Find a vulnerability

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Macos Tahoe",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1\n\nmacOS Tahoe 26.7.1 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149228.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nCoreGraphics\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may lead to arbitrary code\nexecution. Apple is aware of a report that this issue may have been\nexploited in an extremely sophisticated attack against specific targeted\nindividuals on versions of iOS before iOS 27.\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-86950: Meta Product Security\n\nmacOS Tahoe 26.7.1 may be obtained from the Mac App Store or\nApple\u0027s Software Downloads web site:\nhttps://support.apple.com/downloads/\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n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\nlzj/fuXRmIDT79u0uQYq+BhWdIbhHjH0f4xGl14ELrf66ZuRPtY=\n=yI+o\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T04:57:32Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Sep/90"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Sep/90"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/149228"
        },
        {
          "url": "https://support.apple.com/downloads/"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Sep/90"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-86950",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0402",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Sep/90",
            "automated": true,
            "contentSha256": "f9d1aeab2a8f9f6f771471bff834af697a083f489cebd66ede25997566384cec",
            "evidenceScore": 6,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Sep/90",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-09-28T22:13:29Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0402"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-10-02T04:57:32Z",
    "dateUpdated": "2026-10-02T04:57:32Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0402"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Macos Sequoia",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-09-28-2026-3 macOS Sequoia 15.8.1\n\nmacOS Sequoia 15.8.1 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149229.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nCoreGraphics\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted file may lead to arbitrary code\nexecution. Apple is aware of a report that this issue may have been\nexploited in an extremely sophisticated attack against specific targeted\nindividuals on versions of iOS before iOS 27.\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-86950: Meta Product Security\n\nmacOS Sequoia 15.8.1 may be obtained from the Mac App Store or\nApple\u0027s Software Downloads web site:\nhttps://support.apple.com/downloads/\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n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\n2iNeM38fbJbpvHpE+KcxaJ2lC2BqKRIDyrZcF6ZGeVO7v3sLuIE=\n=uNAH\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T04:57:32Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Sep/91"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Sep/91"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/149229"
        },
        {
          "url": "https://support.apple.com/downloads/"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Sep/91"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-09-28-2026-3 macOS Sequoia 15.8.1",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-86950",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0403",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Sep/91",
            "automated": true,
            "contentSha256": "55d9231818856582c9b448f9bafa33fd597acf45876dc213e0a57fe403e2b2ff",
            "evidenceScore": 6,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Sep/91",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-09-28T22:13:55Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0403"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-10-02T04:57:32Z",
    "dateUpdated": "2026-10-02T04:57:32Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0403"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Macos Sequoia",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-09-14-2026-5 macOS Sequoia 15.8\n\nmacOS Sequoia 15.8 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149043.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccelerate Framework\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted image may lead to unexpected\nprocess termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-86882: Peter Malone\n\nAccessibility\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with improved data protection.\nCVE-2026-43664: Stuart Wallace, Rosyna Keller of Totally Not Malicious\nSoftware, Jian Lee (@speedyfriend433), Ilya Andr (andrd3v), Gongyu Ma\n(@Mezone0), David Strnadel, Daniel Febrero, CJ Vana, Asaf Cohen\n\nAPFS\nAvailable for: macOS Sequoia\nImpact: An application may be able to access restricted files\nDescription: A permissions issue was addressed with improved path\nvalidation.\nCVE-2026-86910: an anonymous researcher\n\nAPFS\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84523: Cem Onat Karagun, an anonymous researcher\n\nAppKit\nAvailable for: macOS Sequoia\nImpact: An app may be able to access protected user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-84587: an anonymous researcher\n\nApple Account\nAvailable for: macOS Sequoia\nImpact: An app may be able to use the Sign In With Apple authentication\nflow to access the user\u0027s Apple Account\nDescription: An authentication issue was addressed with improved state\nmanagement.\nCVE-2026-20683: Lehan Dilusha Jayasingha (Sri Lanka), Jasminder Pal\nSingh, Dem0ns (@\u5929\u5e9c\u7b80\u6613\u4fe1\u5de5\u4f5c\u5ba4), Abdelhak Kherroubi\n\nApple Neural Engine\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination\nDescription: An integer overflow was addressed with improved input\nvalidation.\nCVE-2026-65408: tamdao\n\nAppleAVD\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-65407: Franco Belman at Blackwing Intelligence\n\nAppleDouble\nAvailable for: macOS Sequoia\nImpact: Mounting a disk image with maliciously crafted files may lead to\nunexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84519: Richard Zana\n\nAppleMobileFileIntegrity\nAvailable for: macOS Sequoia\nImpact: A malicious app may be able to break out of its sandbox\nDescription: A validation issue existed in the entitlement verification.\nThis issue was addressed with improved validation of the process\nentitlement.\nCVE-2026-65381: Mickey Jin (@patch1t)\n\nATS\nAvailable for: macOS Sequoia\nImpact: An app may be able to read files outside of its sandbox\nDescription: A permissions issue was addressed by removing the\nvulnerable code.\nCVE-2026-43763: Pavan Nallamothu, Jared Reyes\n\nATS\nAvailable for: macOS Sequoia\nImpact: An app may be able to access user-sensitive data\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-84525: D4rthL\n\nATS\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: A permissions issue was addressed with improved validation.\nCVE-2026-65342: Mohamad Dawoud / Abodi Dawoud, Ahmed Alwardani\n\nAudio\nAvailable for: macOS Sequoia\nImpact: An app may be able to leak sensitive user information\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-65339: Mustafa Calap (@ordinal0, dbg.re), Meta Red Team X - Nik\nTsytsarkin\n\nAuthKit\nAvailable for: macOS Sequoia\nImpact: A local app may be able to read a persistent account identifier\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-84583: Zhongcheng Li from IES Red Team\n\nautofs\nAvailable for: macOS Sequoia\nImpact: An attacker with control of a network directory server may be\nable to execute arbitrary code with root privileges\nDescription: A path traversal issue was addressed with improved path\nvalidation.\nCVE-2026-84568: Mr.Gedik (@h4ck2s3c) of Turkish Technology\n\nautofs\nAvailable for: macOS Sequoia\nImpact: An app may be able to bypass Gatekeeper checks\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-84570: Mr.Gedik (@h4ck2s3c)\n\nAutomator\nAvailable for: macOS Sequoia\nImpact: An app may be able to break out of its sandbox\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-84535: Sindre Sorhus, Oren Yomtov, Morris Richman\n(@morrisinlife), Kun Peeks (@SwayZGl1tZyyy)\n\nAVEVideoEncoder\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination\nDescription: A type confusion issue was addressed with improved memory\nhandling.\nCVE-2026-84616: Peter Malone\n\nAVEVideoEncoder\nAvailable for: macOS Sequoia\nImpact: A sandboxed app may be able to execute arbitrary code with\nkernel privileges\nDescription: A race condition was addressed with improved state\nmanagement.\nCVE-2026-84607: Ruslan Dautov\n\nBackgroundAssets\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: A logic issue was addressed with improved validation.\nCVE-2026-65406: Ye Zhang (@VAR10CK) of Baidu Security\n\nBluetooth\nAvailable for: macOS Sequoia\nImpact: A remote attacker may be able to cause unexpected app\ntermination or arbitrary code execution\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-65414\n\ncd9660\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-84567: Sanny Mitra, Sihyun Roh (Compsec, SNU), ngockhanh from\nCystack, \uc815\uc6b0 \ud558 (@0xfa11babe), Suresh Sundaram, Surej Sekhar, Kun Peeks\n(@SwayZGl1tZyyy), Hari Shanmugam (The Hxr1), Ataberk Yavuzer\n\ncopyfile\nAvailable for: macOS Sequoia\nImpact: An archive may be able to bypass Gatekeeper\nDescription: A file quarantine bypass was addressed with additional\nchecks.\nCVE-2026-65399: Rishabh Jain (rjcyber) of cyberplanet, Pasquale Scola,\nan anonymous researcher\n\nCore Bluetooth\nAvailable for: macOS Sequoia\nImpact: An app may be able to access Bluetooth device information\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-86891: Dawuge of Shuffle Team\n\nCoreDrag\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected process termination or\ndisclose process memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-43683: Nathaniel Oh (@calysteon)\n\nCoreMedia\nAvailable for: macOS Sequoia\nImpact: An app may be able to access user-sensitive data\nDescription: An access issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-43789: \uc774\uc7ac\uc601\n\nCoreMedia\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-65344: Siyeong kim\n\nCoreMedia\nAvailable for: macOS Sequoia\nImpact: A sandboxed process may be able to circumvent sandbox\nrestrictions\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-86876: Chris Bailey - Short Circuit\n\nCoreMedia Video Toolbox\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination or corrupt process memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-43702: Nathaniel Oh (@calysteon)\n\nCoreML\nAvailable for: macOS Sequoia\nImpact: A sandboxed app may be able to access restricted files\nDescription: A permissions issue was addressed with improved path\nvalidation.\nCVE-2026-84624: AL Najafi, tamdao\n\nCoreMotion\nAvailable for: macOS Sequoia\nImpact: An app may be able to access motion data from headphones without\nuser consent\nDescription: An authorization issue was addressed with improved\nvalidation.\nCVE-2026-43737: Stuart Wallace\n\nCoreServices\nAvailable for: macOS Sequoia\nImpact: An app may be able to bypass Privacy preferences\nDescription: A permissions issue was addressed with improved state\nmanagement.\nCVE-2026-84574: Mickey Jin (@patch1t)\n\nCoreServices\nAvailable for: macOS Sequoia\nImpact: A malicious application may be able to access restricted files\nDescription: A permissions issue was addressed with improved validation.\nCVE-2026-84559: Ryan Hughes\n\nCoreServices\nAvailable for: macOS Sequoia\nImpact: An app may be able to gain root privileges\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-43786: Kujtim Kryeziu (Sentry)\n\nCoreText\nAvailable for: macOS Sequoia\nImpact: Processing web content may lead to a denial-of-service\nDescription: A null pointer dereference was addressed with improved\ninput validation.\nCVE-2026-65412: Pavan Nallamothu\n\nCoreTypes\nAvailable for: macOS Sequoia\nImpact: A malicious app may be able to break out of its sandbox\nDescription: A validation issue existed in the entitlement verification.\nThis issue was addressed with improved validation of the process\nentitlement.\nCVE-2026-65381: Mickey Jin (@patch1t)\n\nCoreUI\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84575: Mustafa Calap (@ordinal0, dbg.re)\n\nCoreUI\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted asset catalog may lead to\nunexpected process termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84511: stratan (@5tratan), Rahul Raj\n\nCUPS\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-84563: Yongyue WANG AKA Brian.W of OKX security, Omar Cerrito\n\nCUPS\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-84540: Yongyue WANG AKA Brian.W of OKX security, \u7ae0\u9c7c\u54e5@aipy\n\uff08aipyaipy.com\uff09, instantraaamen (github.com/instantraaamen) Contact:\nmasa.shiramizu () gmail com\n\nCUPS\nAvailable for: macOS Sequoia\nImpact: An attacker in a privileged network position may be able to\ncause a denial-of-service\nDescription: An integer overflow was addressed with improved input\nvalidation.\nCVE-2026-84554: Meshaal @ Darkcov, Joseph Shamoon\n\nCUPS\nAvailable for: macOS Sequoia\nImpact: A remote user may cause an unexpected app termination or\narbitrary code execution\nDescription: A validation issue was addressed with improved input\nsanitization.\nCVE-2026-43692: Aaron Grattafiori - NVIDIA AI Red Team\n\nCUPS\nAvailable for: macOS Sequoia\nImpact: An app may be able to gain elevated privileges\nDescription: A path handling issue was addressed with improved\nvalidation.\nCVE-2026-64790: Aaron Grattafiori - NVIDIA AI Red Team\n\nCUPS\nAvailable for: macOS Sequoia\nImpact: An app may be able to gain root privileges\nDescription: A path handling issue was addressed with improved\nvalidation.\nCVE-2026-43691: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nCUPS\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted file may result in unexpected\napp termination or disclosure of process memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-84516: \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com\uff09\n\nCUPS\nAvailable for: macOS Sequoia\nImpact: An application "
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T04:57:30Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Sep/57"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Sep/57"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/149043"
        },
        {
          "url": "https://support.apple.com/downloads/"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Sep/57"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-09-14-2026-5 macOS Sequoia 15.8",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2022-3437",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20683",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28899",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28930",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28934",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28935",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28966",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28968",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28969",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43664",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43677",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43683",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43684",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43686",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43690",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43691",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43692",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43695",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43697",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43702",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43719",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43737",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43741",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43763",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43785",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43786",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43787",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43789",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43790",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43791",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64712",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64736",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64756",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64758",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64790",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65330",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65339",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65342",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65344",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65345",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65346",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65348",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65349",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65358",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65359",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65360",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65361",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65362",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65364",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65365",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65369",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65371",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65374",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65375",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65376",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65377",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65378",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65381",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65382",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65395",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65399",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65402",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65403",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65405",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65406",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65407",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65408",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65409",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65412",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65413",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65414",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84487",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84492",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84497",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84505",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84506",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84507",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84509",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84510",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84511",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84512",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84513",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84514",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84515",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84516",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84517",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84519",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84521",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84523",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84524",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84525",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84526",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84527",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84532",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84534",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84535",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84536",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84537",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84538",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84540",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84541",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84543",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84544",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84546",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84548",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84549",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84550",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84552",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84553",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84554",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84555",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84556",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84559",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84561",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84563",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84564",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84565",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84566",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84567",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84568",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84570",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84572",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84573",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84574",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84575",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84576",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84578",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84580",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84581",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84583",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84587",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84602",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84607",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84609",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84611",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84612",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84616",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84617",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84618",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84619",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84620",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84621",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84622",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84624",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84626",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84630",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84632",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86876",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86881",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86882",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86889",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86891",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86910",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86917",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0395",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Sep/57",
            "automated": true,
            "contentSha256": "2d2290df1e9a0630fae8e581880969ed2cbe2e8e9f7c0f528a773fe4af504171",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Sep/57",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-09-14T22:07:43Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0395"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-10-02T04:57:30Z",
    "dateUpdated": "2026-10-02T04:57:30Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0395"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Macos Tahoe",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-09-14-2026-4 macOS Tahoe 26.7\n\nmacOS Tahoe 26.7 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149042.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccelerate Framework\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted image may lead to unexpected\nprocess termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-86882: Peter Malone\n\nAccessibility\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with improved data protection.\nCVE-2026-43664: Stuart Wallace, Rosyna Keller of Totally Not Malicious\nSoftware, Jian Lee (@speedyfriend433), Ilya Andr (andrd3v), Gongyu Ma\n(@Mezone0), David Strnadel, Daniel Febrero, CJ Vana, Asaf Cohen\n\nAPFS\nAvailable for: macOS Tahoe\nImpact: An application may be able to access restricted files\nDescription: A permissions issue was addressed with improved path\nvalidation.\nCVE-2026-86910: an anonymous researcher\n\nAPFS\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84523: Cem Onat Karagun, an anonymous researcher\n\nApp Store\nAvailable for: macOS Tahoe\nImpact: A local app may be able to read a persistent account identifier\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-86888: Zhongcheng Li (CK01)\n\nAppKit\nAvailable for: macOS Tahoe\nImpact: An app may be able to access protected user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-84587: an anonymous researcher\n\nApple Account\nAvailable for: macOS Tahoe\nImpact: An app may be able to use the Sign In With Apple authentication\nflow to access the user\u0027s Apple Account\nDescription: An authentication issue was addressed with improved state\nmanagement.\nCVE-2026-20683: Lehan Dilusha Jayasingha (Sri Lanka), Jasminder Pal\nSingh, Dem0ns (@\u5929\u5e9c\u7b80\u6613\u4fe1\u5de5\u4f5c\u5ba4), Abdelhak Kherroubi\n\nApple Neural Engine\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: An integer overflow was addressed with improved input\nvalidation.\nCVE-2026-65408: tamdao\n\nAppleAVD\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-65407: Franco Belman at Blackwing Intelligence\n\nAppleDouble\nAvailable for: macOS Tahoe\nImpact: Mounting a disk image with maliciously crafted files may lead to\nunexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84519: Richard Zana\n\nAppleMobileFileIntegrity\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to break out of its sandbox\nDescription: A validation issue existed in the entitlement verification.\nThis issue was addressed with improved validation of the process\nentitlement.\nCVE-2026-65381: Mickey Jin (@patch1t)\n\nATS\nAvailable for: macOS Tahoe\nImpact: An app may be able to read files outside of its sandbox\nDescription: A permissions issue was addressed by removing the\nvulnerable code.\nCVE-2026-43763: Pavan Nallamothu, Jared Reyes\n\nATS\nAvailable for: macOS Tahoe\nImpact: An app may be able to access user-sensitive data\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-84525: D4rthL\n\nATS\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: A permissions issue was addressed with improved validation.\nCVE-2026-65342: Mohamad Dawoud / Abodi Dawoud, Ahmed Alwardani\n\nAuthKit\nAvailable for: macOS Tahoe\nImpact: A local app may be able to read a persistent account identifier\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-84583: Zhongcheng Li from IES Red Team\n\nautofs\nAvailable for: macOS Tahoe\nImpact: An attacker with control of a network directory server may be\nable to execute arbitrary code with root privileges\nDescription: A path traversal issue was addressed with improved path\nvalidation.\nCVE-2026-84568: Mr.Gedik (@h4ck2s3c) of Turkish Technology\n\nautofs\nAvailable for: macOS Tahoe\nImpact: An app may be able to bypass Gatekeeper checks\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-84570: Mr.Gedik (@h4ck2s3c)\n\nAutomator\nAvailable for: macOS Tahoe\nImpact: An app may be able to break out of its sandbox\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-84535: Sindre Sorhus, Oren Yomtov, Morris Richman\n(@morrisinlife), Kun Peeks (@SwayZGl1tZyyy)\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: The issue was addressed with improved checks.\nCVE-2026-65410: Calif.io in collaboration with Claude and Anthropic\nResearch\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: A type confusion issue was addressed with improved memory\nhandling.\nCVE-2026-84616: Peter Malone\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: A sandboxed app may be able to execute arbitrary code with\nkernel privileges\nDescription: A race condition was addressed with improved state\nmanagement.\nCVE-2026-84607: Ruslan Dautov\n\nBackgroundAssets\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: A logic issue was addressed with improved validation.\nCVE-2026-65406: Ye Zhang (@VAR10CK) of Baidu Security\n\nBluetooth\nAvailable for: macOS Tahoe\nImpact: A remote attacker may be able to cause unexpected app\ntermination or arbitrary code execution\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-65414\n\ncd9660\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-84567: Sanny Mitra, Sihyun Roh (Compsec, SNU), ngockhanh from\nCystack, \uc815\uc6b0 \ud558 (@0xfa11babe), Suresh Sundaram, Surej Sekhar, Kun Peeks\n(@SwayZGl1tZyyy), Hari Shanmugam (The Hxr1), Ataberk Yavuzer\n\ncopyfile\nAvailable for: macOS Tahoe\nImpact: An archive may be able to bypass Gatekeeper\nDescription: A file quarantine bypass was addressed with additional\nchecks.\nCVE-2026-65399: Rishabh Jain (rjcyber) of cyberplanet, Pasquale Scola,\nan anonymous researcher\n\nCore Bluetooth\nAvailable for: macOS Tahoe\nImpact: An app may be able to access Bluetooth device information\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-86891: Dawuge of Shuffle Team\n\nCoreDrag\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected process termination or\ndisclose process memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-43683: Nathaniel Oh (@calysteon)\n\nCoreMedia\nAvailable for: macOS Tahoe\nImpact: An app may be able to access user-sensitive data\nDescription: An access issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-43789: \uc774\uc7ac\uc601\n\nCoreMedia\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-65344: Siyeong kim\n\nCoreMedia\nAvailable for: macOS Tahoe\nImpact: A sandboxed process may be able to circumvent sandbox\nrestrictions\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-86876: Chris Bailey - Short Circuit\n\nCoreMedia Video Toolbox\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination or corrupt process memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-43702: Nathaniel Oh (@calysteon)\n\nCoreML\nAvailable for: macOS Tahoe\nImpact: A sandboxed app may be able to access restricted files\nDescription: A permissions issue was addressed with improved path\nvalidation.\nCVE-2026-84624: AL Najafi, tamdao\n\nCoreMotion\nAvailable for: macOS Tahoe\nImpact: An app may be able to access motion data from headphones without\nuser consent\nDescription: An authorization issue was addressed with improved\nvalidation.\nCVE-2026-43737: Stuart Wallace\n\nCoreServices\nAvailable for: macOS Tahoe\nImpact: An app may be able to bypass Privacy preferences\nDescription: A permissions issue was addressed with improved state\nmanagement.\nCVE-2026-84574: Mickey Jin (@patch1t)\n\nCoreServices\nAvailable for: macOS Tahoe\nImpact: An app may bypass Gatekeeper checks\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-28899: Kraken Cryptocurrency Exchange, Andreas Jaegersberger \u0026\nRo Achterberg of Nosebeard Labs\n\nCoreServices\nAvailable for: macOS Tahoe\nImpact: A malicious application may be able to access restricted files\nDescription: A permissions issue was addressed with improved validation.\nCVE-2026-84559: Ryan Hughes\n\nCoreServices\nAvailable for: macOS Tahoe\nImpact: An app may be able to gain root privileges\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-43786: Kujtim Kryeziu (Sentry)\n\nCoreText\nAvailable for: macOS Tahoe\nImpact: Processing web content may lead to a denial-of-service\nDescription: A null pointer dereference was addressed with improved\ninput validation.\nCVE-2026-65412: Pavan Nallamothu\n\nCoreTypes\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to break out of its sandbox\nDescription: A validation issue existed in the entitlement verification.\nThis issue was addressed with improved validation of the process\nentitlement.\nCVE-2026-65381: Mickey Jin (@patch1t)\n\nCoreUI\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84575: Mustafa Calap (@ordinal0, dbg.re)\n\nCoreUI\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted asset catalog may lead to\nunexpected process termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84511: stratan (@5tratan), Rahul Raj\n\nCUPS\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-84563: Yongyue WANG AKA Brian.W of OKX security, Omar Cerrito\n\nCUPS\nAvailable for: macOS Tahoe\nImpact: An app may be able to gain elevated privileges\nDescription: A path handling issue was addressed with improved\nvalidation.\nCVE-2026-64790: Aaron Grattafiori - NVIDIA AI Red Team\n\nCUPS\nAvailable for: macOS Tahoe\nImpact: A remote user may cause an unexpected app termination or\narbitrary code execution\nDescription: A validation issue was addressed with improved input\nsanitization.\nCVE-2026-43692: Aaron Grattafiori - NVIDIA AI Red Team\n\nCUPS\nAvailable for: macOS Tahoe\nImpact: An attacker in a privileged network position may be able to\ncause a denial-of-service\nDescription: An integer overflow was addressed with improved input\nvalidation.\nCVE-2026-84554: Meshaal @ Darkcov, Joseph Shamoon\n\nCUPS\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-84540: Yongyue WANG AKA Brian.W of OKX security, \u7ae0\u9c7c\u54e5@aipy\n\uff08aipyaipy.com\uff09, instantraaamen (github.com/instantraaamen) Contact:\nmasa.shiramizu () gmail com\n\nCUPS\nAvailable for: macOS Tahoe\nImpact: An app may be able to gain root privileges\nDescription: A path handling issue was addressed with improved\nvalidation.\nCVE-2026-43691: And"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T04:57:29Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Sep/56"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Sep/56"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/149042"
        },
        {
          "url": "https://support.apple.com/downloads/"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Sep/56"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-09-14-2026-4 macOS Tahoe 26.7",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2022-3437",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20683",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28899",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28934",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28966",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28968",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28969",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43664",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43677",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43683",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43686",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43687",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43690",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43691",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43692",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43695",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43697",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43698",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43702",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43719",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43737",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43741",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43743",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43760",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43763",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43785",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43786",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43787",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43789",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43790",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43791",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64712",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64756",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64790",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65342",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65344",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65345",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65348",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65358",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65359",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65360",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65361",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65362",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65364",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65365",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65369",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65374",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65376",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65377",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65378",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65381",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65382",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65395",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65399",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65400",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65401",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65402",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65403",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65405",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65406",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65407",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65408",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65409",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65410",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65412",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65413",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65414",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84487",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84492",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84497",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84505",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84506",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84507",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84509",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84510",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84511",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84512",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84513",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84514",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84515",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84516",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84517",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84519",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84521",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84523",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84524",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84525",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84526",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84527",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84530",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84532",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84534",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84535",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84536",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84537",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84538",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84540",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84541",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84543",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84544",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84546",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84548",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84549",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84550",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84552",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84553",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84554",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84556",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84559",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84561",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84563",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84564",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84565",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84566",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84567",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84568",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84570",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84572",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84573",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84574",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84575",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84576",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84577",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84578",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84580",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84581",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84583",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84587",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84602",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84607",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84609",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84611",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84612",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84616",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84617",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84618",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84619",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84620",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84621",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84622",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84624",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84626",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84630",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84632",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86876",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86881",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86882",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86888",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86889",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86891",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86910",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86917",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86924",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0394",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Sep/56",
            "automated": true,
            "contentSha256": "02499611bc7445ce78fb5ae0ae485c2bae3ac9b52aae0be1f9b2b1db1c450ccc",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Sep/56",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-09-14T22:07:05Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0394"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-10-02T04:57:29Z",
    "dateUpdated": "2026-10-02T04:57:29Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0394"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "macOS Sequoia versions ant\u00e9rieures \u00e0 15.8.1",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS versions ant\u00e9rieures \u00e0 26.7.1",
      "product": {
        "name": "iOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions ant\u00e9rieures \u00e0 26.7.1",
      "product": {
        "name": "iPadOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Tahoe versions ant\u00e9rieures \u00e0 26.7.1",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-86950",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86950"
    }
  ],
  "initial_release_date": "2026-09-29T00:00:00",
  "last_revision_date": "2026-09-29T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1236",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-09-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Apple. Elle permet \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.\n\nApple indique que la vuln\u00e9rabilit\u00e9 CVE-2026-86950 est activement exploit\u00e9e.",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits Apple",
  "vendor_advisories": [
    {
      "published_at": "2026-09-28",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149226",
      "url": "https://support.apple.com/en-us/149226"
    },
    {
      "published_at": "2026-09-28",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149229",
      "url": "https://support.apple.com/en-us/149229"
    },
    {
      "published_at": "2026-09-28",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149228",
      "url": "https://support.apple.com/en-us/149228"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "iOS versions ant\u00e9rieures \u00e0 27",
      "product": {
        "name": "iOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Tahoe versions ant\u00e9rieures \u00e0 26.7",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Safari versions ant\u00e9rieures \u00e0 27",
      "product": {
        "name": "Safari",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Xcode versions ant\u00e9rieures \u00e0 27",
      "product": {
        "name": "Xcode",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Golden Gate versions ant\u00e9rieures \u00e0 27",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS versions ant\u00e9rieures \u00e0 26.7",
      "product": {
        "name": "iOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions ant\u00e9rieures \u00e0 26.7",
      "product": {
        "name": "iPadOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "tvOS versions ant\u00e9rieures \u00e0 27",
      "product": {
        "name": "tvOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions ant\u00e9rieures \u00e0 27",
      "product": {
        "name": "iPadOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "visionOS versions ant\u00e9rieures \u00e0 26.6.1",
      "product": {
        "name": "visionOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "visionOS versions ant\u00e9rieures \u00e0 27",
      "product": {
        "name": "visionOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Sequoia versions ant\u00e9rieures \u00e0 15.8",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "watchOS versions ant\u00e9rieures \u00e0 27",
      "product": {
        "name": "watchOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-86886",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86886"
    },
    {
      "name": "CVE-2026-86885",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86885"
    },
    {
      "name": "CVE-2026-65362",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65362"
    },
    {
      "name": "CVE-2026-28930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28930"
    },
    {
      "name": "CVE-2026-86879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86879"
    },
    {
      "name": "CVE-2026-43697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43697"
    },
    {
      "name": "CVE-2026-65391",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65391"
    },
    {
      "name": "CVE-2026-84566",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84566"
    },
    {
      "name": "CVE-2026-84572",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84572"
    },
    {
      "name": "CVE-2026-43664",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43664"
    },
    {
      "name": "CVE-2026-84558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84558"
    },
    {
      "name": "CVE-2026-84553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84553"
    },
    {
      "name": "CVE-2026-84626",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84626"
    },
    {
      "name": "CVE-2026-84549",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84549"
    },
    {
      "name": "CVE-2026-64788",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64788"
    },
    {
      "name": "CVE-2026-65337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65337"
    },
    {
      "name": "CVE-2026-84527",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84527"
    },
    {
      "name": "CVE-2026-84487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84487"
    },
    {
      "name": "CVE-2026-86890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86890"
    },
    {
      "name": "CVE-2026-84556",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84556"
    },
    {
      "name": "CVE-2026-84489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84489"
    },
    {
      "name": "CVE-2026-84520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84520"
    },
    {
      "name": "CVE-2026-65331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65331"
    },
    {
      "name": "CVE-2026-65352",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65352"
    },
    {
      "name": "CVE-2026-43695",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43695"
    },
    {
      "name": "CVE-2026-43738",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43738"
    },
    {
      "name": "CVE-2026-84621",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84621"
    },
    {
      "name": "CVE-2026-84517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84517"
    },
    {
      "name": "CVE-2026-84585",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84585"
    },
    {
      "name": "CVE-2026-84522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84522"
    },
    {
      "name": "CVE-2026-86887",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86887"
    },
    {
      "name": "CVE-2026-65381",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65381"
    },
    {
      "name": "CVE-2026-43791",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43791"
    },
    {
      "name": "CVE-2026-86905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86905"
    },
    {
      "name": "CVE-2026-84565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84565"
    },
    {
      "name": "CVE-2026-86902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86902"
    },
    {
      "name": "CVE-2026-84580",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84580"
    },
    {
      "name": "CVE-2026-84559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84559"
    },
    {
      "name": "CVE-2026-65332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65332"
    },
    {
      "name": "CVE-2026-84491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84491"
    },
    {
      "name": "CVE-2026-65413",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65413"
    },
    {
      "name": "CVE-2026-84615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84615"
    },
    {
      "name": "CVE-2026-43661",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43661"
    },
    {
      "name": "CVE-2026-64760",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64760"
    },
    {
      "name": "CVE-2026-65406",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65406"
    },
    {
      "name": "CVE-2026-84611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84611"
    },
    {
      "name": "CVE-2026-64712",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64712"
    },
    {
      "name": "CVE-2026-65365",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65365"
    },
    {
      "name": "CVE-2026-65343",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65343"
    },
    {
      "name": "CVE-2026-84630",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84630"
    },
    {
      "name": "CVE-2026-84551",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84551"
    },
    {
      "name": "CVE-2026-65400",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65400"
    },
    {
      "name": "CVE-2026-43696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43696"
    },
    {
      "name": "CVE-2026-84635",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84635"
    },
    {
      "name": "CVE-2026-84540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84540"
    },
    {
      "name": "CVE-2026-65364",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65364"
    },
    {
      "name": "CVE-2026-65340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65340"
    },
    {
      "name": "CVE-2026-84538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84538"
    },
    {
      "name": "CVE-2026-64790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64790"
    },
    {
      "name": "CVE-2026-64761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64761"
    },
    {
      "name": "CVE-2026-43698",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43698"
    },
    {
      "name": "CVE-2026-65399",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65399"
    },
    {
      "name": "CVE-2026-84550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84550"
    },
    {
      "name": "CVE-2026-86895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86895"
    },
    {
      "name": "CVE-2026-65412",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65412"
    },
    {
      "name": "CVE-2026-20683",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20683"
    },
    {
      "name": "CVE-2026-86876",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86876"
    },
    {
      "name": "CVE-2022-3437",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3437"
    },
    {
      "name": "CVE-2026-43763",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43763"
    },
    {
      "name": "CVE-2026-84506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84506"
    },
    {
      "name": "CVE-2026-84512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84512"
    },
    {
      "name": "CVE-2026-84631",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84631"
    },
    {
      "name": "CVE-2026-84544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84544"
    },
    {
      "name": "CVE-2026-65344",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65344"
    },
    {
      "name": "CVE-2026-43691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43691"
    },
    {
      "name": "CVE-2026-64753",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64753"
    },
    {
      "name": "CVE-2026-65360",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65360"
    },
    {
      "name": "CVE-2026-64752",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64752"
    },
    {
      "name": "CVE-2026-84620",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84620"
    },
    {
      "name": "CVE-2026-84543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84543"
    },
    {
      "name": "CVE-2026-84629",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84629"
    },
    {
      "name": "CVE-2026-84541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84541"
    },
    {
      "name": "CVE-2026-84505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84505"
    },
    {
      "name": "CVE-2026-64781",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64781"
    },
    {
      "name": "CVE-2026-84623",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84623"
    },
    {
      "name": "CVE-2026-84619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84619"
    },
    {
      "name": "CVE-2026-84513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84513"
    },
    {
      "name": "CVE-2026-84534",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84534"
    },
    {
      "name": "CVE-2026-86888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86888"
    },
    {
      "name": "CVE-2026-84531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84531"
    },
    {
      "name": "CVE-2026-65345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65345"
    },
    {
      "name": "CVE-2026-84625",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84625"
    },
    {
      "name": "CVE-2026-84497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84497"
    },
    {
      "name": "CVE-2026-84554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84554"
    },
    {
      "name": "CVE-2026-64787",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64787"
    },
    {
      "name": "CVE-2026-65339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65339"
    },
    {
      "name": "CVE-2026-86897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86897"
    },
    {
      "name": "CVE-2026-86884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86884"
    },
    {
      "name": "CVE-2026-84596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84596"
    },
    {
      "name": "CVE-2026-86911",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86911"
    },
    {
      "name": "CVE-2026-43674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43674"
    },
    {
      "name": "CVE-2026-84532",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84532"
    },
    {
      "name": "CVE-2026-28935",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28935"
    },
    {
      "name": "CVE-2026-64718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64718"
    },
    {
      "name": "CVE-2026-84600",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84600"
    },
    {
      "name": "CVE-2026-43737",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43737"
    },
    {
      "name": "CVE-2026-84524",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84524"
    },
    {
      "name": "CVE-2026-86904",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86904"
    },
    {
      "name": "CVE-2026-86894",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86894"
    },
    {
      "name": "CVE-2026-28969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28969"
    },
    {
      "name": "CVE-2026-65395",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65395"
    },
    {
      "name": "CVE-2026-84593",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84593"
    },
    {
      "name": "CVE-2026-84597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84597"
    },
    {
      "name": "CVE-2026-84530",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84530"
    },
    {
      "name": "CVE-2026-84533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84533"
    },
    {
      "name": "CVE-2026-65351",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65351"
    },
    {
      "name": "CVE-2026-84576",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84576"
    },
    {
      "name": "CVE-2026-28966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28966"
    },
    {
      "name": "CVE-2026-84568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84568"
    },
    {
      "name": "CVE-2026-84616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84616"
    },
    {
      "name": "CVE-2026-84581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84581"
    },
    {
      "name": "CVE-2026-64779",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64779"
    },
    {
      "name": "CVE-2026-65341",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65341"
    },
    {
      "name": "CVE-2026-84589",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84589"
    },
    {
      "name": "CVE-2026-86882",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86882"
    },
    {
      "name": "CVE-2026-65377",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65377"
    },
    {
      "name": "CVE-2026-65410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65410"
    },
    {
      "name": "CVE-2026-84516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84516"
    },
    {
      "name": "CVE-2026-43683",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43683"
    },
    {
      "name": "CVE-2026-86917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86917"
    },
    {
      "name": "CVE-2026-43677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43677"
    },
    {
      "name": "CVE-2026-65404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65404"
    },
    {
      "name": "CVE-2026-43787",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43787"
    },
    {
      "name": "CVE-2026-84518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84518"
    },
    {
      "name": "CVE-2026-43790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43790"
    },
    {
      "name": "CVE-2026-84617",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84617"
    },
    {
      "name": "CVE-2026-65334",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65334"
    },
    {
      "name": "CVE-2026-84563",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84563"
    },
    {
      "name": "CVE-2026-43689",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43689"
    },
    {
      "name": "CVE-2026-84521",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84521"
    },
    {
      "name": "CVE-2026-65414",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65414"
    },
    {
      "name": "CVE-2026-84612",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84612"
    },
    {
      "name": "CVE-2026-84515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84515"
    },
    {
      "name": "CVE-2026-64782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64782"
    },
    {
      "name": "CVE-2026-84537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84537"
    },
    {
      "name": "CVE-2026-84525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84525"
    },
    {
      "name": "CVE-2026-84523",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84523"
    },
    {
      "name": "CVE-2026-28934",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28934"
    },
    {
      "name": "CVE-2026-84574",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84574"
    },
    {
      "name": "CVE-2026-86889",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86889"
    },
    {
      "name": "CVE-2026-65346",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65346"
    },
    {
      "name": "CVE-2026-34979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34979"
    },
    {
      "name": "CVE-2026-64778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64778"
    },
    {
      "name": "CVE-2026-84601",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84601"
    },
    {
      "name": "CVE-2026-65329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65329"
    },
    {
      "name": "CVE-2026-84555",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84555"
    },
    {
      "name": "CVE-2026-64780",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64780"
    },
    {
      "name": "CVE-2026-84514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84514"
    },
    {
      "name": "CVE-2026-65378",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65378"
    },
    {
      "name": "CVE-2026-86878",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86878"
    },
    {
      "name": "CVE-2026-86924",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86924"
    },
    {
      "name": "CVE-2026-86869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86869"
    },
    {
      "name": "CVE-2026-65354",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65354"
    },
    {
      "name": "CVE-2026-65405",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65405"
    },
    {
      "name": "CVE-2026-84492",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84492"
    },
    {
      "name": "CVE-2026-84586",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84586"
    },
    {
      "name": "CVE-2026-43684",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43684"
    },
    {
      "name": "CVE-2026-84583",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84583"
    },
    {
      "name": "CVE-2026-84598",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84598"
    },
    {
      "name": "CVE-2026-65393",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65393"
    },
    {
      "name": "CVE-2026-43688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43688"
    },
    {
      "name": "CVE-2026-84571",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84571"
    },
    {
      "name": "CVE-2026-43786",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43786"
    },
    {
      "name": "CVE-2026-84546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84546"
    },
    {
      "name": "CVE-2026-86910",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86910"
    },
    {
      "name": "CVE-2026-64714",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64714"
    },
    {
      "name": "CVE-2026-43719",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43719"
    },
    {
      "name": "CVE-2026-84606",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84606"
    },
    {
      "name": "CVE-2026-86901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86901"
    },
    {
      "name": "CVE-2026-86881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86881"
    },
    {
      "name": "CVE-2026-43687",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43687"
    },
    {
      "name": "CVE-2026-86903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86903"
    },
    {
      "name": "CVE-2026-65361",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65361"
    },
    {
      "name": "CVE-2026-84577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84577"
    },
    {
      "name": "CVE-2026-84622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84622"
    },
    {
      "name": "CVE-2026-64758",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64758"
    },
    {
      "name": "CVE-2026-65376",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65376"
    },
    {
      "name": "CVE-2026-84588",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84588"
    },
    {
      "name": "CVE-2026-65349",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65349"
    },
    {
      "name": "CVE-2026-86870",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86870"
    },
    {
      "name": "CVE-2026-65390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65390"
    },
    {
      "name": "CVE-2026-86900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86900"
    },
    {
      "name": "CVE-2026-43686",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43686"
    },
    {
      "name": "CVE-2026-84636",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84636"
    },
    {
      "name": "CVE-2026-84587",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84587"
    },
    {
      "name": "CVE-2026-65380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65380"
    },
    {
      "name": "CVE-2026-43794",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43794"
    },
    {
      "name": "CVE-2026-84548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84548"
    },
    {
      "name": "CVE-2026-65348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65348"
    },
    {
      "name": "CVE-2026-65355",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65355"
    },
    {
      "name": "CVE-2026-65409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65409"
    },
    {
      "name": "CVE-2026-65403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65403"
    },
    {
      "name": "CVE-2026-65369",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65369"
    },
    {
      "name": "CVE-2026-65382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65382"
    },
    {
      "name": "CVE-2026-84578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84578"
    },
    {
      "name": "CVE-2026-86891",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86891"
    },
    {
      "name": "CVE-2026-84569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84569"
    },
    {
      "name": "CVE-2026-43702",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43702"
    },
    {
      "name": "CVE-2026-84624",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84624"
    },
    {
      "name": "CVE-2026-84609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84609"
    },
    {
      "name": "CVE-2026-28937",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28937"
    },
    {
      "name": "CVE-2026-84507",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84507"
    },
    {
      "name": "CVE-2026-28899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28899"
    },
    {
      "name": "CVE-2026-84575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84575"
    },
    {
      "name": "CVE-2026-84560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84560"
    },
    {
      "name": "CVE-2026-43743",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43743"
    },
    {
      "name": "CVE-2026-65336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65336"
    },
    {
      "name": "CVE-2026-43692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43692"
    },
    {
      "name": "CVE-2026-43785",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43785"
    },
    {
      "name": "CVE-2026-43741",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43741"
    },
    {
      "name": "CVE-2026-84519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84519"
    },
    {
      "name": "CVE-2026-64784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64784"
    },
    {
      "name": "CVE-2026-84552",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84552"
    },
    {
      "name": "CVE-2026-86892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86892"
    },
    {
      "name": "CVE-2026-64715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64715"
    },
    {
      "name": "CVE-2026-65371",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65371"
    },
    {
      "name": "CVE-2026-65402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65402"
    },
    {
      "name": "CVE-2026-84509",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84509"
    },
    {
      "name": "CVE-2026-28968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28968"
    },
    {
      "name": "CVE-2026-65347",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65347"
    },
    {
      "name": "CVE-2026-86893",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86893"
    },
    {
      "name": "CVE-2026-43795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43795"
    },
    {
      "name": "CVE-2026-84618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84618"
    },
    {
      "name": "CVE-2026-86909",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86909"
    },
    {
      "name": "CVE-2026-43788",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43788"
    },
    {
      "name": "CVE-2026-86883",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86883"
    },
    {
      "name": "CVE-2026-84567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84567"
    },
    {
      "name": "CVE-2026-65415",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65415"
    },
    {
      "name": "CVE-2026-65383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65383"
    },
    {
      "name": "CVE-2026-84511",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84511"
    },
    {
      "name": "CVE-2026-84628",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84628"
    },
    {
      "name": "CVE-2026-84602",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84602"
    },
    {
      "name": "CVE-2026-65411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65411"
    },
    {
      "name": "CVE-2026-84535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84535"
    },
    {
      "name": "CVE-2026-84561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84561"
    },
    {
      "name": "CVE-2026-65335",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65335"
    },
    {
      "name": "CVE-2026-84584",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84584"
    },
    {
      "name": "CVE-2026-84573",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84573"
    },
    {
      "name": "CVE-2026-84570",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84570"
    },
    {
      "name": "CVE-2026-84632",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84632"
    },
    {
      "name": "CVE-2026-84526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84526"
    },
    {
      "name": "CVE-2026-65333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65333"
    },
    {
      "name": "CVE-2026-43789",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43789"
    },
    {
      "name": "CVE-2026-84607",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84607"
    },
    {
      "name": "CVE-2026-65408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65408"
    },
    {
      "name": "CVE-2026-84536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84536"
    },
    {
      "name": "CVE-2026-64736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64736"
    },
    {
      "name": "CVE-2026-43715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43715"
    },
    {
      "name": "CVE-2026-84564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84564"
    },
    {
      "name": "CVE-2026-43690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43690"
    },
    {
      "name": "CVE-2026-65342",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65342"
    },
    {
      "name": "CVE-2026-65359",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65359"
    },
    {
      "name": "CVE-2026-43760",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43760"
    },
    {
      "name": "CVE-2026-84510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84510"
    },
    {
      "name": "CVE-2026-65358",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65358"
    },
    {
      "name": "CVE-2026-65374",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65374"
    },
    {
      "name": "CVE-2026-65398",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65398"
    },
    {
      "name": "CVE-2026-65338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65338"
    },
    {
      "name": "CVE-2026-84603",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84603"
    },
    {
      "name": "CVE-2026-65401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65401"
    },
    {
      "name": "CVE-2026-64756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64756"
    },
    {
      "name": "CVE-2026-65330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65330"
    },
    {
      "name": "CVE-2026-65407",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65407"
    },
    {
      "name": "CVE-2026-86898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86898"
    },
    {
      "name": "CVE-2026-65375",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65375"
    }
  ],
  "initial_release_date": "2026-09-15T00:00:00",
  "last_revision_date": "2026-09-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1172",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-09-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
  "vendor_advisories": [
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149036",
      "url": "https://support.apple.com/en-us/149036"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149041",
      "url": "https://support.apple.com/en-us/149041"
    },
    {
      "published_at": "2026-08-17",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 148353",
      "url": "https://support.apple.com/en-us/148353"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149035",
      "url": "https://support.apple.com/en-us/149035"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149034",
      "url": "https://support.apple.com/en-us/149034"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149042",
      "url": "https://support.apple.com/en-us/149042"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149039",
      "url": "https://support.apple.com/en-us/149039"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149038",
      "url": "https://support.apple.com/en-us/149038"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149040",
      "url": "https://support.apple.com/en-us/149040"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149043",
      "url": "https://support.apple.com/en-us/149043"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149037",
      "url": "https://support.apple.com/en-us/149037"
    }
  ]
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86950",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T03:55:58.823862Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-09-29",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-86950"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-01T17:15:57.969Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-86950"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-09-29T07:15:33.456Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2026/Sep/89"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2026/Sep/90"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2026/Sep/91"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.7.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T19:13:52.603Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149226"
        },
        {
          "url": "https://support.apple.com/en-us/149228"
        },
        {
          "url": "https://support.apple.com/en-us/149229"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86950",
    "datePublished": "2026-09-28T19:13:52.603Z",
    "dateReserved": "2026-09-08T16:43:41.881Z",
    "dateUpdated": "2026-10-01T17:15:57.969Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-65388",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-17T13:05:32.107756Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-601",
                "description": "CWE-601 URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T13:05:53.780Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "containerization",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "0.41.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A remote attacker who controls a container registry may be able to direct a client\u0027s token request to a host of the attacker\u0027s choice, and disclose the victim\u0027s registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A remote attacker who controls a container registry may be able to direct a client\u0027s token request to a host of the attacker\u0027s choice, and disclose the victim\u0027s registry credentials to that host.",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-16T22:24:20.049Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://github.com/apple/containerization/security/advisories/GHSA-mx96-5vvg-x2mg"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-65388",
    "datePublished": "2026-09-16T22:24:20.049Z",
    "dateReserved": "2026-07-22T00:46:44.572Z",
    "dateUpdated": "2026-09-17T13:05:53.780Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86924",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-16T17:33:06.194482Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-20",
                "description": "CWE-20 Improper Input Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-16T17:33:08.833Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Connecting a malicious accessory may cause unexpected system termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:50:46.818Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149034"
        },
        {
          "url": "https://support.apple.com/en-us/149035"
        },
        {
          "url": "https://support.apple.com/en-us/149041"
        },
        {
          "url": "https://support.apple.com/en-us/149042"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86924",
    "datePublished": "2026-09-14T20:50:46.818Z",
    "dateReserved": "2026-09-08T16:43:41.878Z",
    "dateUpdated": "2026-09-16T17:33:08.833Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86917",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-14T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-280",
                "description": "CWE-280 Improper Handling of Insufficient Permissions or Privileges",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-15T03:56:27.247Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to gain root privileges",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:49:34.270Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149035"
        },
        {
          "url": "https://support.apple.com/en-us/149042"
        },
        {
          "url": "https://support.apple.com/en-us/149043"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86917",
    "datePublished": "2026-09-14T20:49:34.270Z",
    "dateReserved": "2026-09-08T16:43:41.876Z",
    "dateUpdated": "2026-09-15T03:56:27.247Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86911",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-16T13:52:56.354489Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1021",
                "description": "CWE-1021 Improper Restriction of Rendered UI Layers or Frames",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-16T13:53:28.364Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to bypass clickjacking protections for secure prompts",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:48:00.714Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149035"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86911",
    "datePublished": "2026-09-14T20:48:00.714Z",
    "dateReserved": "2026-09-08T16:43:41.875Z",
    "dateUpdated": "2026-09-16T13:53:28.364Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86910",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-16T12:02:27.511657Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-22",
                "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-16T12:05:49.041Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An application may be able to access restricted files."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An application may be able to access restricted files",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:47:30.203Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149035"
        },
        {
          "url": "https://support.apple.com/en-us/149042"
        },
        {
          "url": "https://support.apple.com/en-us/149043"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86910",
    "datePublished": "2026-09-14T20:47:30.203Z",
    "dateReserved": "2026-09-08T16:43:41.875Z",
    "dateUpdated": "2026-09-16T12:05:49.041Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 4.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86909",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-17T14:12:58.982499Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-693",
                "description": "CWE-693 Protection Mechanism Failure",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T14:13:03.077Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Gatekeeper checks."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to bypass Gatekeeper checks",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:51:50.569Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149035"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86909",
    "datePublished": "2026-09-14T20:51:50.569Z",
    "dateReserved": "2026-09-08T16:43:41.874Z",
    "dateUpdated": "2026-09-17T14:13:03.077Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86905",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-15T14:30:17.746613Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-15T14:30:20.511Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to delete credentials stored in Keychain",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:51:26.556Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149034"
        },
        {
          "url": "https://support.apple.com/en-us/149035"
        },
        {
          "url": "https://support.apple.com/en-us/149038"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86905",
    "datePublished": "2026-09-14T20:51:26.556Z",
    "dateReserved": "2026-09-08T16:43:41.874Z",
    "dateUpdated": "2026-09-15T14:30:20.511Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86904",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-15T18:16:21.178495Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-359",
                "description": "CWE-359 Exposure of Private Personal Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-15T18:16:41.354Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to track users across apps and websites without permission."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to track users across apps and websites without permission",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:51:21.722Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149034"
        },
        {
          "url": "https://support.apple.com/en-us/149037"
        },
        {
          "url": "https://support.apple.com/en-us/149041"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86904",
    "datePublished": "2026-09-14T20:51:21.722Z",
    "dateReserved": "2026-09-08T16:43:41.873Z",
    "dateUpdated": "2026-09-15T18:16:41.354Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86903",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-15T15:22:26.009169Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-15T15:22:29.546Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to disclose kernel memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:50:31.612Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149034"
        },
        {
          "url": "https://support.apple.com/en-us/149035"
        },
        {
          "url": "https://support.apple.com/en-us/149036"
        },
        {
          "url": "https://support.apple.com/en-us/149037"
        },
        {
          "url": "https://support.apple.com/en-us/149038"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86903",
    "datePublished": "2026-09-14T20:50:31.612Z",
    "dateReserved": "2026-09-08T16:43:41.873Z",
    "dateUpdated": "2026-09-15T15:22:29.546Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86902",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-17T15:06:23.968127Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-22",
                "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T15:06:26.114Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.8.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sonoma 14.8.8. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:49:56.907Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/128072"
        },
        {
          "url": "https://support.apple.com/en-us/149035"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86902",
    "datePublished": "2026-09-14T20:49:56.907Z",
    "dateReserved": "2026-09-08T16:43:41.873Z",
    "dateUpdated": "2026-09-17T15:06:26.114Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86901",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-17T16:13:16.711448Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T16:13:19.527Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:49:38.245Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149035"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86901",
    "datePublished": "2026-09-14T20:49:38.245Z",
    "dateReserved": "2026-09-08T16:43:41.873Z",
    "dateUpdated": "2026-09-17T16:13:19.527Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86900",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-17T15:37:07.148842Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T15:37:10.659Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:48:24.001Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149035"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86900",
    "datePublished": "2026-09-14T20:48:24.001Z",
    "dateReserved": "2026-09-08T16:43:41.873Z",
    "dateUpdated": "2026-09-17T15:37:10.659Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86898",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-17T15:56:23.950479Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-79",
                "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T15:56:27.129Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Opening a maliciously crafted webarchive file may lead to universal cross-site scripting",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:50:52.675Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149034"
        },
        {
          "url": "https://support.apple.com/en-us/149035"
        },
        {
          "url": "https://support.apple.com/en-us/149038"
        },
        {
          "url": "https://support.apple.com/en-us/149039"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86898",
    "datePublished": "2026-09-14T20:50:52.675Z",
    "dateReserved": "2026-09-08T16:43:41.873Z",
    "dateUpdated": "2026-09-17T15:56:27.129Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86897",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-16T13:20:46.007692Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-862",
                "description": "CWE-862 Missing Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-16T13:20:50.732Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:47:54.746Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149034"
        },
        {
          "url": "https://support.apple.com/en-us/149035"
        },
        {
          "url": "https://support.apple.com/en-us/149038"
        },
        {
          "url": "https://support.apple.com/en-us/149039"
        },
        {
          "url": "https://support.apple.com/en-us/149041"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86897",
    "datePublished": "2026-09-14T20:47:54.746Z",
    "dateReserved": "2026-09-08T16:43:41.873Z",
    "dateUpdated": "2026-09-16T13:20:50.732Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86895",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-15T18:15:09.423450Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-15T18:15:36.157Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A local app may be able to read a persistent account identifier",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:51:36.216Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149034"
        },
        {
          "url": "https://support.apple.com/en-us/149036"
        },
        {
          "url": "https://support.apple.com/en-us/149037"
        },
        {
          "url": "https://support.apple.com/en-us/149038"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86895",
    "datePublished": "2026-09-14T20:51:36.216Z",
    "dateReserved": "2026-09-08T16:43:41.872Z",
    "dateUpdated": "2026-09-15T18:15:36.157Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86894",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-15T18:24:45.751327Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-693",
                "description": "CWE-693 Protection Mechanism Failure",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-15T18:25:27.441Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to break out of its sandbox",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:51:11.982Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149035"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86894",
    "datePublished": "2026-09-14T20:51:11.982Z",
    "dateReserved": "2026-09-08T16:43:41.872Z",
    "dateUpdated": "2026-09-15T18:25:27.441Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 3.3,
              "baseSeverity": "LOW",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86893",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-17T16:55:04.689321Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-269",
                "description": "CWE-269 Improper Privilege Management",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T16:55:09.278Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to read device name",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:50:39.900Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149034"
        },
        {
          "url": "https://support.apple.com/en-us/149036"
        },
        {
          "url": "https://support.apple.com/en-us/149037"
        },
        {
          "url": "https://support.apple.com/en-us/149038"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86893",
    "datePublished": "2026-09-14T20:50:39.900Z",
    "dateReserved": "2026-09-08T16:43:41.872Z",
    "dateUpdated": "2026-09-17T16:55:09.278Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86892",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-17T14:34:43.110875Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T14:34:46.575Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to cause a denial-of-service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to cause a denial-of-service",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:49:48.092Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149034"
        },
        {
          "url": "https://support.apple.com/en-us/149038"
        },
        {
          "url": "https://support.apple.com/en-us/149041"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86892",
    "datePublished": "2026-09-14T20:49:48.092Z",
    "dateReserved": "2026-09-08T16:43:41.872Z",
    "dateUpdated": "2026-09-17T14:34:46.575Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "ADJACENT_NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 3.5,
              "baseSeverity": "LOW",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86891",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-17T14:45:08.374606Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-285",
                "description": "CWE-285 Improper Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T14:45:21.957Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, watchOS 27. An app may be able to access Bluetooth device information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access Bluetooth device information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:49:27.231Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149035"
        },
        {
          "url": "https://support.apple.com/en-us/149037"
        },
        {
          "url": "https://support.apple.com/en-us/149042"
        },
        {
          "url": "https://support.apple.com/en-us/149043"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86891",
    "datePublished": "2026-09-14T20:49:27.231Z",
    "dateReserved": "2026-09-08T16:43:41.872Z",
    "dateUpdated": "2026-09-17T14:45:21.957Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "NONE",
              "baseScore": 4.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86890",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-16T15:20:54.853057Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-287",
                "description": "CWE-287 Improper Authentication",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-16T15:21:10.985Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to view sensitive user information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker with physical access to a locked device may be able to view sensitive user information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:48:30.087Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149034"
        },
        {
          "url": "https://support.apple.com/en-us/149041"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86890",
    "datePublished": "2026-09-14T20:48:30.087Z",
    "dateReserved": "2026-09-08T16:43:41.872Z",
    "dateUpdated": "2026-09-16T15:21:10.985Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.8,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86889",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-15T15:23:35.770442Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-295",
                "description": "CWE-295 Improper Certificate Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-15T15:23:39.219Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A certificate validation issue was addressed with improved certificate validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to intercept network traffic."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker in a privileged network position may be able to intercept network traffic",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:50:30.682Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149035"
        },
        {
          "url": "https://support.apple.com/en-us/149042"
        },
        {
          "url": "https://support.apple.com/en-us/149043"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86889",
    "datePublished": "2026-09-14T20:50:30.682Z",
    "dateReserved": "2026-09-08T16:43:41.872Z",
    "dateUpdated": "2026-09-15T15:23:39.219Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86950",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T03:55:58.823862Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-09-29",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-86950"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-01T17:15:57.969Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-86950"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-09-29T07:15:33.456Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2026/Sep/89"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2026/Sep/90"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2026/Sep/91"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.7.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T19:13:52.603Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149226"
        },
        {
          "url": "https://support.apple.com/en-us/149228"
        },
        {
          "url": "https://support.apple.com/en-us/149229"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86950",
    "datePublished": "2026-09-28T19:13:52.603Z",
    "dateReserved": "2026-09-08T16:43:41.881Z",
    "dateUpdated": "2026-10-01T17:15:57.969Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-65388",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-17T13:05:32.107756Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-601",
                "description": "CWE-601 URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T13:05:53.780Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "containerization",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "0.41.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A remote attacker who controls a container registry may be able to direct a client\u0027s token request to a host of the attacker\u0027s choice, and disclose the victim\u0027s registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A remote attacker who controls a container registry may be able to direct a client\u0027s token request to a host of the attacker\u0027s choice, and disclose the victim\u0027s registry credentials to that host.",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-16T22:24:20.049Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://github.com/apple/containerization/security/advisories/GHSA-mx96-5vvg-x2mg"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-65388",
    "datePublished": "2026-09-16T22:24:20.049Z",
    "dateReserved": "2026-07-22T00:46:44.572Z",
    "dateUpdated": "2026-09-17T13:05:53.780Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}