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84508","advisory_id":"20f0cf5c-69ed-4a0b-94d0-fd9a3cd97db8","event_types":["advisory"],"published_at":"2026-10-25T11:40:37.466238+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:27.719+00:00","detail_url":"/advisories/advisory%3A20f0cf5c-69ed-4a0b-94d0-fd9a3cd97db8","group":{"id":"advisory:20f0cf5c-69ed-4a0b-94d0-fd9a3cd97db8","revision":1,"primary_event_id":42231,"change":"published","superseded_by":[],"changed":{"id":42231,"cve_ids":["CVE-2026-84508"],"payload":{"kind":"advisory","title":"CVE-2026-84508","summary":"This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, visionOS 27. An app may be able to access protected user data.","evidence":"cve:CVE-2026-84508","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84508","aliases":["CVE-2026-84508"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:55:43.182Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149042"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84508","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:55:35.320274Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-284","description":"CWE-284 Improper Access Control"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:55:43.182Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:27.719Z"}}},"related_cves":[{"value":"CVE-2026-84508","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:20f0cf5c-69ed-4a0b-94d0-fd9a3cd97db8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84508","advisory_id":"20f0cf5c-69ed-4a0b-94d0-fd9a3cd97db8","event_types":["advisory"],"published_at":"2026-10-25T11:40:37.466238+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:27.719+00:00","detail_url":"/events/42231"},"members":[{"id":42231,"cve_ids":["CVE-2026-84508"],"payload":{"kind":"advisory","title":"CVE-2026-84508","summary":"This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, visionOS 27. An app may be able to access protected user data.","evidence":"cve:CVE-2026-84508","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84508","aliases":["CVE-2026-84508"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:55:43.182Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149042"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84508","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:55:35.320274Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-284","description":"CWE-284 Improper Access Control"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:55:43.182Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:27.719Z"}}},"related_cves":[{"value":"CVE-2026-84508","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:20f0cf5c-69ed-4a0b-94d0-fd9a3cd97db8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84508","advisory_id":"20f0cf5c-69ed-4a0b-94d0-fd9a3cd97db8","event_types":["advisory"],"published_at":"2026-10-25T11:40:37.466238+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:27.719+00:00","detail_url":"/events/42231"}]}},{"id":42621,"cve_ids":["CVE-2026-86907"],"payload":{"kind":"advisory","title":"CVE-2026-86907","summary":"An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain.","evidence":"cve:CVE-2026-86907","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86907","aliases":["CVE-2026-86907"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"}]}],"modified":"2026-10-20T14:52:37.948Z","provider":"cve","references":["https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86907","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:52:34.585332Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:52:37.948Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:48.689Z"}}},"related_cves":[{"value":"CVE-2026-86907","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a35bf984-3fd9-4701-839b-af4956d56db6","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86907","advisory_id":"a35bf984-3fd9-4701-839b-af4956d56db6","event_types":["advisory"],"published_at":"2026-10-25T11:40:35.031051+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:48.689+00:00","detail_url":"/advisories/advisory%3Aa35bf984-3fd9-4701-839b-af4956d56db6","group":{"id":"advisory:a35bf984-3fd9-4701-839b-af4956d56db6","revision":1,"primary_event_id":42228,"change":"published","superseded_by":[],"changed":{"id":42228,"cve_ids":["CVE-2026-86907"],"payload":{"kind":"advisory","title":"CVE-2026-86907","summary":"An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain.","evidence":"cve:CVE-2026-86907","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86907","aliases":["CVE-2026-86907"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"}]}],"modified":"2026-10-20T14:52:37.948Z","provider":"cve","references":["https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86907","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:52:34.585332Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:52:37.948Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:48.689Z"}}},"related_cves":[{"value":"CVE-2026-86907","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a35bf984-3fd9-4701-839b-af4956d56db6","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86907","advisory_id":"a35bf984-3fd9-4701-839b-af4956d56db6","event_types":["advisory"],"published_at":"2026-10-25T11:40:35.031051+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:48.689+00:00","detail_url":"/events/42228"},"members":[{"id":42228,"cve_ids":["CVE-2026-86907"],"payload":{"kind":"advisory","title":"CVE-2026-86907","summary":"An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain.","evidence":"cve:CVE-2026-86907","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86907","aliases":["CVE-2026-86907"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"}]}],"modified":"2026-10-20T14:52:37.948Z","provider":"cve","references":["https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86907","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:52:34.585332Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:52:37.948Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:48.689Z"}}},"related_cves":[{"value":"CVE-2026-86907","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a35bf984-3fd9-4701-839b-af4956d56db6","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86907","advisory_id":"a35bf984-3fd9-4701-839b-af4956d56db6","event_types":["advisory"],"published_at":"2026-10-25T11:40:35.031051+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:48.689+00:00","detail_url":"/events/42228"}]}},{"id":42618,"cve_ids":["CVE-2026-65356"],"payload":{"kind":"advisory","title":"CVE-2026-65356","summary":"An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-65356","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65356","aliases":["CVE-2026-65356"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:49:58.132Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65356","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:49:54.337459Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-284","description":"CWE-284 Improper Access Control"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:49:58.132Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:18.455Z"}}},"related_cves":[{"value":"CVE-2026-65356","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:26a83088-402d-4c35-aaf4-352ca6594e52","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65356","advisory_id":"26a83088-402d-4c35-aaf4-352ca6594e52","event_types":["advisory"],"published_at":"2026-10-25T11:40:32.857395+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:18.455+00:00","detail_url":"/advisories/advisory%3A26a83088-402d-4c35-aaf4-352ca6594e52","group":{"id":"advisory:26a83088-402d-4c35-aaf4-352ca6594e52","revision":1,"primary_event_id":42225,"change":"published","superseded_by":[],"changed":{"id":42225,"cve_ids":["CVE-2026-65356"],"payload":{"kind":"advisory","title":"CVE-2026-65356","summary":"An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-65356","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65356","aliases":["CVE-2026-65356"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:49:58.132Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65356","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:49:54.337459Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-284","description":"CWE-284 Improper Access Control"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:49:58.132Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:18.455Z"}}},"related_cves":[{"value":"CVE-2026-65356","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:26a83088-402d-4c35-aaf4-352ca6594e52","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65356","advisory_id":"26a83088-402d-4c35-aaf4-352ca6594e52","event_types":["advisory"],"published_at":"2026-10-25T11:40:32.857395+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:18.455+00:00","detail_url":"/events/42225"},"members":[{"id":42225,"cve_ids":["CVE-2026-65356"],"payload":{"kind":"advisory","title":"CVE-2026-65356","summary":"An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-65356","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65356","aliases":["CVE-2026-65356"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:49:58.132Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65356","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:49:54.337459Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-284","description":"CWE-284 Improper Access Control"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:49:58.132Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:18.455Z"}}},"related_cves":[{"value":"CVE-2026-65356","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:26a83088-402d-4c35-aaf4-352ca6594e52","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65356","advisory_id":"26a83088-402d-4c35-aaf4-352ca6594e52","event_types":["advisory"],"published_at":"2026-10-25T11:40:32.857395+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:18.455+00:00","detail_url":"/events/42225"}]}},{"id":42615,"cve_ids":["CVE-2026-86871"],"payload":{"kind":"advisory","title":"CVE-2026-86871","summary":"An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a network file server may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86871","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86871","aliases":["CVE-2026-86871"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:39:35.352Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86871","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:39:26.599060Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-190","description":"CWE-190 Integer Overflow or Wraparound"},{"lang":"en","type":"CWE","cweId":"CWE-20","description":"CWE-20 Improper Input Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:39:35.352Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:43.774Z"}}},"related_cves":[{"value":"CVE-2026-86871","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:fa712f06-4902-41a2-9fab-f596720f7d40","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86871","advisory_id":"fa712f06-4902-41a2-9fab-f596720f7d40","event_types":["advisory"],"published_at":"2026-10-25T11:40:30.707471+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:43.774+00:00","detail_url":"/advisories/advisory%3Afa712f06-4902-41a2-9fab-f596720f7d40","group":{"id":"advisory:fa712f06-4902-41a2-9fab-f596720f7d40","revision":1,"primary_event_id":42222,"change":"published","superseded_by":[],"changed":{"id":42222,"cve_ids":["CVE-2026-86871"],"payload":{"kind":"advisory","title":"CVE-2026-86871","summary":"An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a network file server may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86871","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86871","aliases":["CVE-2026-86871"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:39:35.352Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86871","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:39:26.599060Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-190","description":"CWE-190 Integer Overflow or Wraparound"},{"lang":"en","type":"CWE","cweId":"CWE-20","description":"CWE-20 Improper Input Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:39:35.352Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:43.774Z"}}},"related_cves":[{"value":"CVE-2026-86871","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:fa712f06-4902-41a2-9fab-f596720f7d40","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86871","advisory_id":"fa712f06-4902-41a2-9fab-f596720f7d40","event_types":["advisory"],"published_at":"2026-10-25T11:40:30.707471+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:43.774+00:00","detail_url":"/events/42222"},"members":[{"id":42222,"cve_ids":["CVE-2026-86871"],"payload":{"kind":"advisory","title":"CVE-2026-86871","summary":"An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a network file server may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86871","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86871","aliases":["CVE-2026-86871"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:39:35.352Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86871","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:39:26.599060Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-190","description":"CWE-190 Integer Overflow or Wraparound"},{"lang":"en","type":"CWE","cweId":"CWE-20","description":"CWE-20 Improper Input Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:39:35.352Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:43.774Z"}}},"related_cves":[{"value":"CVE-2026-86871","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:fa712f06-4902-41a2-9fab-f596720f7d40","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86871","advisory_id":"fa712f06-4902-41a2-9fab-f596720f7d40","event_types":["advisory"],"published_at":"2026-10-25T11:40:30.707471+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:43.774+00:00","detail_url":"/events/42222"}]}},{"id":42613,"cve_ids":["CVE-2026-84547"],"payload":{"kind":"advisory","title":"CVE-2026-84547","summary":"A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in physical proximity may be able to corrupt process memory.","evidence":"cve:CVE-2026-84547","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84547","aliases":["CVE-2026-84547"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:40:38.625Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.5,"attackVector":"PHYSICAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84547","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:40:35.163150Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-20","description":"CWE-20 Improper Input Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:40:38.625Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:32.556Z"}}},"related_cves":[{"value":"CVE-2026-84547","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:920810cf-09ee-442c-93fc-fa6d370a36c1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84547","advisory_id":"920810cf-09ee-442c-93fc-fa6d370a36c1","event_types":["advisory"],"published_at":"2026-10-25T11:40:29.446292+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:32.556+00:00","detail_url":"/advisories/advisory%3A920810cf-09ee-442c-93fc-fa6d370a36c1","group":{"id":"advisory:920810cf-09ee-442c-93fc-fa6d370a36c1","revision":1,"primary_event_id":42220,"change":"published","superseded_by":[],"changed":{"id":42220,"cve_ids":["CVE-2026-84547"],"payload":{"kind":"advisory","title":"CVE-2026-84547","summary":"A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in physical proximity may be able to corrupt process memory.","evidence":"cve:CVE-2026-84547","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84547","aliases":["CVE-2026-84547"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:40:38.625Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.5,"attackVector":"PHYSICAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84547","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:40:35.163150Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-20","description":"CWE-20 Improper Input Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:40:38.625Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:32.556Z"}}},"related_cves":[{"value":"CVE-2026-84547","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:920810cf-09ee-442c-93fc-fa6d370a36c1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84547","advisory_id":"920810cf-09ee-442c-93fc-fa6d370a36c1","event_types":["advisory"],"published_at":"2026-10-25T11:40:29.446292+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:32.556+00:00","detail_url":"/events/42220"},"members":[{"id":42220,"cve_ids":["CVE-2026-84547"],"payload":{"kind":"advisory","title":"CVE-2026-84547","summary":"A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in physical proximity may be able to corrupt process memory.","evidence":"cve:CVE-2026-84547","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84547","aliases":["CVE-2026-84547"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:40:38.625Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.5,"attackVector":"PHYSICAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84547","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:40:35.163150Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-20","description":"CWE-20 Improper Input Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:40:38.625Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:32.556Z"}}},"related_cves":[{"value":"CVE-2026-84547","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:920810cf-09ee-442c-93fc-fa6d370a36c1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84547","advisory_id":"920810cf-09ee-442c-93fc-fa6d370a36c1","event_types":["advisory"],"published_at":"2026-10-25T11:40:29.446292+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:32.556+00:00","detail_url":"/events/42220"}]}},{"id":42611,"cve_ids":["CVE-2026-65372"],"payload":{"kind":"advisory","title":"CVE-2026-65372","summary":"A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to bypass Privacy preferences.","evidence":"cve:CVE-2026-65372","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65372","aliases":["CVE-2026-65372"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:43:12.174Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65372","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:43:09.047798Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:43:12.174Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:20.546Z"}}},"related_cves":[{"value":"CVE-2026-65372","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:de0ea005-d0f5-4d7a-976d-695fd8df83be","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65372","advisory_id":"de0ea005-d0f5-4d7a-976d-695fd8df83be","event_types":["advisory"],"published_at":"2026-10-25T11:40:27.839733+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:20.546+00:00","detail_url":"/advisories/advisory%3Ade0ea005-d0f5-4d7a-976d-695fd8df83be","group":{"id":"advisory:de0ea005-d0f5-4d7a-976d-695fd8df83be","revision":1,"primary_event_id":42218,"change":"published","superseded_by":[],"changed":{"id":42218,"cve_ids":["CVE-2026-65372"],"payload":{"kind":"advisory","title":"CVE-2026-65372","summary":"A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to bypass Privacy preferences.","evidence":"cve:CVE-2026-65372","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65372","aliases":["CVE-2026-65372"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:43:12.174Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65372","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:43:09.047798Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:43:12.174Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:20.546Z"}}},"related_cves":[{"value":"CVE-2026-65372","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:de0ea005-d0f5-4d7a-976d-695fd8df83be","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65372","advisory_id":"de0ea005-d0f5-4d7a-976d-695fd8df83be","event_types":["advisory"],"published_at":"2026-10-25T11:40:27.839733+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:20.546+00:00","detail_url":"/events/42218"},"members":[{"id":42218,"cve_ids":["CVE-2026-65372"],"payload":{"kind":"advisory","title":"CVE-2026-65372","summary":"A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to bypass Privacy preferences.","evidence":"cve:CVE-2026-65372","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65372","aliases":["CVE-2026-65372"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:43:12.174Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65372","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:43:09.047798Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:43:12.174Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:20.546Z"}}},"related_cves":[{"value":"CVE-2026-65372","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:de0ea005-d0f5-4d7a-976d-695fd8df83be","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65372","advisory_id":"de0ea005-d0f5-4d7a-976d-695fd8df83be","event_types":["advisory"],"published_at":"2026-10-25T11:40:27.839733+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:20.546+00:00","detail_url":"/events/42218"}]}},{"id":42592,"cve_ids":["CVE-2026-86918"],"payload":{"kind":"advisory","title":"CVE-2026-86918","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.","evidence":"cve:CVE-2026-86918","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86918","aliases":["CVE-2026-86918"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:04:01.561Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86918","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:03:57.696685Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:04:01.561Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.428Z"}}},"related_cves":[{"value":"CVE-2026-86918","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86918","advisory_id":"2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","event_types":["advisory"],"published_at":"2026-10-25T11:40:16.045756+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.428+00:00","detail_url":"/advisories/advisory%3A2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","group":{"id":"advisory:2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","revision":1,"primary_event_id":42200,"change":"published","superseded_by":[],"changed":{"id":42200,"cve_ids":["CVE-2026-86918"],"payload":{"kind":"advisory","title":"CVE-2026-86918","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.","evidence":"cve:CVE-2026-86918","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86918","aliases":["CVE-2026-86918"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:04:01.561Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86918","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:03:57.696685Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:04:01.561Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.428Z"}}},"related_cves":[{"value":"CVE-2026-86918","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86918","advisory_id":"2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","event_types":["advisory"],"published_at":"2026-10-25T11:40:16.045756+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.428+00:00","detail_url":"/events/42200"},"members":[{"id":42200,"cve_ids":["CVE-2026-86918"],"payload":{"kind":"advisory","title":"CVE-2026-86918","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.","evidence":"cve:CVE-2026-86918","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86918","aliases":["CVE-2026-86918"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:04:01.561Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86918","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:03:57.696685Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:04:01.561Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.428Z"}}},"related_cves":[{"value":"CVE-2026-86918","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86918","advisory_id":"2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","event_types":["advisory"],"published_at":"2026-10-25T11:40:16.045756+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.428+00:00","detail_url":"/events/42200"}]}},{"id":42591,"cve_ids":["CVE-2026-86915"],"payload":{"kind":"advisory","title":"CVE-2026-86915","summary":"A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86915","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86915","aliases":["CVE-2026-86915"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:06:18.530Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86915","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:06:12.653801Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:06:18.530Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:50.781Z"}}},"related_cves":[{"value":"CVE-2026-86915","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2c684427-c33e-4349-993c-67119d517265","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86915","advisory_id":"2c684427-c33e-4349-993c-67119d517265","event_types":["advisory"],"published_at":"2026-10-25T11:40:15.373789+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:50.781+00:00","detail_url":"/advisories/advisory%3A2c684427-c33e-4349-993c-67119d517265","group":{"id":"advisory:2c684427-c33e-4349-993c-67119d517265","revision":1,"primary_event_id":42199,"change":"published","superseded_by":[],"changed":{"id":42199,"cve_ids":["CVE-2026-86915"],"payload":{"kind":"advisory","title":"CVE-2026-86915","summary":"A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86915","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86915","aliases":["CVE-2026-86915"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:06:18.530Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86915","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:06:12.653801Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:06:18.530Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:50.781Z"}}},"related_cves":[{"value":"CVE-2026-86915","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2c684427-c33e-4349-993c-67119d517265","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86915","advisory_id":"2c684427-c33e-4349-993c-67119d517265","event_types":["advisory"],"published_at":"2026-10-25T11:40:15.373789+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:50.781+00:00","detail_url":"/events/42199"},"members":[{"id":42199,"cve_ids":["CVE-2026-86915"],"payload":{"kind":"advisory","title":"CVE-2026-86915","summary":"A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86915","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86915","aliases":["CVE-2026-86915"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:06:18.530Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86915","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:06:12.653801Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:06:18.530Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:50.781Z"}}},"related_cves":[{"value":"CVE-2026-86915","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2c684427-c33e-4349-993c-67119d517265","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86915","advisory_id":"2c684427-c33e-4349-993c-67119d517265","event_types":["advisory"],"published_at":"2026-10-25T11:40:15.373789+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:50.781+00:00","detail_url":"/events/42199"}]}},{"id":42590,"cve_ids":["CVE-2026-86914"],"payload":{"kind":"advisory","title":"CVE-2026-86914","summary":"An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive network connection information.","evidence":"cve:CVE-2026-86914","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86914","aliases":["CVE-2026-86914"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:07:01.448Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86914","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:06:57.170538Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:07:01.448Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:50.384Z"}}},"related_cves":[{"value":"CVE-2026-86914","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:41babc8a-3e78-4864-b747-3dd466c16b63","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86914","advisory_id":"41babc8a-3e78-4864-b747-3dd466c16b63","event_types":["advisory"],"published_at":"2026-10-25T11:40:14.757964+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:50.384+00:00","detail_url":"/advisories/advisory%3A41babc8a-3e78-4864-b747-3dd466c16b63","group":{"id":"advisory:41babc8a-3e78-4864-b747-3dd466c16b63","revision":1,"primary_event_id":42198,"change":"published","superseded_by":[],"changed":{"id":42198,"cve_ids":["CVE-2026-86914"],"payload":{"kind":"advisory","title":"CVE-2026-86914","summary":"An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive network connection information.","evidence":"cve:CVE-2026-86914","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86914","aliases":["CVE-2026-86914"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:07:01.448Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86914","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:06:57.170538Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:07:01.448Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:50.384Z"}}},"related_cves":[{"value":"CVE-2026-86914","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:41babc8a-3e78-4864-b747-3dd466c16b63","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86914","advisory_id":"41babc8a-3e78-4864-b747-3dd466c16b63","event_types":["advisory"],"published_at":"2026-10-25T11:40:14.757964+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:50.384+00:00","detail_url":"/events/42198"},"members":[{"id":42198,"cve_ids":["CVE-2026-86914"],"payload":{"kind":"advisory","title":"CVE-2026-86914","summary":"An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive network connection information.","evidence":"cve:CVE-2026-86914","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86914","aliases":["CVE-2026-86914"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:07:01.448Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86914","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:06:57.170538Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:07:01.448Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:50.384Z"}}},"related_cves":[{"value":"CVE-2026-86914","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:41babc8a-3e78-4864-b747-3dd466c16b63","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86914","advisory_id":"41babc8a-3e78-4864-b747-3dd466c16b63","event_types":["advisory"],"published_at":"2026-10-25T11:40:14.757964+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:50.384+00:00","detail_url":"/events/42198"}]}},{"id":42589,"cve_ids":["CVE-2026-65379"],"payload":{"kind":"advisory","title":"CVE-2026-65379","summary":"The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-65379","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65379","aliases":["CVE-2026-65379"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:08:29.527Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65379","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:08:25.927852Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"},{"lang":"en","type":"CWE","cweId":"CWE-284","description":"CWE-284 Improper Access Control"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:08:29.527Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:22.118Z"}}},"related_cves":[{"value":"CVE-2026-65379","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:989a002d-4d90-4ac6-8100-38a6898184ff","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65379","advisory_id":"989a002d-4d90-4ac6-8100-38a6898184ff","event_types":["advisory"],"published_at":"2026-10-25T11:40:13.947424+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:22.118+00:00","detail_url":"/advisories/advisory%3A989a002d-4d90-4ac6-8100-38a6898184ff","group":{"id":"advisory:989a002d-4d90-4ac6-8100-38a6898184ff","revision":1,"primary_event_id":42197,"change":"published","superseded_by":[],"changed":{"id":42197,"cve_ids":["CVE-2026-65379"],"payload":{"kind":"advisory","title":"CVE-2026-65379","summary":"The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-65379","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65379","aliases":["CVE-2026-65379"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:08:29.527Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65379","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:08:25.927852Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"},{"lang":"en","type":"CWE","cweId":"CWE-284","description":"CWE-284 Improper Access Control"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:08:29.527Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:22.118Z"}}},"related_cves":[{"value":"CVE-2026-65379","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:989a002d-4d90-4ac6-8100-38a6898184ff","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65379","advisory_id":"989a002d-4d90-4ac6-8100-38a6898184ff","event_types":["advisory"],"published_at":"2026-10-25T11:40:13.947424+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:22.118+00:00","detail_url":"/events/42197"},"members":[{"id":42197,"cve_ids":["CVE-2026-65379"],"payload":{"kind":"advisory","title":"CVE-2026-65379","summary":"The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-65379","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65379","aliases":["CVE-2026-65379"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:08:29.527Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65379","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:08:25.927852Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"},{"lang":"en","type":"CWE","cweId":"CWE-284","description":"CWE-284 Improper Access Control"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:08:29.527Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:22.118Z"}}},"related_cves":[{"value":"CVE-2026-65379","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:989a002d-4d90-4ac6-8100-38a6898184ff","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65379","advisory_id":"989a002d-4d90-4ac6-8100-38a6898184ff","event_types":["advisory"],"published_at":"2026-10-25T11:40:13.947424+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:22.118+00:00","detail_url":"/events/42197"}]}},{"id":42588,"cve_ids":["CVE-2026-84613"],"payload":{"kind":"advisory","title":"CVE-2026-84613","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84613","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84613","aliases":["CVE-2026-84613"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:15:45.219Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84613","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:15:39.298444Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:15:45.219Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:39.589Z"}}},"related_cves":[{"value":"CVE-2026-84613","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ddc64785-f366-4983-aedf-f9441cdff321","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84613","advisory_id":"ddc64785-f366-4983-aedf-f9441cdff321","event_types":["advisory"],"published_at":"2026-10-25T11:40:13.341373+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:39.589+00:00","detail_url":"/advisories/advisory%3Addc64785-f366-4983-aedf-f9441cdff321","group":{"id":"advisory:ddc64785-f366-4983-aedf-f9441cdff321","revision":1,"primary_event_id":42196,"change":"published","superseded_by":[],"changed":{"id":42196,"cve_ids":["CVE-2026-84613"],"payload":{"kind":"advisory","title":"CVE-2026-84613","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84613","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84613","aliases":["CVE-2026-84613"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:15:45.219Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84613","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:15:39.298444Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:15:45.219Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:39.589Z"}}},"related_cves":[{"value":"CVE-2026-84613","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ddc64785-f366-4983-aedf-f9441cdff321","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84613","advisory_id":"ddc64785-f366-4983-aedf-f9441cdff321","event_types":["advisory"],"published_at":"2026-10-25T11:40:13.341373+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:39.589+00:00","detail_url":"/events/42196"},"members":[{"id":42196,"cve_ids":["CVE-2026-84613"],"payload":{"kind":"advisory","title":"CVE-2026-84613","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84613","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84613","aliases":["CVE-2026-84613"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:15:45.219Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84613","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:15:39.298444Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:15:45.219Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:39.589Z"}}},"related_cves":[{"value":"CVE-2026-84613","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ddc64785-f366-4983-aedf-f9441cdff321","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84613","advisory_id":"ddc64785-f366-4983-aedf-f9441cdff321","event_types":["advisory"],"published_at":"2026-10-25T11:40:13.341373+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:39.589+00:00","detail_url":"/events/42196"}]}},{"id":42587,"cve_ids":["CVE-2026-65396"],"payload":{"kind":"advisory","title":"CVE-2026-65396","summary":"A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-65396","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65396","aliases":["CVE-2026-65396"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:09:10.025Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65396","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:09:06.858948Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:09:10.025Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:23.850Z"}}},"related_cves":[{"value":"CVE-2026-65396","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6b475125-8678-4a26-ab86-1154dbf7f7ad","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65396","advisory_id":"6b475125-8678-4a26-ab86-1154dbf7f7ad","event_types":["advisory"],"published_at":"2026-10-25T11:40:12.528547+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:23.85+00:00","detail_url":"/advisories/advisory%3A6b475125-8678-4a26-ab86-1154dbf7f7ad","group":{"id":"advisory:6b475125-8678-4a26-ab86-1154dbf7f7ad","revision":1,"primary_event_id":42195,"change":"published","superseded_by":[],"changed":{"id":42195,"cve_ids":["CVE-2026-65396"],"payload":{"kind":"advisory","title":"CVE-2026-65396","summary":"A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-65396","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65396","aliases":["CVE-2026-65396"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:09:10.025Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65396","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:09:06.858948Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:09:10.025Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:23.850Z"}}},"related_cves":[{"value":"CVE-2026-65396","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6b475125-8678-4a26-ab86-1154dbf7f7ad","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65396","advisory_id":"6b475125-8678-4a26-ab86-1154dbf7f7ad","event_types":["advisory"],"published_at":"2026-10-25T11:40:12.528547+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:23.85+00:00","detail_url":"/events/42195"},"members":[{"id":42195,"cve_ids":["CVE-2026-65396"],"payload":{"kind":"advisory","title":"CVE-2026-65396","summary":"A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-65396","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65396","aliases":["CVE-2026-65396"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:09:10.025Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65396","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:09:06.858948Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:09:10.025Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:23.850Z"}}},"related_cves":[{"value":"CVE-2026-65396","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6b475125-8678-4a26-ab86-1154dbf7f7ad","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65396","advisory_id":"6b475125-8678-4a26-ab86-1154dbf7f7ad","event_types":["advisory"],"published_at":"2026-10-25T11:40:12.528547+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:23.85+00:00","detail_url":"/events/42195"}]}},{"id":42540,"cve_ids":["CVE-2026-86921"],"payload":{"kind":"advisory","title":"CVE-2026-86921","summary":"A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files.","evidence":"cve:CVE-2026-86921","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86921","aliases":["CVE-2026-86921"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:36:30.197Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86921","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:36:26.500383Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:36:30.197Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.993Z"}}},"related_cves":[{"value":"CVE-2026-86921","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e62cdc16-1aba-459d-aa2a-672d049aaa10","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86921","advisory_id":"e62cdc16-1aba-459d-aa2a-672d049aaa10","event_types":["advisory"],"published_at":"2026-10-25T11:39:37.760439+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.993+00:00","detail_url":"/advisories/advisory%3Ae62cdc16-1aba-459d-aa2a-672d049aaa10","group":{"id":"advisory:e62cdc16-1aba-459d-aa2a-672d049aaa10","revision":1,"primary_event_id":42148,"change":"published","superseded_by":[],"changed":{"id":42148,"cve_ids":["CVE-2026-86921"],"payload":{"kind":"advisory","title":"CVE-2026-86921","summary":"A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files.","evidence":"cve:CVE-2026-86921","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86921","aliases":["CVE-2026-86921"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:36:30.197Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86921","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:36:26.500383Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:36:30.197Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.993Z"}}},"related_cves":[{"value":"CVE-2026-86921","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e62cdc16-1aba-459d-aa2a-672d049aaa10","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86921","advisory_id":"e62cdc16-1aba-459d-aa2a-672d049aaa10","event_types":["advisory"],"published_at":"2026-10-25T11:39:37.760439+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.993+00:00","detail_url":"/events/42148"},"members":[{"id":42148,"cve_ids":["CVE-2026-86921"],"payload":{"kind":"advisory","title":"CVE-2026-86921","summary":"A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files.","evidence":"cve:CVE-2026-86921","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86921","aliases":["CVE-2026-86921"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:36:30.197Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86921","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:36:26.500383Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:36:30.197Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.993Z"}}},"related_cves":[{"value":"CVE-2026-86921","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e62cdc16-1aba-459d-aa2a-672d049aaa10","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86921","advisory_id":"e62cdc16-1aba-459d-aa2a-672d049aaa10","event_types":["advisory"],"published_at":"2026-10-25T11:39:37.760439+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.993+00:00","detail_url":"/events/42148"}]}},{"id":42539,"cve_ids":["CVE-2026-86979"],"payload":{"kind":"advisory","title":"CVE-2026-86979","summary":"A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-86979","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86979","aliases":["CVE-2026-86979"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:20:51.071Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86979","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:20:47.453274Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:20:51.071Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:57.694Z"}}},"related_cves":[{"value":"CVE-2026-86979","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e4d6a6d7-7639-4142-b9ac-af6bf945c914","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86979","advisory_id":"e4d6a6d7-7639-4142-b9ac-af6bf945c914","event_types":["advisory"],"published_at":"2026-10-25T11:39:36.928774+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:57.694+00:00","detail_url":"/advisories/advisory%3Ae4d6a6d7-7639-4142-b9ac-af6bf945c914","group":{"id":"advisory:e4d6a6d7-7639-4142-b9ac-af6bf945c914","revision":1,"primary_event_id":42147,"change":"published","superseded_by":[],"changed":{"id":42147,"cve_ids":["CVE-2026-86979"],"payload":{"kind":"advisory","title":"CVE-2026-86979","summary":"A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-86979","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86979","aliases":["CVE-2026-86979"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:20:51.071Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86979","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:20:47.453274Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:20:51.071Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:57.694Z"}}},"related_cves":[{"value":"CVE-2026-86979","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e4d6a6d7-7639-4142-b9ac-af6bf945c914","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86979","advisory_id":"e4d6a6d7-7639-4142-b9ac-af6bf945c914","event_types":["advisory"],"published_at":"2026-10-25T11:39:36.928774+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:57.694+00:00","detail_url":"/events/42147"},"members":[{"id":42147,"cve_ids":["CVE-2026-86979"],"payload":{"kind":"advisory","title":"CVE-2026-86979","summary":"A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-86979","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86979","aliases":["CVE-2026-86979"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:20:51.071Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86979","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:20:47.453274Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:20:51.071Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:57.694Z"}}},"related_cves":[{"value":"CVE-2026-86979","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e4d6a6d7-7639-4142-b9ac-af6bf945c914","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86979","advisory_id":"e4d6a6d7-7639-4142-b9ac-af6bf945c914","event_types":["advisory"],"published_at":"2026-10-25T11:39:36.928774+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:57.694+00:00","detail_url":"/events/42147"}]}},{"id":42538,"cve_ids":["CVE-2026-86957"],"payload":{"kind":"advisory","title":"CVE-2026-86957","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86957","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86957","aliases":["CVE-2026-86957"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:23:57.967Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86957","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:23:10.431694Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:23:57.967Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:55.409Z"}}},"related_cves":[{"value":"CVE-2026-86957","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:87d862a4-b47a-4424-bd98-344241a6d827","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86957","advisory_id":"87d862a4-b47a-4424-bd98-344241a6d827","event_types":["advisory"],"published_at":"2026-10-25T11:39:36.16581+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:55.409+00:00","detail_url":"/advisories/advisory%3A87d862a4-b47a-4424-bd98-344241a6d827","group":{"id":"advisory:87d862a4-b47a-4424-bd98-344241a6d827","revision":1,"primary_event_id":42146,"change":"published","superseded_by":[],"changed":{"id":42146,"cve_ids":["CVE-2026-86957"],"payload":{"kind":"advisory","title":"CVE-2026-86957","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86957","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86957","aliases":["CVE-2026-86957"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:23:57.967Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86957","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:23:10.431694Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:23:57.967Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:55.409Z"}}},"related_cves":[{"value":"CVE-2026-86957","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:87d862a4-b47a-4424-bd98-344241a6d827","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86957","advisory_id":"87d862a4-b47a-4424-bd98-344241a6d827","event_types":["advisory"],"published_at":"2026-10-25T11:39:36.16581+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:55.409+00:00","detail_url":"/events/42146"},"members":[{"id":42146,"cve_ids":["CVE-2026-86957"],"payload":{"kind":"advisory","title":"CVE-2026-86957","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86957","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86957","aliases":["CVE-2026-86957"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:23:57.967Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86957","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:23:10.431694Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:23:57.967Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:55.409Z"}}},"related_cves":[{"value":"CVE-2026-86957","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:87d862a4-b47a-4424-bd98-344241a6d827","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86957","advisory_id":"87d862a4-b47a-4424-bd98-344241a6d827","event_types":["advisory"],"published_at":"2026-10-25T11:39:36.16581+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:55.409+00:00","detail_url":"/events/42146"}]}},{"id":42537,"cve_ids":["CVE-2026-86976"],"payload":{"kind":"advisory","title":"CVE-2026-86976","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-86976","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86976","aliases":["CVE-2026-86976"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:21:47.180Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86976","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:21:43.629230Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:21:47.180Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:57.018Z"}}},"related_cves":[{"value":"CVE-2026-86976","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:03f38b39-5110-4c58-8033-1b1d485e8951","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86976","advisory_id":"03f38b39-5110-4c58-8033-1b1d485e8951","event_types":["advisory"],"published_at":"2026-10-25T11:39:35.065671+00:00","technologies":["core-cve","ios-and-ipados","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:57.018+00:00","detail_url":"/advisories/advisory%3A03f38b39-5110-4c58-8033-1b1d485e8951","group":{"id":"advisory:03f38b39-5110-4c58-8033-1b1d485e8951","revision":1,"primary_event_id":42145,"change":"published","superseded_by":[],"changed":{"id":42145,"cve_ids":["CVE-2026-86976"],"payload":{"kind":"advisory","title":"CVE-2026-86976","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-86976","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86976","aliases":["CVE-2026-86976"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:21:47.180Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86976","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:21:43.629230Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:21:47.180Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:57.018Z"}}},"related_cves":[{"value":"CVE-2026-86976","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:03f38b39-5110-4c58-8033-1b1d485e8951","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86976","advisory_id":"03f38b39-5110-4c58-8033-1b1d485e8951","event_types":["advisory"],"published_at":"2026-10-25T11:39:35.065671+00:00","technologies":["core-cve","ios-and-ipados","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:57.018+00:00","detail_url":"/events/42145"},"members":[{"id":42145,"cve_ids":["CVE-2026-86976"],"payload":{"kind":"advisory","title":"CVE-2026-86976","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-86976","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86976","aliases":["CVE-2026-86976"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:21:47.180Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86976","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:21:43.629230Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:21:47.180Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:57.018Z"}}},"related_cves":[{"value":"CVE-2026-86976","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:03f38b39-5110-4c58-8033-1b1d485e8951","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86976","advisory_id":"03f38b39-5110-4c58-8033-1b1d485e8951","event_types":["advisory"],"published_at":"2026-10-25T11:39:35.065671+00:00","technologies":["core-cve","ios-and-ipados","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:57.018+00:00","detail_url":"/events/42145"}]}},{"id":42535,"cve_ids":["CVE-2026-86953"],"payload":{"kind":"advisory","title":"CVE-2026-86953","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.","evidence":"cve:CVE-2026-86953","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86953","aliases":["CVE-2026-86953"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:25:22.084Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.6,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86953","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:25:19.070243Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:25:22.084Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:54.619Z"}}},"related_cves":[{"value":"CVE-2026-86953","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b3b7cb55-e546-4898-9fb8-c234c42c5239","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86953","advisory_id":"b3b7cb55-e546-4898-9fb8-c234c42c5239","event_types":["advisory"],"published_at":"2026-10-25T11:39:33.54099+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:54.619+00:00","detail_url":"/advisories/advisory%3Ab3b7cb55-e546-4898-9fb8-c234c42c5239","group":{"id":"advisory:b3b7cb55-e546-4898-9fb8-c234c42c5239","revision":1,"primary_event_id":42143,"change":"published","superseded_by":[],"changed":{"id":42143,"cve_ids":["CVE-2026-86953"],"payload":{"kind":"advisory","title":"CVE-2026-86953","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.","evidence":"cve:CVE-2026-86953","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86953","aliases":["CVE-2026-86953"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:25:22.084Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.6,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86953","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:25:19.070243Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:25:22.084Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:54.619Z"}}},"related_cves":[{"value":"CVE-2026-86953","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b3b7cb55-e546-4898-9fb8-c234c42c5239","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86953","advisory_id":"b3b7cb55-e546-4898-9fb8-c234c42c5239","event_types":["advisory"],"published_at":"2026-10-25T11:39:33.54099+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:54.619+00:00","detail_url":"/events/42143"},"members":[{"id":42143,"cve_ids":["CVE-2026-86953"],"payload":{"kind":"advisory","title":"CVE-2026-86953","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.","evidence":"cve:CVE-2026-86953","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86953","aliases":["CVE-2026-86953"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:25:22.084Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.6,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86953","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:25:19.070243Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:25:22.084Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:54.619Z"}}},"related_cves":[{"value":"CVE-2026-86953","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b3b7cb55-e546-4898-9fb8-c234c42c5239","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86953","advisory_id":"b3b7cb55-e546-4898-9fb8-c234c42c5239","event_types":["advisory"],"published_at":"2026-10-25T11:39:33.54099+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:54.619+00:00","detail_url":"/events/42143"}]}},{"id":42534,"cve_ids":["CVE-2026-86932"],"payload":{"kind":"advisory","title":"CVE-2026-86932","summary":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-86932","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86932","aliases":["CVE-2026-86932"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:30:33.281Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86932","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:30:29.837558Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:30:33.281Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:52.803Z"}}},"related_cves":[{"value":"CVE-2026-86932","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d8e713b9-f170-4aeb-8ea1-5aa65a81e445","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86932","advisory_id":"d8e713b9-f170-4aeb-8ea1-5aa65a81e445","event_types":["advisory"],"published_at":"2026-10-25T11:39:32.836679+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:52.803+00:00","detail_url":"/advisories/advisory%3Ad8e713b9-f170-4aeb-8ea1-5aa65a81e445","group":{"id":"advisory:d8e713b9-f170-4aeb-8ea1-5aa65a81e445","revision":1,"primary_event_id":42142,"change":"published","superseded_by":[],"changed":{"id":42142,"cve_ids":["CVE-2026-86932"],"payload":{"kind":"advisory","title":"CVE-2026-86932","summary":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-86932","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86932","aliases":["CVE-2026-86932"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:30:33.281Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86932","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:30:29.837558Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:30:33.281Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:52.803Z"}}},"related_cves":[{"value":"CVE-2026-86932","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d8e713b9-f170-4aeb-8ea1-5aa65a81e445","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86932","advisory_id":"d8e713b9-f170-4aeb-8ea1-5aa65a81e445","event_types":["advisory"],"published_at":"2026-10-25T11:39:32.836679+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:52.803+00:00","detail_url":"/events/42142"},"members":[{"id":42142,"cve_ids":["CVE-2026-86932"],"payload":{"kind":"advisory","title":"CVE-2026-86932","summary":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-86932","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86932","aliases":["CVE-2026-86932"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:30:33.281Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86932","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:30:29.837558Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:30:33.281Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:52.803Z"}}},"related_cves":[{"value":"CVE-2026-86932","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d8e713b9-f170-4aeb-8ea1-5aa65a81e445","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86932","advisory_id":"d8e713b9-f170-4aeb-8ea1-5aa65a81e445","event_types":["advisory"],"published_at":"2026-10-25T11:39:32.836679+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:52.803+00:00","detail_url":"/events/42142"}]}},{"id":42533,"cve_ids":["CVE-2026-86928"],"payload":{"kind":"advisory","title":"CVE-2026-86928","summary":"A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data.","evidence":"cve:CVE-2026-86928","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86928","aliases":["CVE-2026-86928"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:31:12.099Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86928","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:31:07.941727Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-22","description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:31:12.099Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:52.525Z"}}},"related_cves":[{"value":"CVE-2026-86928","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b6324e46-2c7e-404c-b195-be96be8762af","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86928","advisory_id":"b6324e46-2c7e-404c-b195-be96be8762af","event_types":["advisory"],"published_at":"2026-10-25T11:39:32.013857+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:52.525+00:00","detail_url":"/advisories/advisory%3Ab6324e46-2c7e-404c-b195-be96be8762af","group":{"id":"advisory:b6324e46-2c7e-404c-b195-be96be8762af","revision":1,"primary_event_id":42141,"change":"published","superseded_by":[],"changed":{"id":42141,"cve_ids":["CVE-2026-86928"],"payload":{"kind":"advisory","title":"CVE-2026-86928","summary":"A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data.","evidence":"cve:CVE-2026-86928","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86928","aliases":["CVE-2026-86928"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:31:12.099Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86928","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:31:07.941727Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-22","description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:31:12.099Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:52.525Z"}}},"related_cves":[{"value":"CVE-2026-86928","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b6324e46-2c7e-404c-b195-be96be8762af","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86928","advisory_id":"b6324e46-2c7e-404c-b195-be96be8762af","event_types":["advisory"],"published_at":"2026-10-25T11:39:32.013857+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:52.525+00:00","detail_url":"/events/42141"},"members":[{"id":42141,"cve_ids":["CVE-2026-86928"],"payload":{"kind":"advisory","title":"CVE-2026-86928","summary":"A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data.","evidence":"cve:CVE-2026-86928","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86928","aliases":["CVE-2026-86928"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:31:12.099Z","provider":"cve","references":["https://support.apple.com/en-us/149035"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86928","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:31:07.941727Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-22","description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:31:12.099Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:52.525Z"}}},"related_cves":[{"value":"CVE-2026-86928","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b6324e46-2c7e-404c-b195-be96be8762af","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86928","advisory_id":"b6324e46-2c7e-404c-b195-be96be8762af","event_types":["advisory"],"published_at":"2026-10-25T11:39:32.013857+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:52.525+00:00","detail_url":"/events/42141"}]}},{"id":42532,"cve_ids":["CVE-2026-86981"],"payload":{"kind":"advisory","title":"CVE-2026-86981","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86981","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86981","aliases":["CVE-2026-86981"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"}]}],"modified":"2026-10-20T10:11:44.832Z","provider":"cve","references":["https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86981","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:11:41.422786Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:11:44.832Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:57.929Z"}}},"related_cves":[{"value":"CVE-2026-86981","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:de688ef5-7cb7-4dc5-bdee-834844230b15","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86981","advisory_id":"de688ef5-7cb7-4dc5-bdee-834844230b15","event_types":["advisory"],"published_at":"2026-10-25T11:39:31.383622+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:57.929+00:00","detail_url":"/advisories/advisory%3Ade688ef5-7cb7-4dc5-bdee-834844230b15","group":{"id":"advisory:de688ef5-7cb7-4dc5-bdee-834844230b15","revision":1,"primary_event_id":42140,"change":"published","superseded_by":[],"changed":{"id":42140,"cve_ids":["CVE-2026-86981"],"payload":{"kind":"advisory","title":"CVE-2026-86981","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86981","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86981","aliases":["CVE-2026-86981"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"}]}],"modified":"2026-10-20T10:11:44.832Z","provider":"cve","references":["https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86981","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:11:41.422786Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:11:44.832Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:57.929Z"}}},"related_cves":[{"value":"CVE-2026-86981","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:de688ef5-7cb7-4dc5-bdee-834844230b15","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86981","advisory_id":"de688ef5-7cb7-4dc5-bdee-834844230b15","event_types":["advisory"],"published_at":"2026-10-25T11:39:31.383622+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:57.929+00:00","detail_url":"/events/42140"},"members":[{"id":42140,"cve_ids":["CVE-2026-86981"],"payload":{"kind":"advisory","title":"CVE-2026-86981","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86981","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86981","aliases":["CVE-2026-86981"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"}]}],"modified":"2026-10-20T10:11:44.832Z","provider":"cve","references":["https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86981","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:11:41.422786Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:11:44.832Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:57.929Z"}}},"related_cves":[{"value":"CVE-2026-86981","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:de688ef5-7cb7-4dc5-bdee-834844230b15","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86981","advisory_id":"de688ef5-7cb7-4dc5-bdee-834844230b15","event_types":["advisory"],"published_at":"2026-10-25T11:39:31.383622+00:00","technologies":["core-cve","macos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:57.929+00:00","detail_url":"/events/42140"}]}},{"id":42531,"cve_ids":["CVE-2026-86975"],"payload":{"kind":"advisory","title":"CVE-2026-86975","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","evidence":"cve:CVE-2026-86975","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86975","aliases":["CVE-2026-86975"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:12:23.942Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86975","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:12:20.798941Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:12:23.942Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.724Z"}}},"related_cves":[{"value":"CVE-2026-86975","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a5eda251-056f-44c6-9a36-b24bd19afeb5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86975","advisory_id":"a5eda251-056f-44c6-9a36-b24bd19afeb5","event_types":["advisory"],"published_at":"2026-10-25T11:39:30.765777+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.724+00:00","detail_url":"/advisories/advisory%3Aa5eda251-056f-44c6-9a36-b24bd19afeb5","group":{"id":"advisory:a5eda251-056f-44c6-9a36-b24bd19afeb5","revision":1,"primary_event_id":42139,"change":"published","superseded_by":[],"changed":{"id":42139,"cve_ids":["CVE-2026-86975"],"payload":{"kind":"advisory","title":"CVE-2026-86975","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","evidence":"cve:CVE-2026-86975","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86975","aliases":["CVE-2026-86975"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:12:23.942Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86975","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:12:20.798941Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:12:23.942Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.724Z"}}},"related_cves":[{"value":"CVE-2026-86975","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a5eda251-056f-44c6-9a36-b24bd19afeb5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86975","advisory_id":"a5eda251-056f-44c6-9a36-b24bd19afeb5","event_types":["advisory"],"published_at":"2026-10-25T11:39:30.765777+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.724+00:00","detail_url":"/events/42139"},"members":[{"id":42139,"cve_ids":["CVE-2026-86975"],"payload":{"kind":"advisory","title":"CVE-2026-86975","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","evidence":"cve:CVE-2026-86975","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86975","aliases":["CVE-2026-86975"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:12:23.942Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86975","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:12:20.798941Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:12:23.942Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.724Z"}}},"related_cves":[{"value":"CVE-2026-86975","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a5eda251-056f-44c6-9a36-b24bd19afeb5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86975","advisory_id":"a5eda251-056f-44c6-9a36-b24bd19afeb5","event_types":["advisory"],"published_at":"2026-10-25T11:39:30.765777+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.724+00:00","detail_url":"/events/42139"}]}},{"id":42529,"cve_ids":["CVE-2026-86962"],"payload":{"kind":"advisory","title":"CVE-2026-86962","summary":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86962","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86962","aliases":["CVE-2026-86962"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:14:10.188Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86962","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:13:24.182949Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-415","description":"CWE-415 Double Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:14:10.188Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.208Z"}}},"related_cves":[{"value":"CVE-2026-86962","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:076102d2-be12-4dd6-96e1-1d7a1970e089","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86962","advisory_id":"076102d2-be12-4dd6-96e1-1d7a1970e089","event_types":["advisory"],"published_at":"2026-10-25T11:39:29.334566+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.208+00:00","detail_url":"/advisories/advisory%3A076102d2-be12-4dd6-96e1-1d7a1970e089","group":{"id":"advisory:076102d2-be12-4dd6-96e1-1d7a1970e089","revision":1,"primary_event_id":42137,"change":"published","superseded_by":[],"changed":{"id":42137,"cve_ids":["CVE-2026-86962"],"payload":{"kind":"advisory","title":"CVE-2026-86962","summary":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86962","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86962","aliases":["CVE-2026-86962"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:14:10.188Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86962","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:13:24.182949Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-415","description":"CWE-415 Double Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:14:10.188Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.208Z"}}},"related_cves":[{"value":"CVE-2026-86962","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:076102d2-be12-4dd6-96e1-1d7a1970e089","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86962","advisory_id":"076102d2-be12-4dd6-96e1-1d7a1970e089","event_types":["advisory"],"published_at":"2026-10-25T11:39:29.334566+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.208+00:00","detail_url":"/events/42137"},"members":[{"id":42137,"cve_ids":["CVE-2026-86962"],"payload":{"kind":"advisory","title":"CVE-2026-86962","summary":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86962","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86962","aliases":["CVE-2026-86962"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:14:10.188Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86962","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:13:24.182949Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-415","description":"CWE-415 Double Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:14:10.188Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.208Z"}}},"related_cves":[{"value":"CVE-2026-86962","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:076102d2-be12-4dd6-96e1-1d7a1970e089","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86962","advisory_id":"076102d2-be12-4dd6-96e1-1d7a1970e089","event_types":["advisory"],"published_at":"2026-10-25T11:39:29.334566+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.208+00:00","detail_url":"/events/42137"}]}}],"next_after":46103,"next_before":42529}