CVE-2026-84619

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination or write kernel memory.

CVSS v3 6.1 MEDIUM

6.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 4.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://support.apple.com/en-us/149035	Vendor Advisory Release Notes
https://support.apple.com/en-us/149042	Vendor Advisory Release Notes
https://support.apple.com/en-us/149043	Vendor Advisory Release Notes

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::

History

23 Sep 2026, 19:08

Type	Values Removed	Values Added
References	~~() https://support.apple.com/en-us/149035 -~~	() https://support.apple.com/en-us/149035 - Vendor Advisory, Release Notes
References	~~() https://support.apple.com/en-us/149042 -~~	() https://support.apple.com/en-us/149042 - Vendor Advisory, Release Notes
References	~~() https://support.apple.com/en-us/149043 -~~	() https://support.apple.com/en-us/149043 - Vendor Advisory, Release Notes
CPE		cpe:2.3:o:apple:macos::::::::
First Time		Apple macos Apple

Information

Published : 2026-09-14 21:17

Updated : 2026-09-23 19:08

NVD link : CVE-2026-84619

Mitre link : CVE-2026-84619

CVE.ORG link : CVE-2026-84619

JSON object : View

Products Affected

apple

macos

CWE

CWE-787

Out-of-bounds Write

{"id": "CVE-2026-84619", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-84619", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-15T16:39:22.650471Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 4.2, "exploitabilityScore": 1.8}]}, "affected": [{"source": "product-security@apple.com", "affectedData": [{"vendor": "Apple", "product": "macOS", "versions": [{"status": "affected", "version": "0", "lessThan": "15.8", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "26.7", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "27", "versionType": "custom"}]}]}], "published": "2026-09-14T21:17:36.863", "references": [{"url": "https://support.apple.com/en-us/149035", "tags": ["Vendor Advisory", "Release Notes"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/149042", "tags": ["Vendor Advisory", "Release Notes"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/149043", "tags": ["Vendor Advisory", "Release Notes"], "source": "product-security@apple.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination or write kernel memory."}], "lastModified": "2026-09-23T19:08:01.557", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "241A56D1-1E33-4317-A053-85AF8E3770B3", "versionEndExcluding": "15.8", "versionStartIncluding": "15.0"}, {"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1BE83000-26C0-49C5-A966-BB40AD6F8BEE", "versionEndExcluding": "26.7", "versionStartIncluding": "26.0"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}