CVE-2026-84579

HighCVSS 8.8/10Last modified Nov 3, 2026

Description

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing a network share may lead to unexpected software execution.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-703

Affected software

Vendor	Product	Versions
Apple	macOS	< 15.8; < 26.7; < 27

References

https://support.apple.com/en-us/149035Vendor Advisory, Release Notes
https://support.apple.com/en-us/149042Vendor Advisory, Release Notes
https://support.apple.com/en-us/149043Vendor Advisory, Release Notes

Timeline

Published: Oct 20, 2026
Last modified: Nov 3, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-84586.5libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use CVE-2026-845808.4The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may CVE-2026-845818.4A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe CVE-2026-845825.5A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27,CVE-2026-845835.5A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS CVE-2026-845848.4This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of CVE-2026-845855.5A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access CVE-2026-845865.5An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, watchOS 27. A mal CVE-2026-845875.5A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe CVE-2026-845886.5A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously CVE-2026-845895.5A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to modify Pr CVE-2026-845906.5An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.