{"schema_version":"2","view":"grouped","data":[{"id":42645,"cve_ids":["CVE-2026-86872"],"payload":{"kind":"advisory","title":"CVE-2026-86872","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior.","evidence":"cve:CVE-2026-86872","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86872","aliases":["CVE-2026-86872"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T15:13:01.203Z","provider":"cve","references":["https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86872","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T15:12:57.460534Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T15:13:01.203Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:44.084Z"}}},"related_cves":[{"value":"CVE-2026-86872","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:65be4f41-efa4-4457-b3f8-28c4e42f1eb9","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86872","advisory_id":"65be4f41-efa4-4457-b3f8-28c4e42f1eb9","event_types":["advisory"],"published_at":"2026-10-25T11:40:51.70262+00:00","technologies":["core-cve","safari","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:44.084+00:00","detail_url":"/advisories/advisory%3A65be4f41-efa4-4457-b3f8-28c4e42f1eb9","group":{"id":"advisory:65be4f41-efa4-4457-b3f8-28c4e42f1eb9","revision":1,"primary_event_id":42252,"change":"published","superseded_by":[],"changed":{"id":42252,"cve_ids":["CVE-2026-86872"],"payload":{"kind":"advisory","title":"CVE-2026-86872","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior.","evidence":"cve:CVE-2026-86872","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86872","aliases":["CVE-2026-86872"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T15:13:01.203Z","provider":"cve","references":["https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86872","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T15:12:57.460534Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T15:13:01.203Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:44.084Z"}}},"related_cves":[{"value":"CVE-2026-86872","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:65be4f41-efa4-4457-b3f8-28c4e42f1eb9","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86872","advisory_id":"65be4f41-efa4-4457-b3f8-28c4e42f1eb9","event_types":["advisory"],"published_at":"2026-10-25T11:40:51.70262+00:00","technologies":["core-cve","safari","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:44.084+00:00","detail_url":"/events/42252"},"members":[{"id":42252,"cve_ids":["CVE-2026-86872"],"payload":{"kind":"advisory","title":"CVE-2026-86872","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior.","evidence":"cve:CVE-2026-86872","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86872","aliases":["CVE-2026-86872"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T15:13:01.203Z","provider":"cve","references":["https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86872","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T15:12:57.460534Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T15:13:01.203Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:44.084Z"}}},"related_cves":[{"value":"CVE-2026-86872","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:65be4f41-efa4-4457-b3f8-28c4e42f1eb9","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86872","advisory_id":"65be4f41-efa4-4457-b3f8-28c4e42f1eb9","event_types":["advisory"],"published_at":"2026-10-25T11:40:51.70262+00:00","technologies":["core-cve","safari","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:44.084+00:00","detail_url":"/events/42252"}]}},{"id":42626,"cve_ids":["CVE-2026-86913"],"payload":{"kind":"advisory","title":"CVE-2026-86913","summary":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.","evidence":"cve:CVE-2026-86913","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86913","aliases":["CVE-2026-86913"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:56:36.638Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86913","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:56:33.198658Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:56:36.638Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:50.060Z"}}},"related_cves":[{"value":"CVE-2026-86913","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:12aeb3f8-8840-4cee-84e7-0d3305242ea4","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86913","advisory_id":"12aeb3f8-8840-4cee-84e7-0d3305242ea4","event_types":["advisory"],"published_at":"2026-10-25T11:40:38.931463+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:50.06+00:00","detail_url":"/advisories/advisory%3A12aeb3f8-8840-4cee-84e7-0d3305242ea4","group":{"id":"advisory:12aeb3f8-8840-4cee-84e7-0d3305242ea4","revision":1,"primary_event_id":42233,"change":"published","superseded_by":[],"changed":{"id":42233,"cve_ids":["CVE-2026-86913"],"payload":{"kind":"advisory","title":"CVE-2026-86913","summary":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.","evidence":"cve:CVE-2026-86913","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86913","aliases":["CVE-2026-86913"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:56:36.638Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86913","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:56:33.198658Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:56:36.638Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:50.060Z"}}},"related_cves":[{"value":"CVE-2026-86913","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:12aeb3f8-8840-4cee-84e7-0d3305242ea4","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86913","advisory_id":"12aeb3f8-8840-4cee-84e7-0d3305242ea4","event_types":["advisory"],"published_at":"2026-10-25T11:40:38.931463+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:50.06+00:00","detail_url":"/events/42233"},"members":[{"id":42233,"cve_ids":["CVE-2026-86913"],"payload":{"kind":"advisory","title":"CVE-2026-86913","summary":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.","evidence":"cve:CVE-2026-86913","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86913","aliases":["CVE-2026-86913"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:56:36.638Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86913","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:56:33.198658Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:56:36.638Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:50.060Z"}}},"related_cves":[{"value":"CVE-2026-86913","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:12aeb3f8-8840-4cee-84e7-0d3305242ea4","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86913","advisory_id":"12aeb3f8-8840-4cee-84e7-0d3305242ea4","event_types":["advisory"],"published_at":"2026-10-25T11:40:38.931463+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:50.06+00:00","detail_url":"/events/42233"}]}},{"id":42592,"cve_ids":["CVE-2026-86918"],"payload":{"kind":"advisory","title":"CVE-2026-86918","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.","evidence":"cve:CVE-2026-86918","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86918","aliases":["CVE-2026-86918"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:04:01.561Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86918","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:03:57.696685Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:04:01.561Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.428Z"}}},"related_cves":[{"value":"CVE-2026-86918","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86918","advisory_id":"2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","event_types":["advisory"],"published_at":"2026-10-25T11:40:16.045756+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.428+00:00","detail_url":"/advisories/advisory%3A2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","group":{"id":"advisory:2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","revision":1,"primary_event_id":42200,"change":"published","superseded_by":[],"changed":{"id":42200,"cve_ids":["CVE-2026-86918"],"payload":{"kind":"advisory","title":"CVE-2026-86918","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.","evidence":"cve:CVE-2026-86918","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86918","aliases":["CVE-2026-86918"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:04:01.561Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86918","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:03:57.696685Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:04:01.561Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.428Z"}}},"related_cves":[{"value":"CVE-2026-86918","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86918","advisory_id":"2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","event_types":["advisory"],"published_at":"2026-10-25T11:40:16.045756+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.428+00:00","detail_url":"/events/42200"},"members":[{"id":42200,"cve_ids":["CVE-2026-86918"],"payload":{"kind":"advisory","title":"CVE-2026-86918","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.","evidence":"cve:CVE-2026-86918","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86918","aliases":["CVE-2026-86918"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:04:01.561Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86918","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:03:57.696685Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:04:01.561Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.428Z"}}},"related_cves":[{"value":"CVE-2026-86918","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86918","advisory_id":"2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","event_types":["advisory"],"published_at":"2026-10-25T11:40:16.045756+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.428+00:00","detail_url":"/events/42200"}]}},{"id":42588,"cve_ids":["CVE-2026-84613"],"payload":{"kind":"advisory","title":"CVE-2026-84613","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84613","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84613","aliases":["CVE-2026-84613"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:15:45.219Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84613","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:15:39.298444Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:15:45.219Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:39.589Z"}}},"related_cves":[{"value":"CVE-2026-84613","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ddc64785-f366-4983-aedf-f9441cdff321","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84613","advisory_id":"ddc64785-f366-4983-aedf-f9441cdff321","event_types":["advisory"],"published_at":"2026-10-25T11:40:13.341373+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:39.589+00:00","detail_url":"/advisories/advisory%3Addc64785-f366-4983-aedf-f9441cdff321","group":{"id":"advisory:ddc64785-f366-4983-aedf-f9441cdff321","revision":1,"primary_event_id":42196,"change":"published","superseded_by":[],"changed":{"id":42196,"cve_ids":["CVE-2026-84613"],"payload":{"kind":"advisory","title":"CVE-2026-84613","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84613","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84613","aliases":["CVE-2026-84613"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:15:45.219Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84613","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:15:39.298444Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:15:45.219Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:39.589Z"}}},"related_cves":[{"value":"CVE-2026-84613","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ddc64785-f366-4983-aedf-f9441cdff321","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84613","advisory_id":"ddc64785-f366-4983-aedf-f9441cdff321","event_types":["advisory"],"published_at":"2026-10-25T11:40:13.341373+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:39.589+00:00","detail_url":"/events/42196"},"members":[{"id":42196,"cve_ids":["CVE-2026-84613"],"payload":{"kind":"advisory","title":"CVE-2026-84613","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84613","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84613","aliases":["CVE-2026-84613"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:15:45.219Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84613","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:15:39.298444Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:15:45.219Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:39.589Z"}}},"related_cves":[{"value":"CVE-2026-84613","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ddc64785-f366-4983-aedf-f9441cdff321","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84613","advisory_id":"ddc64785-f366-4983-aedf-f9441cdff321","event_types":["advisory"],"published_at":"2026-10-25T11:40:13.341373+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:39.589+00:00","detail_url":"/events/42196"}]}},{"id":42538,"cve_ids":["CVE-2026-86957"],"payload":{"kind":"advisory","title":"CVE-2026-86957","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86957","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86957","aliases":["CVE-2026-86957"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:23:57.967Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86957","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:23:10.431694Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:23:57.967Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:55.409Z"}}},"related_cves":[{"value":"CVE-2026-86957","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:87d862a4-b47a-4424-bd98-344241a6d827","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86957","advisory_id":"87d862a4-b47a-4424-bd98-344241a6d827","event_types":["advisory"],"published_at":"2026-10-25T11:39:36.16581+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:55.409+00:00","detail_url":"/advisories/advisory%3A87d862a4-b47a-4424-bd98-344241a6d827","group":{"id":"advisory:87d862a4-b47a-4424-bd98-344241a6d827","revision":1,"primary_event_id":42146,"change":"published","superseded_by":[],"changed":{"id":42146,"cve_ids":["CVE-2026-86957"],"payload":{"kind":"advisory","title":"CVE-2026-86957","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86957","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86957","aliases":["CVE-2026-86957"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:23:57.967Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86957","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:23:10.431694Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:23:57.967Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:55.409Z"}}},"related_cves":[{"value":"CVE-2026-86957","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:87d862a4-b47a-4424-bd98-344241a6d827","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86957","advisory_id":"87d862a4-b47a-4424-bd98-344241a6d827","event_types":["advisory"],"published_at":"2026-10-25T11:39:36.16581+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:55.409+00:00","detail_url":"/events/42146"},"members":[{"id":42146,"cve_ids":["CVE-2026-86957"],"payload":{"kind":"advisory","title":"CVE-2026-86957","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86957","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86957","aliases":["CVE-2026-86957"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:23:57.967Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86957","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:23:10.431694Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:23:57.967Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:55.409Z"}}},"related_cves":[{"value":"CVE-2026-86957","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:87d862a4-b47a-4424-bd98-344241a6d827","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86957","advisory_id":"87d862a4-b47a-4424-bd98-344241a6d827","event_types":["advisory"],"published_at":"2026-10-25T11:39:36.16581+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:55.409+00:00","detail_url":"/events/42146"}]}},{"id":42535,"cve_ids":["CVE-2026-86953"],"payload":{"kind":"advisory","title":"CVE-2026-86953","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.","evidence":"cve:CVE-2026-86953","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86953","aliases":["CVE-2026-86953"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:25:22.084Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.6,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86953","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:25:19.070243Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:25:22.084Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:54.619Z"}}},"related_cves":[{"value":"CVE-2026-86953","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b3b7cb55-e546-4898-9fb8-c234c42c5239","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86953","advisory_id":"b3b7cb55-e546-4898-9fb8-c234c42c5239","event_types":["advisory"],"published_at":"2026-10-25T11:39:33.54099+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:54.619+00:00","detail_url":"/advisories/advisory%3Ab3b7cb55-e546-4898-9fb8-c234c42c5239","group":{"id":"advisory:b3b7cb55-e546-4898-9fb8-c234c42c5239","revision":1,"primary_event_id":42143,"change":"published","superseded_by":[],"changed":{"id":42143,"cve_ids":["CVE-2026-86953"],"payload":{"kind":"advisory","title":"CVE-2026-86953","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.","evidence":"cve:CVE-2026-86953","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86953","aliases":["CVE-2026-86953"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:25:22.084Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.6,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86953","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:25:19.070243Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:25:22.084Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:54.619Z"}}},"related_cves":[{"value":"CVE-2026-86953","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b3b7cb55-e546-4898-9fb8-c234c42c5239","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86953","advisory_id":"b3b7cb55-e546-4898-9fb8-c234c42c5239","event_types":["advisory"],"published_at":"2026-10-25T11:39:33.54099+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:54.619+00:00","detail_url":"/events/42143"},"members":[{"id":42143,"cve_ids":["CVE-2026-86953"],"payload":{"kind":"advisory","title":"CVE-2026-86953","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.","evidence":"cve:CVE-2026-86953","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86953","aliases":["CVE-2026-86953"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:25:22.084Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.6,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86953","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:25:19.070243Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:25:22.084Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:54.619Z"}}},"related_cves":[{"value":"CVE-2026-86953","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b3b7cb55-e546-4898-9fb8-c234c42c5239","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86953","advisory_id":"b3b7cb55-e546-4898-9fb8-c234c42c5239","event_types":["advisory"],"published_at":"2026-10-25T11:39:33.54099+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:54.619+00:00","detail_url":"/events/42143"}]}},{"id":42531,"cve_ids":["CVE-2026-86975"],"payload":{"kind":"advisory","title":"CVE-2026-86975","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","evidence":"cve:CVE-2026-86975","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86975","aliases":["CVE-2026-86975"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:12:23.942Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86975","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:12:20.798941Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:12:23.942Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.724Z"}}},"related_cves":[{"value":"CVE-2026-86975","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a5eda251-056f-44c6-9a36-b24bd19afeb5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86975","advisory_id":"a5eda251-056f-44c6-9a36-b24bd19afeb5","event_types":["advisory"],"published_at":"2026-10-25T11:39:30.765777+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.724+00:00","detail_url":"/advisories/advisory%3Aa5eda251-056f-44c6-9a36-b24bd19afeb5","group":{"id":"advisory:a5eda251-056f-44c6-9a36-b24bd19afeb5","revision":1,"primary_event_id":42139,"change":"published","superseded_by":[],"changed":{"id":42139,"cve_ids":["CVE-2026-86975"],"payload":{"kind":"advisory","title":"CVE-2026-86975","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","evidence":"cve:CVE-2026-86975","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86975","aliases":["CVE-2026-86975"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:12:23.942Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86975","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:12:20.798941Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:12:23.942Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.724Z"}}},"related_cves":[{"value":"CVE-2026-86975","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a5eda251-056f-44c6-9a36-b24bd19afeb5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86975","advisory_id":"a5eda251-056f-44c6-9a36-b24bd19afeb5","event_types":["advisory"],"published_at":"2026-10-25T11:39:30.765777+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.724+00:00","detail_url":"/events/42139"},"members":[{"id":42139,"cve_ids":["CVE-2026-86975"],"payload":{"kind":"advisory","title":"CVE-2026-86975","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","evidence":"cve:CVE-2026-86975","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86975","aliases":["CVE-2026-86975"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:12:23.942Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86975","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:12:20.798941Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:12:23.942Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.724Z"}}},"related_cves":[{"value":"CVE-2026-86975","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a5eda251-056f-44c6-9a36-b24bd19afeb5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86975","advisory_id":"a5eda251-056f-44c6-9a36-b24bd19afeb5","event_types":["advisory"],"published_at":"2026-10-25T11:39:30.765777+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.724+00:00","detail_url":"/events/42139"}]}},{"id":42529,"cve_ids":["CVE-2026-86962"],"payload":{"kind":"advisory","title":"CVE-2026-86962","summary":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86962","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86962","aliases":["CVE-2026-86962"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:14:10.188Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86962","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:13:24.182949Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-415","description":"CWE-415 Double Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:14:10.188Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.208Z"}}},"related_cves":[{"value":"CVE-2026-86962","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:076102d2-be12-4dd6-96e1-1d7a1970e089","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86962","advisory_id":"076102d2-be12-4dd6-96e1-1d7a1970e089","event_types":["advisory"],"published_at":"2026-10-25T11:39:29.334566+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.208+00:00","detail_url":"/advisories/advisory%3A076102d2-be12-4dd6-96e1-1d7a1970e089","group":{"id":"advisory:076102d2-be12-4dd6-96e1-1d7a1970e089","revision":1,"primary_event_id":42137,"change":"published","superseded_by":[],"changed":{"id":42137,"cve_ids":["CVE-2026-86962"],"payload":{"kind":"advisory","title":"CVE-2026-86962","summary":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86962","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86962","aliases":["CVE-2026-86962"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:14:10.188Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86962","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:13:24.182949Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-415","description":"CWE-415 Double Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:14:10.188Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.208Z"}}},"related_cves":[{"value":"CVE-2026-86962","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:076102d2-be12-4dd6-96e1-1d7a1970e089","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86962","advisory_id":"076102d2-be12-4dd6-96e1-1d7a1970e089","event_types":["advisory"],"published_at":"2026-10-25T11:39:29.334566+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.208+00:00","detail_url":"/events/42137"},"members":[{"id":42137,"cve_ids":["CVE-2026-86962"],"payload":{"kind":"advisory","title":"CVE-2026-86962","summary":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86962","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86962","aliases":["CVE-2026-86962"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:14:10.188Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86962","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:13:24.182949Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-415","description":"CWE-415 Double Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:14:10.188Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.208Z"}}},"related_cves":[{"value":"CVE-2026-86962","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:076102d2-be12-4dd6-96e1-1d7a1970e089","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86962","advisory_id":"076102d2-be12-4dd6-96e1-1d7a1970e089","event_types":["advisory"],"published_at":"2026-10-25T11:39:29.334566+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.208+00:00","detail_url":"/events/42137"}]}},{"id":42418,"cve_ids":["CVE-2026-86903"],"payload":{"kind":"advisory","title":"CVE-2026-86903","summary":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.","evidence":"cve:CVE-2026-86903","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86903","aliases":["CVE-2026-86903"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:48.285Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86903","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:22:26.009169Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:22:29.546Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:48.285Z"}}},"related_cves":[{"value":"CVE-2026-86903","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0e2e097f-05e2-4693-8150-b912dc09df86","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86903","advisory_id":"0e2e097f-05e2-4693-8150-b912dc09df86","event_types":["advisory"],"published_at":"2026-10-25T11:38:16.508416+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:31.612+00:00","detail_url":"/advisories/advisory%3A0e2e097f-05e2-4693-8150-b912dc09df86","group":{"id":"advisory:0e2e097f-05e2-4693-8150-b912dc09df86","revision":1,"primary_event_id":42027,"change":"published","superseded_by":[],"changed":{"id":42027,"cve_ids":["CVE-2026-86903"],"payload":{"kind":"advisory","title":"CVE-2026-86903","summary":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.","evidence":"cve:CVE-2026-86903","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86903","aliases":["CVE-2026-86903"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:48.285Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86903","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:22:26.009169Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:22:29.546Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:48.285Z"}}},"related_cves":[{"value":"CVE-2026-86903","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0e2e097f-05e2-4693-8150-b912dc09df86","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86903","advisory_id":"0e2e097f-05e2-4693-8150-b912dc09df86","event_types":["advisory"],"published_at":"2026-10-25T11:38:16.508416+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:31.612+00:00","detail_url":"/events/42027"},"members":[{"id":42027,"cve_ids":["CVE-2026-86903"],"payload":{"kind":"advisory","title":"CVE-2026-86903","summary":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.","evidence":"cve:CVE-2026-86903","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86903","aliases":["CVE-2026-86903"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:48.285Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86903","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:22:26.009169Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:22:29.546Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:48.285Z"}}},"related_cves":[{"value":"CVE-2026-86903","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0e2e097f-05e2-4693-8150-b912dc09df86","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86903","advisory_id":"0e2e097f-05e2-4693-8150-b912dc09df86","event_types":["advisory"],"published_at":"2026-10-25T11:38:16.508416+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:31.612+00:00","detail_url":"/events/42027"}]}},{"id":42416,"cve_ids":["CVE-2026-86891"],"payload":{"kind":"advisory","title":"CVE-2026-86891","summary":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, watchOS 27. An app may be able to access Bluetooth device information.","evidence":"cve:CVE-2026-86891","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86891","aliases":["CVE-2026-86891"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:47.637Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86891","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T14:45:08.374606Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T14:45:21.957Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:47.637Z"}}},"related_cves":[{"value":"CVE-2026-86891","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:974e8e09-ebee-4bff-9d06-f433ec9da0d3","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86891","advisory_id":"974e8e09-ebee-4bff-9d06-f433ec9da0d3","event_types":["advisory"],"published_at":"2026-10-25T11:38:15.066189+00:00","technologies":["core-cve","macos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:27.231+00:00","detail_url":"/advisories/advisory%3A974e8e09-ebee-4bff-9d06-f433ec9da0d3","group":{"id":"advisory:974e8e09-ebee-4bff-9d06-f433ec9da0d3","revision":1,"primary_event_id":42025,"change":"published","superseded_by":[],"changed":{"id":42025,"cve_ids":["CVE-2026-86891"],"payload":{"kind":"advisory","title":"CVE-2026-86891","summary":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, watchOS 27. An app may be able to access Bluetooth device information.","evidence":"cve:CVE-2026-86891","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86891","aliases":["CVE-2026-86891"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:47.637Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86891","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T14:45:08.374606Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T14:45:21.957Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:47.637Z"}}},"related_cves":[{"value":"CVE-2026-86891","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:974e8e09-ebee-4bff-9d06-f433ec9da0d3","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86891","advisory_id":"974e8e09-ebee-4bff-9d06-f433ec9da0d3","event_types":["advisory"],"published_at":"2026-10-25T11:38:15.066189+00:00","technologies":["core-cve","macos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:27.231+00:00","detail_url":"/events/42025"},"members":[{"id":42025,"cve_ids":["CVE-2026-86891"],"payload":{"kind":"advisory","title":"CVE-2026-86891","summary":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, watchOS 27. An app may be able to access Bluetooth device information.","evidence":"cve:CVE-2026-86891","products":[{"name":{"value":"macOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86891","aliases":["CVE-2026-86891"],"metrics":[],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:47.637Z","provider":"cve","references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86891","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T14:45:08.374606Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T14:45:21.957Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:47.637Z"}}},"related_cves":[{"value":"CVE-2026-86891","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:974e8e09-ebee-4bff-9d06-f433ec9da0d3","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86891","advisory_id":"974e8e09-ebee-4bff-9d06-f433ec9da0d3","event_types":["advisory"],"published_at":"2026-10-25T11:38:15.066189+00:00","technologies":["core-cve","macos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:27.231+00:00","detail_url":"/events/42025"}]}},{"id":42413,"cve_ids":["CVE-2026-86884"],"payload":{"kind":"advisory","title":"CVE-2026-86884","summary":"A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-86884","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86884","aliases":["CVE-2026-86884"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:46.594Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86884","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T14:50:08.504536Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T14:50:11.207Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:46.594Z"}}},"related_cves":[{"value":"CVE-2026-86884","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:8b952e42-1ee5-4ff5-b473-e57086eb6795","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86884","advisory_id":"8b952e42-1ee5-4ff5-b473-e57086eb6795","event_types":["advisory"],"published_at":"2026-10-25T11:38:13.191128+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:41.384+00:00","detail_url":"/advisories/advisory%3A8b952e42-1ee5-4ff5-b473-e57086eb6795","group":{"id":"advisory:8b952e42-1ee5-4ff5-b473-e57086eb6795","revision":1,"primary_event_id":42022,"change":"published","superseded_by":[],"changed":{"id":42022,"cve_ids":["CVE-2026-86884"],"payload":{"kind":"advisory","title":"CVE-2026-86884","summary":"A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-86884","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86884","aliases":["CVE-2026-86884"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:46.594Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86884","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T14:50:08.504536Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T14:50:11.207Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:46.594Z"}}},"related_cves":[{"value":"CVE-2026-86884","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:8b952e42-1ee5-4ff5-b473-e57086eb6795","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86884","advisory_id":"8b952e42-1ee5-4ff5-b473-e57086eb6795","event_types":["advisory"],"published_at":"2026-10-25T11:38:13.191128+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:41.384+00:00","detail_url":"/events/42022"},"members":[{"id":42022,"cve_ids":["CVE-2026-86884"],"payload":{"kind":"advisory","title":"CVE-2026-86884","summary":"A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-86884","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86884","aliases":["CVE-2026-86884"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:46.594Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86884","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T14:50:08.504536Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T14:50:11.207Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:46.594Z"}}},"related_cves":[{"value":"CVE-2026-86884","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:8b952e42-1ee5-4ff5-b473-e57086eb6795","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86884","advisory_id":"8b952e42-1ee5-4ff5-b473-e57086eb6795","event_types":["advisory"],"published_at":"2026-10-25T11:38:13.191128+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:41.384+00:00","detail_url":"/events/42022"}]}},{"id":42412,"cve_ids":["CVE-2026-86882"],"payload":{"kind":"advisory","title":"CVE-2026-86882","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","evidence":"cve:CVE-2026-86882","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86882","aliases":["CVE-2026-86882"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:46.194Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86882","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:05:59.829427Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:06:04.034Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:46.194Z"}}},"related_cves":[{"value":"CVE-2026-86882","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6badc301-1a5f-4070-a7c1-e3fe20804ce8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86882","advisory_id":"6badc301-1a5f-4070-a7c1-e3fe20804ce8","event_types":["advisory"],"published_at":"2026-10-25T11:38:12.525233+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:51:07.153+00:00","detail_url":"/advisories/advisory%3A6badc301-1a5f-4070-a7c1-e3fe20804ce8","group":{"id":"advisory:6badc301-1a5f-4070-a7c1-e3fe20804ce8","revision":1,"primary_event_id":42021,"change":"published","superseded_by":[],"changed":{"id":42021,"cve_ids":["CVE-2026-86882"],"payload":{"kind":"advisory","title":"CVE-2026-86882","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","evidence":"cve:CVE-2026-86882","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86882","aliases":["CVE-2026-86882"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:46.194Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86882","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:05:59.829427Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:06:04.034Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:46.194Z"}}},"related_cves":[{"value":"CVE-2026-86882","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6badc301-1a5f-4070-a7c1-e3fe20804ce8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86882","advisory_id":"6badc301-1a5f-4070-a7c1-e3fe20804ce8","event_types":["advisory"],"published_at":"2026-10-25T11:38:12.525233+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:51:07.153+00:00","detail_url":"/events/42021"},"members":[{"id":42021,"cve_ids":["CVE-2026-86882"],"payload":{"kind":"advisory","title":"CVE-2026-86882","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","evidence":"cve:CVE-2026-86882","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86882","aliases":["CVE-2026-86882"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:46.194Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86882","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:05:59.829427Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:06:04.034Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:46.194Z"}}},"related_cves":[{"value":"CVE-2026-86882","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6badc301-1a5f-4070-a7c1-e3fe20804ce8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86882","advisory_id":"6badc301-1a5f-4070-a7c1-e3fe20804ce8","event_types":["advisory"],"published_at":"2026-10-25T11:38:12.525233+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:51:07.153+00:00","detail_url":"/events/42021"}]}},{"id":42411,"cve_ids":["CVE-2026-86881"],"payload":{"kind":"advisory","title":"CVE-2026-86881","summary":"A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages.","evidence":"cve:CVE-2026-86881","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86881","aliases":["CVE-2026-86881"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:45.874Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.1,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86881","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-16T12:57:03.171492Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-295","description":"CWE-295 Improper Certificate Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T12:57:12.228Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:45.874Z"}}},"related_cves":[{"value":"CVE-2026-86881","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:66c1f8e7-db74-4020-9149-465e86d7fc29","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86881","advisory_id":"66c1f8e7-db74-4020-9149-465e86d7fc29","event_types":["advisory"],"published_at":"2026-10-25T11:38:11.919433+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:47:49.094+00:00","detail_url":"/advisories/advisory%3A66c1f8e7-db74-4020-9149-465e86d7fc29","group":{"id":"advisory:66c1f8e7-db74-4020-9149-465e86d7fc29","revision":1,"primary_event_id":42020,"change":"published","superseded_by":[],"changed":{"id":42020,"cve_ids":["CVE-2026-86881"],"payload":{"kind":"advisory","title":"CVE-2026-86881","summary":"A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages.","evidence":"cve:CVE-2026-86881","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86881","aliases":["CVE-2026-86881"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:45.874Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.1,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86881","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-16T12:57:03.171492Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-295","description":"CWE-295 Improper Certificate Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T12:57:12.228Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:45.874Z"}}},"related_cves":[{"value":"CVE-2026-86881","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:66c1f8e7-db74-4020-9149-465e86d7fc29","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86881","advisory_id":"66c1f8e7-db74-4020-9149-465e86d7fc29","event_types":["advisory"],"published_at":"2026-10-25T11:38:11.919433+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:47:49.094+00:00","detail_url":"/events/42020"},"members":[{"id":42020,"cve_ids":["CVE-2026-86881"],"payload":{"kind":"advisory","title":"CVE-2026-86881","summary":"A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages.","evidence":"cve:CVE-2026-86881","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86881","aliases":["CVE-2026-86881"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:45.874Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.1,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86881","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-16T12:57:03.171492Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-295","description":"CWE-295 Improper Certificate Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T12:57:12.228Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:45.874Z"}}},"related_cves":[{"value":"CVE-2026-86881","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:66c1f8e7-db74-4020-9149-465e86d7fc29","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86881","advisory_id":"66c1f8e7-db74-4020-9149-465e86d7fc29","event_types":["advisory"],"published_at":"2026-10-25T11:38:11.919433+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:47:49.094+00:00","detail_url":"/events/42020"}]}},{"id":42410,"cve_ids":["CVE-2026-86876"],"payload":{"kind":"advisory","title":"CVE-2026-86876","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. A sandboxed process may be able to circumvent sandbox restrictions.","evidence":"cve:CVE-2026-86876","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86876","aliases":["CVE-2026-86876"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:45.145Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86876","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-14T22:50:41.690826Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-14T22:50:45.086Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:45.145Z"}}},"related_cves":[{"value":"CVE-2026-86876","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0c41c2dc-eb29-456f-a84c-2feef677cce5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86876","advisory_id":"0c41c2dc-eb29-456f-a84c-2feef677cce5","event_types":["advisory"],"published_at":"2026-10-25T11:38:11.297164+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:51:59.688+00:00","detail_url":"/advisories/advisory%3A0c41c2dc-eb29-456f-a84c-2feef677cce5","group":{"id":"advisory:0c41c2dc-eb29-456f-a84c-2feef677cce5","revision":1,"primary_event_id":42019,"change":"published","superseded_by":[],"changed":{"id":42019,"cve_ids":["CVE-2026-86876"],"payload":{"kind":"advisory","title":"CVE-2026-86876","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. A sandboxed process may be able to circumvent sandbox restrictions.","evidence":"cve:CVE-2026-86876","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86876","aliases":["CVE-2026-86876"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:45.145Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86876","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-14T22:50:41.690826Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-14T22:50:45.086Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:45.145Z"}}},"related_cves":[{"value":"CVE-2026-86876","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0c41c2dc-eb29-456f-a84c-2feef677cce5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86876","advisory_id":"0c41c2dc-eb29-456f-a84c-2feef677cce5","event_types":["advisory"],"published_at":"2026-10-25T11:38:11.297164+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:51:59.688+00:00","detail_url":"/events/42019"},"members":[{"id":42019,"cve_ids":["CVE-2026-86876"],"payload":{"kind":"advisory","title":"CVE-2026-86876","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. A sandboxed process may be able to circumvent sandbox restrictions.","evidence":"cve:CVE-2026-86876","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86876","aliases":["CVE-2026-86876"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:45.145Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86876","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-14T22:50:41.690826Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-14T22:50:45.086Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:45.145Z"}}},"related_cves":[{"value":"CVE-2026-86876","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0c41c2dc-eb29-456f-a84c-2feef677cce5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86876","advisory_id":"0c41c2dc-eb29-456f-a84c-2feef677cce5","event_types":["advisory"],"published_at":"2026-10-25T11:38:11.297164+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:51:59.688+00:00","detail_url":"/events/42019"}]}},{"id":42408,"cve_ids":["CVE-2026-86870"],"payload":{"kind":"advisory","title":"CVE-2026-86870","summary":"A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination.","evidence":"cve:CVE-2026-86870","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86870","aliases":["CVE-2026-86870"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:43.441Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86870","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:18:25.583184Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-122","description":"CWE-122 Heap-based Buffer Overflow"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:18:43.549Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:43.441Z"}}},"related_cves":[{"value":"CVE-2026-86870","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3fb78377-38b7-443d-81c9-a89340bba543","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86870","advisory_id":"3fb78377-38b7-443d-81c9-a89340bba543","event_types":["advisory"],"published_at":"2026-10-25T11:38:10.047133+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:23.855+00:00","detail_url":"/advisories/advisory%3A3fb78377-38b7-443d-81c9-a89340bba543","group":{"id":"advisory:3fb78377-38b7-443d-81c9-a89340bba543","revision":1,"primary_event_id":42017,"change":"published","superseded_by":[],"changed":{"id":42017,"cve_ids":["CVE-2026-86870"],"payload":{"kind":"advisory","title":"CVE-2026-86870","summary":"A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination.","evidence":"cve:CVE-2026-86870","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86870","aliases":["CVE-2026-86870"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:43.441Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86870","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:18:25.583184Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-122","description":"CWE-122 Heap-based Buffer Overflow"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:18:43.549Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:43.441Z"}}},"related_cves":[{"value":"CVE-2026-86870","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3fb78377-38b7-443d-81c9-a89340bba543","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86870","advisory_id":"3fb78377-38b7-443d-81c9-a89340bba543","event_types":["advisory"],"published_at":"2026-10-25T11:38:10.047133+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:23.855+00:00","detail_url":"/events/42017"},"members":[{"id":42017,"cve_ids":["CVE-2026-86870"],"payload":{"kind":"advisory","title":"CVE-2026-86870","summary":"A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination.","evidence":"cve:CVE-2026-86870","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86870","aliases":["CVE-2026-86870"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:43.441Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86870","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:18:25.583184Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-122","description":"CWE-122 Heap-based Buffer Overflow"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:18:43.549Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:43.441Z"}}},"related_cves":[{"value":"CVE-2026-86870","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3fb78377-38b7-443d-81c9-a89340bba543","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86870","advisory_id":"3fb78377-38b7-443d-81c9-a89340bba543","event_types":["advisory"],"published_at":"2026-10-25T11:38:10.047133+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:23.855+00:00","detail_url":"/events/42017"}]}},{"id":42405,"cve_ids":["CVE-2026-84636"],"payload":{"kind":"advisory","title":"CVE-2026-84636","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-84636","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84636","aliases":["CVE-2026-84636"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:42.399Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84636","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:11:56.837537Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:12:03.433Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:42.399Z"}}},"related_cves":[{"value":"CVE-2026-84636","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ed9402ba-f9f8-4f1a-be6a-f5764f36455a","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84636","advisory_id":"ed9402ba-f9f8-4f1a-be6a-f5764f36455a","event_types":["advisory"],"published_at":"2026-10-25T11:38:08.095002+00:00","technologies":["core-cve","ios-and-ipados","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:08.749+00:00","detail_url":"/advisories/advisory%3Aed9402ba-f9f8-4f1a-be6a-f5764f36455a","group":{"id":"advisory:ed9402ba-f9f8-4f1a-be6a-f5764f36455a","revision":1,"primary_event_id":42014,"change":"published","superseded_by":[],"changed":{"id":42014,"cve_ids":["CVE-2026-84636"],"payload":{"kind":"advisory","title":"CVE-2026-84636","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-84636","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84636","aliases":["CVE-2026-84636"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:42.399Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84636","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:11:56.837537Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:12:03.433Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:42.399Z"}}},"related_cves":[{"value":"CVE-2026-84636","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ed9402ba-f9f8-4f1a-be6a-f5764f36455a","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84636","advisory_id":"ed9402ba-f9f8-4f1a-be6a-f5764f36455a","event_types":["advisory"],"published_at":"2026-10-25T11:38:08.095002+00:00","technologies":["core-cve","ios-and-ipados","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:08.749+00:00","detail_url":"/events/42014"},"members":[{"id":42014,"cve_ids":["CVE-2026-84636"],"payload":{"kind":"advisory","title":"CVE-2026-84636","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-84636","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84636","aliases":["CVE-2026-84636"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:42.399Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84636","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:11:56.837537Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:12:03.433Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:42.399Z"}}},"related_cves":[{"value":"CVE-2026-84636","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ed9402ba-f9f8-4f1a-be6a-f5764f36455a","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84636","advisory_id":"ed9402ba-f9f8-4f1a-be6a-f5764f36455a","event_types":["advisory"],"published_at":"2026-10-25T11:38:08.095002+00:00","technologies":["core-cve","ios-and-ipados","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:08.749+00:00","detail_url":"/events/42014"}]}},{"id":42404,"cve_ids":["CVE-2026-84635"],"payload":{"kind":"advisory","title":"CVE-2026-84635","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.","evidence":"cve:CVE-2026-84635","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84635","aliases":["CVE-2026-84635"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:41.989Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84635","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-16T19:33:36.934407Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T19:33:42.838Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:41.989Z"}}},"related_cves":[{"value":"CVE-2026-84635","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bf4eac75-ae77-45d8-94dc-023edcef6079","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84635","advisory_id":"bf4eac75-ae77-45d8-94dc-023edcef6079","event_types":["advisory"],"published_at":"2026-10-25T11:38:07.48677+00:00","technologies":["core-cve","ios-and-ipados","macos","safari","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:05.014+00:00","detail_url":"/advisories/advisory%3Abf4eac75-ae77-45d8-94dc-023edcef6079","group":{"id":"advisory:bf4eac75-ae77-45d8-94dc-023edcef6079","revision":1,"primary_event_id":42013,"change":"published","superseded_by":[],"changed":{"id":42013,"cve_ids":["CVE-2026-84635"],"payload":{"kind":"advisory","title":"CVE-2026-84635","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.","evidence":"cve:CVE-2026-84635","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84635","aliases":["CVE-2026-84635"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:41.989Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84635","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-16T19:33:36.934407Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T19:33:42.838Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:41.989Z"}}},"related_cves":[{"value":"CVE-2026-84635","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bf4eac75-ae77-45d8-94dc-023edcef6079","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84635","advisory_id":"bf4eac75-ae77-45d8-94dc-023edcef6079","event_types":["advisory"],"published_at":"2026-10-25T11:38:07.48677+00:00","technologies":["core-cve","ios-and-ipados","macos","safari","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:05.014+00:00","detail_url":"/events/42013"},"members":[{"id":42013,"cve_ids":["CVE-2026-84635"],"payload":{"kind":"advisory","title":"CVE-2026-84635","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.","evidence":"cve:CVE-2026-84635","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84635","aliases":["CVE-2026-84635"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:41.989Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84635","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-16T19:33:36.934407Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T19:33:42.838Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:41.989Z"}}},"related_cves":[{"value":"CVE-2026-84635","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bf4eac75-ae77-45d8-94dc-023edcef6079","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84635","advisory_id":"bf4eac75-ae77-45d8-94dc-023edcef6079","event_types":["advisory"],"published_at":"2026-10-25T11:38:07.48677+00:00","technologies":["core-cve","ios-and-ipados","macos","safari","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:05.014+00:00","detail_url":"/events/42013"}]}},{"id":42402,"cve_ids":["CVE-2026-84626"],"payload":{"kind":"advisory","title":"CVE-2026-84626","summary":"An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user has installed.","evidence":"cve:CVE-2026-84626","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84626","aliases":["CVE-2026-84626"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:40.937Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"LOCAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84626","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:51:25.320452Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:51:27.790Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:40.937Z"}}},"related_cves":[{"value":"CVE-2026-84626","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d6d83229-c415-4a55-a2ea-2a23a76a1ad5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84626","advisory_id":"d6d83229-c415-4a55-a2ea-2a23a76a1ad5","event_types":["advisory"],"published_at":"2026-10-25T11:38:06.24765+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:47.768+00:00","detail_url":"/advisories/advisory%3Ad6d83229-c415-4a55-a2ea-2a23a76a1ad5","group":{"id":"advisory:d6d83229-c415-4a55-a2ea-2a23a76a1ad5","revision":1,"primary_event_id":42011,"change":"published","superseded_by":[],"changed":{"id":42011,"cve_ids":["CVE-2026-84626"],"payload":{"kind":"advisory","title":"CVE-2026-84626","summary":"An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user has installed.","evidence":"cve:CVE-2026-84626","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84626","aliases":["CVE-2026-84626"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:40.937Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"LOCAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84626","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:51:25.320452Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:51:27.790Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:40.937Z"}}},"related_cves":[{"value":"CVE-2026-84626","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d6d83229-c415-4a55-a2ea-2a23a76a1ad5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84626","advisory_id":"d6d83229-c415-4a55-a2ea-2a23a76a1ad5","event_types":["advisory"],"published_at":"2026-10-25T11:38:06.24765+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:47.768+00:00","detail_url":"/events/42011"},"members":[{"id":42011,"cve_ids":["CVE-2026-84626"],"payload":{"kind":"advisory","title":"CVE-2026-84626","summary":"An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user has installed.","evidence":"cve:CVE-2026-84626","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84626","aliases":["CVE-2026-84626"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:40.937Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"LOCAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84626","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:51:25.320452Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:51:27.790Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:40.937Z"}}},"related_cves":[{"value":"CVE-2026-84626","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d6d83229-c415-4a55-a2ea-2a23a76a1ad5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84626","advisory_id":"d6d83229-c415-4a55-a2ea-2a23a76a1ad5","event_types":["advisory"],"published_at":"2026-10-25T11:38:06.24765+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:47.768+00:00","detail_url":"/events/42011"}]}},{"id":42401,"cve_ids":["CVE-2026-84630"],"payload":{"kind":"advisory","title":"CVE-2026-84630","summary":"A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84630","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84630","aliases":["CVE-2026-84630"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:41.358Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84630","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:09:35.658568Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:09:39.611Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:41.358Z"}}},"related_cves":[{"value":"CVE-2026-84630","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3dfbf03a-9ae1-422b-aff8-37d1c05498be","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84630","advisory_id":"3dfbf03a-9ae1-422b-aff8-37d1c05498be","event_types":["advisory"],"published_at":"2026-10-25T11:38:05.621275+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:54.789+00:00","detail_url":"/advisories/advisory%3A3dfbf03a-9ae1-422b-aff8-37d1c05498be","group":{"id":"advisory:3dfbf03a-9ae1-422b-aff8-37d1c05498be","revision":1,"primary_event_id":42010,"change":"published","superseded_by":[],"changed":{"id":42010,"cve_ids":["CVE-2026-84630"],"payload":{"kind":"advisory","title":"CVE-2026-84630","summary":"A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84630","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84630","aliases":["CVE-2026-84630"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:41.358Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84630","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:09:35.658568Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:09:39.611Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:41.358Z"}}},"related_cves":[{"value":"CVE-2026-84630","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3dfbf03a-9ae1-422b-aff8-37d1c05498be","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84630","advisory_id":"3dfbf03a-9ae1-422b-aff8-37d1c05498be","event_types":["advisory"],"published_at":"2026-10-25T11:38:05.621275+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:54.789+00:00","detail_url":"/events/42010"},"members":[{"id":42010,"cve_ids":["CVE-2026-84630"],"payload":{"kind":"advisory","title":"CVE-2026-84630","summary":"A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84630","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84630","aliases":["CVE-2026-84630"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:41.358Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84630","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:09:35.658568Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:09:39.611Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:41.358Z"}}},"related_cves":[{"value":"CVE-2026-84630","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3dfbf03a-9ae1-422b-aff8-37d1c05498be","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84630","advisory_id":"3dfbf03a-9ae1-422b-aff8-37d1c05498be","event_types":["advisory"],"published_at":"2026-10-25T11:38:05.621275+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:54.789+00:00","detail_url":"/events/42010"}]}},{"id":42399,"cve_ids":["CVE-2026-84622"],"payload":{"kind":"advisory","title":"CVE-2026-84622","summary":"A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app with root privileges may be able to read uninitialized kernel memory.","evidence":"cve:CVE-2026-84622","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84622","aliases":["CVE-2026-84622"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:40.638Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84622","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:34:03.607539Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-908","description":"CWE-908 Use of Uninitialized Resource"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:34:13.554Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:40.638Z"}}},"related_cves":[{"value":"CVE-2026-84622","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d8dca76d-1505-43a2-9dea-f4c06cf989f3","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84622","advisory_id":"d8dca76d-1505-43a2-9dea-f4c06cf989f3","event_types":["advisory"],"published_at":"2026-10-25T11:38:04.402306+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:59.138+00:00","detail_url":"/advisories/advisory%3Ad8dca76d-1505-43a2-9dea-f4c06cf989f3","group":{"id":"advisory:d8dca76d-1505-43a2-9dea-f4c06cf989f3","revision":1,"primary_event_id":42008,"change":"published","superseded_by":[],"changed":{"id":42008,"cve_ids":["CVE-2026-84622"],"payload":{"kind":"advisory","title":"CVE-2026-84622","summary":"A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app with root privileges may be able to read uninitialized kernel memory.","evidence":"cve:CVE-2026-84622","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84622","aliases":["CVE-2026-84622"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:40.638Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84622","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:34:03.607539Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-908","description":"CWE-908 Use of Uninitialized Resource"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:34:13.554Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:40.638Z"}}},"related_cves":[{"value":"CVE-2026-84622","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d8dca76d-1505-43a2-9dea-f4c06cf989f3","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84622","advisory_id":"d8dca76d-1505-43a2-9dea-f4c06cf989f3","event_types":["advisory"],"published_at":"2026-10-25T11:38:04.402306+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:59.138+00:00","detail_url":"/events/42008"},"members":[{"id":42008,"cve_ids":["CVE-2026-84622"],"payload":{"kind":"advisory","title":"CVE-2026-84622","summary":"A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app with root privileges may be able to read uninitialized kernel memory.","evidence":"cve:CVE-2026-84622","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84622","aliases":["CVE-2026-84622"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:40.638Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84622","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:34:03.607539Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-908","description":"CWE-908 Use of Uninitialized Resource"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:34:13.554Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:40.638Z"}}},"related_cves":[{"value":"CVE-2026-84622","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d8dca76d-1505-43a2-9dea-f4c06cf989f3","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84622","advisory_id":"d8dca76d-1505-43a2-9dea-f4c06cf989f3","event_types":["advisory"],"published_at":"2026-10-25T11:38:04.402306+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:59.138+00:00","detail_url":"/events/42008"}]}},{"id":42397,"cve_ids":["CVE-2026-84602"],"payload":{"kind":"advisory","title":"CVE-2026-84602","summary":"A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84602","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84602","aliases":["CVE-2026-84602"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:39.254Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84602","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:37:48.061251Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:37:51.186Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:39.254Z"}}},"related_cves":[{"value":"CVE-2026-84602","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f6ffb922-b3b4-4a86-8203-c7803a7f60ff","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84602","advisory_id":"f6ffb922-b3b4-4a86-8203-c7803a7f60ff","event_types":["advisory"],"published_at":"2026-10-25T11:38:03.141099+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:25.038+00:00","detail_url":"/advisories/advisory%3Af6ffb922-b3b4-4a86-8203-c7803a7f60ff","group":{"id":"advisory:f6ffb922-b3b4-4a86-8203-c7803a7f60ff","revision":1,"primary_event_id":42006,"change":"published","superseded_by":[],"changed":{"id":42006,"cve_ids":["CVE-2026-84602"],"payload":{"kind":"advisory","title":"CVE-2026-84602","summary":"A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84602","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84602","aliases":["CVE-2026-84602"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:39.254Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84602","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:37:48.061251Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:37:51.186Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:39.254Z"}}},"related_cves":[{"value":"CVE-2026-84602","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f6ffb922-b3b4-4a86-8203-c7803a7f60ff","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84602","advisory_id":"f6ffb922-b3b4-4a86-8203-c7803a7f60ff","event_types":["advisory"],"published_at":"2026-10-25T11:38:03.141099+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:25.038+00:00","detail_url":"/events/42006"},"members":[{"id":42006,"cve_ids":["CVE-2026-84602"],"payload":{"kind":"advisory","title":"CVE-2026-84602","summary":"A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84602","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84602","aliases":["CVE-2026-84602"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:39.254Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84602","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:37:48.061251Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:37:51.186Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:39.254Z"}}},"related_cves":[{"value":"CVE-2026-84602","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f6ffb922-b3b4-4a86-8203-c7803a7f60ff","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84602","advisory_id":"f6ffb922-b3b4-4a86-8203-c7803a7f60ff","event_types":["advisory"],"published_at":"2026-10-25T11:38:03.141099+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:25.038+00:00","detail_url":"/events/42006"}]}},{"id":42396,"cve_ids":["CVE-2026-84600"],"payload":{"kind":"advisory","title":"CVE-2026-84600","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A malicious shortcut may be able to send messages without user confirmation.","evidence":"cve:CVE-2026-84600","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84600","aliases":["CVE-2026-84600"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:38.838Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84600","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T14:33:49.034335Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T14:33:52.562Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:38.838Z"}}},"related_cves":[{"value":"CVE-2026-84600","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7f63d1a3-3c07-44ca-8d63-f7106a48c7a2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84600","advisory_id":"7f63d1a3-3c07-44ca-8d63-f7106a48c7a2","event_types":["advisory"],"published_at":"2026-10-25T11:38:02.48258+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:55.958+00:00","detail_url":"/advisories/advisory%3A7f63d1a3-3c07-44ca-8d63-f7106a48c7a2","group":{"id":"advisory:7f63d1a3-3c07-44ca-8d63-f7106a48c7a2","revision":1,"primary_event_id":42005,"change":"published","superseded_by":[],"changed":{"id":42005,"cve_ids":["CVE-2026-84600"],"payload":{"kind":"advisory","title":"CVE-2026-84600","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A malicious shortcut may be able to send messages without user confirmation.","evidence":"cve:CVE-2026-84600","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84600","aliases":["CVE-2026-84600"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:38.838Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84600","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T14:33:49.034335Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T14:33:52.562Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:38.838Z"}}},"related_cves":[{"value":"CVE-2026-84600","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7f63d1a3-3c07-44ca-8d63-f7106a48c7a2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84600","advisory_id":"7f63d1a3-3c07-44ca-8d63-f7106a48c7a2","event_types":["advisory"],"published_at":"2026-10-25T11:38:02.48258+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:55.958+00:00","detail_url":"/events/42005"},"members":[{"id":42005,"cve_ids":["CVE-2026-84600"],"payload":{"kind":"advisory","title":"CVE-2026-84600","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A malicious shortcut may be able to send messages without user confirmation.","evidence":"cve:CVE-2026-84600","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84600","aliases":["CVE-2026-84600"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:38.838Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84600","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T14:33:49.034335Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T14:33:52.562Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:38.838Z"}}},"related_cves":[{"value":"CVE-2026-84600","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7f63d1a3-3c07-44ca-8d63-f7106a48c7a2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84600","advisory_id":"7f63d1a3-3c07-44ca-8d63-f7106a48c7a2","event_types":["advisory"],"published_at":"2026-10-25T11:38:02.48258+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:55.958+00:00","detail_url":"/events/42005"}]}},{"id":42392,"cve_ids":["CVE-2026-84582"],"payload":{"kind":"advisory","title":"CVE-2026-84582","summary":"A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-84582","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84582","aliases":["CVE-2026-84582"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:37.797Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:37.797Z"}}},"related_cves":[{"value":"CVE-2026-84582","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ff03536c-907d-4a23-9e01-9569a1e51943","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84582","advisory_id":"ff03536c-907d-4a23-9e01-9569a1e51943","event_types":["advisory"],"published_at":"2026-10-25T11:38:00.427406+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:37.797+00:00","detail_url":"/advisories/advisory%3Aff03536c-907d-4a23-9e01-9569a1e51943","group":{"id":"advisory:ff03536c-907d-4a23-9e01-9569a1e51943","revision":1,"primary_event_id":42002,"change":"published","superseded_by":[],"changed":{"id":42002,"cve_ids":["CVE-2026-84582"],"payload":{"kind":"advisory","title":"CVE-2026-84582","summary":"A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-84582","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84582","aliases":["CVE-2026-84582"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:37.797Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:37.797Z"}}},"related_cves":[{"value":"CVE-2026-84582","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ff03536c-907d-4a23-9e01-9569a1e51943","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84582","advisory_id":"ff03536c-907d-4a23-9e01-9569a1e51943","event_types":["advisory"],"published_at":"2026-10-25T11:38:00.427406+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:37.797+00:00","detail_url":"/events/42002"},"members":[{"id":42002,"cve_ids":["CVE-2026-84582"],"payload":{"kind":"advisory","title":"CVE-2026-84582","summary":"A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-84582","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84582","aliases":["CVE-2026-84582"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:37.797Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:37.797Z"}}},"related_cves":[{"value":"CVE-2026-84582","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ff03536c-907d-4a23-9e01-9569a1e51943","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84582","advisory_id":"ff03536c-907d-4a23-9e01-9569a1e51943","event_types":["advisory"],"published_at":"2026-10-25T11:38:00.427406+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:37.797+00:00","detail_url":"/events/42002"}]}},{"id":42387,"cve_ids":["CVE-2026-84564"],"payload":{"kind":"advisory","title":"CVE-2026-84564","summary":"An uninitialized memory issue was addressed with improved memory initialization. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may result in disclosure of process memory.","evidence":"cve:CVE-2026-84564","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84564","aliases":["CVE-2026-84564"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:35.398Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84564","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:12:39.284650Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-457","description":"CWE-457 Use of Uninitialized Variable"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:12:42.470Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:35.398Z"}}},"related_cves":[{"value":"CVE-2026-84564","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:885435bf-3c60-4455-a4e5-8efeaae37bf6","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84564","advisory_id":"885435bf-3c60-4455-a4e5-8efeaae37bf6","event_types":["advisory"],"published_at":"2026-10-25T11:37:57.232687+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:09.688+00:00","detail_url":"/advisories/advisory%3A885435bf-3c60-4455-a4e5-8efeaae37bf6","group":{"id":"advisory:885435bf-3c60-4455-a4e5-8efeaae37bf6","revision":1,"primary_event_id":41997,"change":"published","superseded_by":[],"changed":{"id":41997,"cve_ids":["CVE-2026-84564"],"payload":{"kind":"advisory","title":"CVE-2026-84564","summary":"An uninitialized memory issue was addressed with improved memory initialization. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may result in disclosure of process memory.","evidence":"cve:CVE-2026-84564","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84564","aliases":["CVE-2026-84564"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:35.398Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84564","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:12:39.284650Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-457","description":"CWE-457 Use of Uninitialized Variable"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:12:42.470Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:35.398Z"}}},"related_cves":[{"value":"CVE-2026-84564","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:885435bf-3c60-4455-a4e5-8efeaae37bf6","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84564","advisory_id":"885435bf-3c60-4455-a4e5-8efeaae37bf6","event_types":["advisory"],"published_at":"2026-10-25T11:37:57.232687+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:09.688+00:00","detail_url":"/events/41997"},"members":[{"id":41997,"cve_ids":["CVE-2026-84564"],"payload":{"kind":"advisory","title":"CVE-2026-84564","summary":"An uninitialized memory issue was addressed with improved memory initialization. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may result in disclosure of process memory.","evidence":"cve:CVE-2026-84564","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84564","aliases":["CVE-2026-84564"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:35.398Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84564","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:12:39.284650Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-457","description":"CWE-457 Use of Uninitialized Variable"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:12:42.470Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:35.398Z"}}},"related_cves":[{"value":"CVE-2026-84564","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:885435bf-3c60-4455-a4e5-8efeaae37bf6","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84564","advisory_id":"885435bf-3c60-4455-a4e5-8efeaae37bf6","event_types":["advisory"],"published_at":"2026-10-25T11:37:57.232687+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:09.688+00:00","detail_url":"/events/41997"}]}},{"id":42386,"cve_ids":["CVE-2026-84560"],"payload":{"kind":"advisory","title":"CVE-2026-84560","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may gain unauthorized access to Bluetooth.","evidence":"cve:CVE-2026-84560","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84560","aliases":["CVE-2026-84560"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:34.647Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.1,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84560","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T16:57:34.437102Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-863","description":"CWE-863 Incorrect Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T16:57:47.608Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:34.647Z"}}},"related_cves":[{"value":"CVE-2026-84560","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4c788f14-464f-4b64-be9b-5053aa6c3885","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84560","advisory_id":"4c788f14-464f-4b64-be9b-5053aa6c3885","event_types":["advisory"],"published_at":"2026-10-25T11:37:56.601292+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:47:15.829+00:00","detail_url":"/advisories/advisory%3A4c788f14-464f-4b64-be9b-5053aa6c3885","group":{"id":"advisory:4c788f14-464f-4b64-be9b-5053aa6c3885","revision":1,"primary_event_id":41996,"change":"published","superseded_by":[],"changed":{"id":41996,"cve_ids":["CVE-2026-84560"],"payload":{"kind":"advisory","title":"CVE-2026-84560","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may gain unauthorized access to Bluetooth.","evidence":"cve:CVE-2026-84560","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84560","aliases":["CVE-2026-84560"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:34.647Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.1,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84560","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T16:57:34.437102Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-863","description":"CWE-863 Incorrect Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T16:57:47.608Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:34.647Z"}}},"related_cves":[{"value":"CVE-2026-84560","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4c788f14-464f-4b64-be9b-5053aa6c3885","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84560","advisory_id":"4c788f14-464f-4b64-be9b-5053aa6c3885","event_types":["advisory"],"published_at":"2026-10-25T11:37:56.601292+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:47:15.829+00:00","detail_url":"/events/41996"},"members":[{"id":41996,"cve_ids":["CVE-2026-84560"],"payload":{"kind":"advisory","title":"CVE-2026-84560","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may gain unauthorized access to Bluetooth.","evidence":"cve:CVE-2026-84560","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84560","aliases":["CVE-2026-84560"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:34.647Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.1,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84560","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T16:57:34.437102Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-863","description":"CWE-863 Incorrect Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T16:57:47.608Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:34.647Z"}}},"related_cves":[{"value":"CVE-2026-84560","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4c788f14-464f-4b64-be9b-5053aa6c3885","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84560","advisory_id":"4c788f14-464f-4b64-be9b-5053aa6c3885","event_types":["advisory"],"published_at":"2026-10-25T11:37:56.601292+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:47:15.829+00:00","detail_url":"/events/41996"}]}},{"id":42385,"cve_ids":["CVE-2026-84561"],"payload":{"kind":"advisory","title":"CVE-2026-84561","summary":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.","evidence":"cve:CVE-2026-84561","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84561","aliases":["CVE-2026-84561"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:35.120Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84561","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-16T14:26:06.505033Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-415","description":"CWE-415 Double Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T14:26:17.072Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:35.120Z"}}},"related_cves":[{"value":"CVE-2026-84561","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:55d8eb98-f416-40f1-b2ff-31ea21a516ec","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84561","advisory_id":"55d8eb98-f416-40f1-b2ff-31ea21a516ec","event_types":["advisory"],"published_at":"2026-10-25T11:37:55.984648+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:10.362+00:00","detail_url":"/advisories/advisory%3A55d8eb98-f416-40f1-b2ff-31ea21a516ec","group":{"id":"advisory:55d8eb98-f416-40f1-b2ff-31ea21a516ec","revision":1,"primary_event_id":41995,"change":"published","superseded_by":[],"changed":{"id":41995,"cve_ids":["CVE-2026-84561"],"payload":{"kind":"advisory","title":"CVE-2026-84561","summary":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.","evidence":"cve:CVE-2026-84561","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84561","aliases":["CVE-2026-84561"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:35.120Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84561","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-16T14:26:06.505033Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-415","description":"CWE-415 Double Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T14:26:17.072Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:35.120Z"}}},"related_cves":[{"value":"CVE-2026-84561","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:55d8eb98-f416-40f1-b2ff-31ea21a516ec","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84561","advisory_id":"55d8eb98-f416-40f1-b2ff-31ea21a516ec","event_types":["advisory"],"published_at":"2026-10-25T11:37:55.984648+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:10.362+00:00","detail_url":"/events/41995"},"members":[{"id":41995,"cve_ids":["CVE-2026-84561"],"payload":{"kind":"advisory","title":"CVE-2026-84561","summary":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.","evidence":"cve:CVE-2026-84561","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84561","aliases":["CVE-2026-84561"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:35.120Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84561","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-16T14:26:06.505033Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-415","description":"CWE-415 Double Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T14:26:17.072Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:35.120Z"}}},"related_cves":[{"value":"CVE-2026-84561","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:55d8eb98-f416-40f1-b2ff-31ea21a516ec","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84561","advisory_id":"55d8eb98-f416-40f1-b2ff-31ea21a516ec","event_types":["advisory"],"published_at":"2026-10-25T11:37:55.984648+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:10.362+00:00","detail_url":"/events/41995"}]}},{"id":42380,"cve_ids":["CVE-2026-84551"],"payload":{"kind":"advisory","title":"CVE-2026-84551","summary":"A logic issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to bypass network restrictions.","evidence":"cve:CVE-2026-84551","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84551","aliases":["CVE-2026-84551"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:33.291Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84551","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:59:27.399871Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:59:30.131Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:33.291Z"}}},"related_cves":[{"value":"CVE-2026-84551","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:340ec0e0-3507-4ba4-a774-68f99c54ea01","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84551","advisory_id":"340ec0e0-3507-4ba4-a774-68f99c54ea01","event_types":["advisory"],"published_at":"2026-10-25T11:37:52.891222+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:22.412+00:00","detail_url":"/advisories/advisory%3A340ec0e0-3507-4ba4-a774-68f99c54ea01","group":{"id":"advisory:340ec0e0-3507-4ba4-a774-68f99c54ea01","revision":1,"primary_event_id":41990,"change":"published","superseded_by":[],"changed":{"id":41990,"cve_ids":["CVE-2026-84551"],"payload":{"kind":"advisory","title":"CVE-2026-84551","summary":"A logic issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to bypass network restrictions.","evidence":"cve:CVE-2026-84551","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84551","aliases":["CVE-2026-84551"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:33.291Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84551","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:59:27.399871Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:59:30.131Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:33.291Z"}}},"related_cves":[{"value":"CVE-2026-84551","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:340ec0e0-3507-4ba4-a774-68f99c54ea01","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84551","advisory_id":"340ec0e0-3507-4ba4-a774-68f99c54ea01","event_types":["advisory"],"published_at":"2026-10-25T11:37:52.891222+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:22.412+00:00","detail_url":"/events/41990"},"members":[{"id":41990,"cve_ids":["CVE-2026-84551"],"payload":{"kind":"advisory","title":"CVE-2026-84551","summary":"A logic issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to bypass network restrictions.","evidence":"cve:CVE-2026-84551","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84551","aliases":["CVE-2026-84551"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:33.291Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84551","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:59:27.399871Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:59:30.131Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:33.291Z"}}},"related_cves":[{"value":"CVE-2026-84551","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:340ec0e0-3507-4ba4-a774-68f99c54ea01","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84551","advisory_id":"340ec0e0-3507-4ba4-a774-68f99c54ea01","event_types":["advisory"],"published_at":"2026-10-25T11:37:52.891222+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:22.412+00:00","detail_url":"/events/41990"}]}},{"id":42373,"cve_ids":["CVE-2026-84533"],"payload":{"kind":"advisory","title":"CVE-2026-84533","summary":"A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An attacker in a privileged network position may be able to modify network traffic.","evidence":"cve:CVE-2026-84533","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84533","aliases":["CVE-2026-84533"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:30.458Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84533","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T20:28:57.715678Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-353","description":"CWE-353 Missing Support for Integrity Check"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T20:29:02.526Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:30.458Z"}}},"related_cves":[{"value":"CVE-2026-84533","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:256c8e5c-2c0d-4b4b-88d7-6ef20fdfb8e8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84533","advisory_id":"256c8e5c-2c0d-4b4b-88d7-6ef20fdfb8e8","event_types":["advisory"],"published_at":"2026-10-25T11:37:48.397521+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:12.835+00:00","detail_url":"/advisories/advisory%3A256c8e5c-2c0d-4b4b-88d7-6ef20fdfb8e8","group":{"id":"advisory:256c8e5c-2c0d-4b4b-88d7-6ef20fdfb8e8","revision":1,"primary_event_id":41983,"change":"published","superseded_by":[],"changed":{"id":41983,"cve_ids":["CVE-2026-84533"],"payload":{"kind":"advisory","title":"CVE-2026-84533","summary":"A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An attacker in a privileged network position may be able to modify network traffic.","evidence":"cve:CVE-2026-84533","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84533","aliases":["CVE-2026-84533"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:30.458Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84533","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T20:28:57.715678Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-353","description":"CWE-353 Missing Support for Integrity Check"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T20:29:02.526Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:30.458Z"}}},"related_cves":[{"value":"CVE-2026-84533","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:256c8e5c-2c0d-4b4b-88d7-6ef20fdfb8e8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84533","advisory_id":"256c8e5c-2c0d-4b4b-88d7-6ef20fdfb8e8","event_types":["advisory"],"published_at":"2026-10-25T11:37:48.397521+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:12.835+00:00","detail_url":"/events/41983"},"members":[{"id":41983,"cve_ids":["CVE-2026-84533"],"payload":{"kind":"advisory","title":"CVE-2026-84533","summary":"A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An attacker in a privileged network position may be able to modify network traffic.","evidence":"cve:CVE-2026-84533","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84533","aliases":["CVE-2026-84533"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:30.458Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84533","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T20:28:57.715678Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-353","description":"CWE-353 Missing Support for Integrity Check"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T20:29:02.526Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:30.458Z"}}},"related_cves":[{"value":"CVE-2026-84533","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:256c8e5c-2c0d-4b4b-88d7-6ef20fdfb8e8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84533","advisory_id":"256c8e5c-2c0d-4b4b-88d7-6ef20fdfb8e8","event_types":["advisory"],"published_at":"2026-10-25T11:37:48.397521+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:12.835+00:00","detail_url":"/events/41983"}]}},{"id":42371,"cve_ids":["CVE-2026-84530"],"payload":{"kind":"advisory","title":"CVE-2026-84530","summary":"An information disclosure issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.","evidence":"cve:CVE-2026-84530","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84530","aliases":["CVE-2026-84530"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:29.820Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"LOCAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84530","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:56:47.638619Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:56:52.050Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:29.820Z"}}},"related_cves":[{"value":"CVE-2026-84530","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:37ed610a-5f4b-4bf8-b3b2-7f9eee670afb","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84530","advisory_id":"37ed610a-5f4b-4bf8-b3b2-7f9eee670afb","event_types":["advisory"],"published_at":"2026-10-25T11:37:47.155428+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:11.174+00:00","detail_url":"/advisories/advisory%3A37ed610a-5f4b-4bf8-b3b2-7f9eee670afb","group":{"id":"advisory:37ed610a-5f4b-4bf8-b3b2-7f9eee670afb","revision":1,"primary_event_id":41981,"change":"published","superseded_by":[],"changed":{"id":41981,"cve_ids":["CVE-2026-84530"],"payload":{"kind":"advisory","title":"CVE-2026-84530","summary":"An information disclosure issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.","evidence":"cve:CVE-2026-84530","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84530","aliases":["CVE-2026-84530"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:29.820Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"LOCAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84530","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:56:47.638619Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:56:52.050Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:29.820Z"}}},"related_cves":[{"value":"CVE-2026-84530","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:37ed610a-5f4b-4bf8-b3b2-7f9eee670afb","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84530","advisory_id":"37ed610a-5f4b-4bf8-b3b2-7f9eee670afb","event_types":["advisory"],"published_at":"2026-10-25T11:37:47.155428+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:11.174+00:00","detail_url":"/events/41981"},"members":[{"id":41981,"cve_ids":["CVE-2026-84530"],"payload":{"kind":"advisory","title":"CVE-2026-84530","summary":"An information disclosure issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.","evidence":"cve:CVE-2026-84530","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84530","aliases":["CVE-2026-84530"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:29.820Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"LOCAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84530","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:56:47.638619Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:56:52.050Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:29.820Z"}}},"related_cves":[{"value":"CVE-2026-84530","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:37ed610a-5f4b-4bf8-b3b2-7f9eee670afb","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84530","advisory_id":"37ed610a-5f4b-4bf8-b3b2-7f9eee670afb","event_types":["advisory"],"published_at":"2026-10-25T11:37:47.155428+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:11.174+00:00","detail_url":"/events/41981"}]}},{"id":42370,"cve_ids":["CVE-2026-84523"],"payload":{"kind":"advisory","title":"CVE-2026-84523","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or write kernel memory.","evidence":"cve:CVE-2026-84523","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84523","aliases":["CVE-2026-84523"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:29.405Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84523","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:07:39.091661Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:07:45.300Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:29.405Z"}}},"related_cves":[{"value":"CVE-2026-84523","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e6982cc3-3117-4099-ad4e-fa25305cd6ad","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84523","advisory_id":"e6982cc3-3117-4099-ad4e-fa25305cd6ad","event_types":["advisory"],"published_at":"2026-10-25T11:37:46.540994+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:51:02.122+00:00","detail_url":"/advisories/advisory%3Ae6982cc3-3117-4099-ad4e-fa25305cd6ad","group":{"id":"advisory:e6982cc3-3117-4099-ad4e-fa25305cd6ad","revision":1,"primary_event_id":41980,"change":"published","superseded_by":[],"changed":{"id":41980,"cve_ids":["CVE-2026-84523"],"payload":{"kind":"advisory","title":"CVE-2026-84523","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or write kernel memory.","evidence":"cve:CVE-2026-84523","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84523","aliases":["CVE-2026-84523"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:29.405Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84523","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:07:39.091661Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:07:45.300Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:29.405Z"}}},"related_cves":[{"value":"CVE-2026-84523","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e6982cc3-3117-4099-ad4e-fa25305cd6ad","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84523","advisory_id":"e6982cc3-3117-4099-ad4e-fa25305cd6ad","event_types":["advisory"],"published_at":"2026-10-25T11:37:46.540994+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:51:02.122+00:00","detail_url":"/events/41980"},"members":[{"id":41980,"cve_ids":["CVE-2026-84523"],"payload":{"kind":"advisory","title":"CVE-2026-84523","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or write kernel memory.","evidence":"cve:CVE-2026-84523","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84523","aliases":["CVE-2026-84523"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:29.405Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84523","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:07:39.091661Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:07:45.300Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:29.405Z"}}},"related_cves":[{"value":"CVE-2026-84523","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e6982cc3-3117-4099-ad4e-fa25305cd6ad","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84523","advisory_id":"e6982cc3-3117-4099-ad4e-fa25305cd6ad","event_types":["advisory"],"published_at":"2026-10-25T11:37:46.540994+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:51:02.122+00:00","detail_url":"/events/41980"}]}}],"next_after":42645,"next_before":42370}