CVE-2026-84525

MediumCVSS 5.5

Published: 14/09/2026(UTC)Updated: 18/09/2026(UTC)Translated: 15/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

A logging issue in Apple systems was addressed with improved data redaction. An app may be able to access user-sensitive data.

Risk Assessment

Unauthorized access to user-sensitive data may lead to privacy breaches and information exposure.

Recommendation

Update systems to macOS Golden Gate 27, macOS Sequoia 15.8, or macOS Tahoe 26.7 and review app permissions.

Other vulnerabilities in Apple macOS

See all

CVE-2026-84520Critical
A buffer overflow vulnerability in macOS Golden Gate, fixed by improved size validation. A local attacker may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-43790Critical
The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-64767Critical
A buffer overflow vulnerability in macOS allows a remote attacker to cause unexpected system termination or corrupt kernel memory.
CVE-2026-64731Critical
Path validation was improved. The issue affects macOS Sequoia 15.7.8 and macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.
CVE-2026-64704Critical
A type confusion issue was addressed with improved memory handling. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
CVE-2026-64703Critical
A use after free issue was addressed with improved memory management. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to cause a denial-of-service.
CVE-2026-64702Critical
An access issue was addressed with additional sandbox restrictions. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to break out of its sandbox.
CVE-2026-64698Critical
A memory handling issue was fixed with improved memory management. The vulnerability affects macOS systems. An app may cause unexpected system termination or read kernel memory.
CVE-2026-64697Critical
A memory handling issue was fixed with improved memory management. The vulnerability affects macOS systems. An app may cause unexpected system termination or corrupt kernel memory.
CVE-2026-64696Critical
A memory handling issue was fixed with improved memory management. The vulnerability affects macOS systems. A remote user may cause unexpected system termination or corrupt kernel memory.

Original NVD description (English source)

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS