CVE-2022-3437: A user in a privileged network position may be able to leak sensitive user information.
Affects Heimdal

x

x

x

CVE-2026-20683: An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account.
Affects Apple Account

x

x

x

x

x

CVE-2026-28899: An app may bypass Gatekeeper checks.
Affects WebDAV

x

x

x

CVE-2026-28930: An app may be able to access protected user data.
Affects Spotlight

x

CVE-2026-28934: Mounting a malicious disk image may cause unexpected system termination.
Affects HFS

x

x

x

CVE-2026-28935: An app may be able to cause unexpected system termination or corrupt kernel memory.
Affects Kernel

x

x

x

x

CVE-2026-28937: An app may be able to access sensitive user data.
Affects Terminal

x

CVE-2026-28966: Processing a maliciously crafted file may lead to unexpected app termination.
Affects RealityKit

x

x

x

x

x

x

x

CVE-2026-28968: An app may be able to cause unexpected system termination or corrupt kernel memory.
Affects Kernel

x

x

x

x

x

x

x

x

CVE-2026-28969: An app may be able to cause unexpected system termination.
Affects IOKit

x

x

x

x

x

x

x

CVE-2026-34979: An attacker in a privileged network position may be able to cause a denial-of-service.
Affects CUPS

x

CVE-2026-43661: Processing a maliciously crafted image may corrupt process memory.
Affects ImageIO

x

CVE-2026-43664: An app may be able to access sensitive user data.
Affects Accessibility

x

x

x

x

x

x

x

CVE-2026-43674: An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication.
Affects Wi-Fi3

x

CVE-2026-43677: Connecting to a malicious WebDAV server may lead to unexpected app termination.
Affects WebDAV

x

x

x

CVE-2026-43683: An app may be able to cause unexpected process termination or disclose process memory.
Affects CoreDrag

x

x

x

CVE-2026-43684: An app may be able to cause unexpected system termination or corrupt kernel memory.
Affects Kernel

x

x

x

CVE-2026-43686: Connecting to a malicious NFS server may lead to kernel memory corruption.
Affects Kernel

x

x

x

x

x

x

x

x

CVE-2026-43687: Connecting to a malicious NFS server may disclose kernel memory.
Affects Kernel

x

x

x

x

x

x

x

CVE-2026-43688: Processing a maliciously crafted file may lead to unexpected app termination.
Affects Filters

x

x

CVE-2026-43689: A malicious app may be able to gain root privileges.
Affects Kernel

x

x

x

x

CVE-2026-43690: A local user may be able to read kernel memory.
Affects SMB

x

x

x

CVE-2026-43691: An app may be able to gain root privileges.
Affects CUPS

x

x

x

CVE-2026-43692: A remote user may cause an unexpected app termination or arbitrary code execution.
Affects CUPS

x

x

x

CVE-2026-43695: An app may be able to access sensitive user data.
Affects NetworkExtension

x

x

x

x

x

x

x

CVE-2026-43696: An app may be able to capture Touch Bar content without authorization.
Affects Touch Bar

x

CVE-2026-43697: Processing a maliciously crafted 3D file may lead to an out-of-bounds read.
Affects SceneKit

x

x

x

CVE-2026-43698: An app may be able to gain root privileges.
Affects CUPS

x

x

CVE-2026-43702: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.
Affects CoreMedia Video Toolbox

x

x

x

CVE-2026-43715: Processing maliciously crafted web content may lead to memory corruption.
Affects WebKit

x

CVE-2026-43719: Mounting a maliciously crafted SMB network share may lead to system termination.
Affects SMB

x

x

x

CVE-2026-43737: An app may be able to access motion data from headphones without user consent.
Affects CoreMotion

x

x

x

x

x

x

x

CVE-2026-43738: Processing a maliciously crafted asset catalog may result in disclosure of process memory.
Affects CoreUI

x

x

CVE-2026-43741: An app may be able to access protected user data.
Affects Messages

x

x

x

CVE-2026-43743: An app may be able to cause unexpected system termination.
Affects IOGPUFamily

x

x

CVE-2026-43760: An app may be able to access user-sensitive data.
Affects Screen Sharing Server

x

CVE-2026-43763: An app may be able to read files outside of its sandbox.
Affects ATS

x

x

CVE-2026-43785: An app may be able to modify a file it only had permission to read.
Affects File Bookmark

x

x

x

x

x

x

CVE-2026-43786: An app may be able to gain root privileges.
Affects CoreServices

x

x

x

CVE-2026-43787: An attacker in a privileged network position may be able to leak sensitive user information.
Affects Mail

x

x

x

CVE-2026-43788: Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents.
Affects Spotlight

x

CVE-2026-43789: An app may be able to access user-sensitive data.
Affects CoreMedia

x

x

x

CVE-2026-43790: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
Affects Kernel

x

x

x

CVE-2026-43791: An app may be able to read arbitrary files.
Affects StorageKit

x

x

x

CVE-2026-43794: Processing maliciously crafted web content may lead to memory corruption.
Affects WebKit

x

x

x

CVE-2026-64712: An app may be able to gain root privileges.
Affects odproxyd

x

x

x

CVE-2026-64714: Processing a maliciously crafted image may lead to a denial-of-service.
Affects ImageIO

x

CVE-2026-64715: Processing maliciously crafted web content may lead to an unexpected process crash.
Affects WebKit

x

x

x

CVE-2026-64718: Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affects WebKit Canvas

x

x

x

x

CVE-2026-64736: An app may be able to cause unexpected system termination or corrupt kernel memory.
Affects IOMobileFrameBuffer

x

x

x

x

CVE-2026-64752: Processing a maliciously crafted image may lead to arbitrary code execution.
Affects CoreMedia

x

x

x

CVE-2026-64753: Processing maliciously crafted web content may disclose sensitive user information.
Affects WebKit

x

x

x

x

x

CVE-2026-64756: An app may be able to access user-sensitive data.
Affects Image Capture

x

x

x

x

CVE-2026-64758: Processing a maliciously crafted file may lead to unexpected app termination.
Affects ImageIO

x

x

CVE-2026-64760: An app may be able to leak sensitive kernel state.
Affects IOSurfaceAccelerator

x

x

x

x

x

CVE-2026-64761: An app may be able to identify what other apps a user has installed.
Affects Accessibility

x

CVE-2026-64778: Visiting a maliciously crafted website may leak sensitive data.
Affects WebKit History

x

x

x

CVE-2026-64779: Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affects WebKit Storage

x

CVE-2026-64780: Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affects WebKit

x

CVE-2026-64781: Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affects WebKit

x

CVE-2026-64782: Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affects WebKit

x

CVE-2026-64784: Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affects WebKit

x

CVE-2026-64787: Processing maliciously crafted web content may lead to an unexpected process termination.
Affects WebKit

x

x

x

CVE-2026-64788: Processing maliciously crafted web content may lead to memory corruption.
Affects IOGPUFamily

x

x

CVE-2026-64790: An app may be able to gain elevated privileges.
Affects CUPS

x

x

x

CVE-2026-65329: An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic.
Affects Telephony

x

CVE-2026-65331: Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affects WebKit

x

CVE-2026-65334: Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affects WebKit

x

CVE-2026-65338: Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affects WebKit

x

CVE-2026-65339: An app may be able to leak sensitive user information.
Affects Audio

x

x

x

x

CVE-2026-65341: Processing maliciously crafted web content may lead to memory corruption.
Affects WebKit

x

x

x

CVE-2026-65342: An app may be able to access sensitive user data.
Affects ATS

x

x

x

CVE-2026-65343: A remote attacker may be able to cause unexpected system termination.
Affects Kernel

x

x

x

CVE-2026-65344: Processing a maliciously crafted video file may lead to unexpected app termination.
Affects CoreMedia

x

x

x

x

x

x

x

CVE-2026-65345: An app may be able to access user-sensitive data.
Affects Storage

x

x

x

x

x

CVE-2026-65346: Processing an image may lead to arbitrary code execution.
Affects ImageIO

x

x

x

x

CVE-2026-65347: Processing an image may lead to a denial-of-service.
Affects ImageIO

x

x

x

CVE-2026-65348: An app may be able to modify protected parts of the file system.
Affects Storage

x

x

x

x

x

CVE-2026-65349: An app may be able to cause unexpected system termination or read kernel memory.
Affects Kernel

x

x

x

x

CVE-2026-65354: A malicious app may be able to break out of its sandbox.
Affects iWork

x

x

CVE-2026-65358: An app may be able to cause unexpected system termination.
Affects Kernel

x

x

x

x

x

x

CVE-2026-65359: A local user may be able to cause unexpected system termination or read kernel memory.
Affects Kernel

x

x

x

x

x

x

x

x

CVE-2026-65360: An app may be able to cause unexpected system termination.
Affects Kernel

x

CVE-2026-65361: An app may be able to access sensitive user data.
Affects SoftwareUpdate

x

x

x

CVE-2026-65362: An app may be able to gain root privileges.
Affects Disk Images

x

x

x

CVE-2026-65364: A remote attacker may be able to cause unexpected system termination.
Affects Kernel

x

x

x

CVE-2026-65365: Connecting to a malicious SMB share may disclose kernel memory.
Affects SMB

x

x

x

CVE-2026-65369: A malicious application may bypass Gatekeeper checks.
Affects Kernel

x

x

x

CVE-2026-65371: An app may be able to disclose kernel memory.
Affects Kernel

x

CVE-2026-65374: Connecting to a malicious WebDAV server may result in code execution.
Affects WebDAV

x

x

x

CVE-2026-65375: An app may be able to cause unexpected system termination.
Affects WebDAV

x

x

CVE-2026-65376: An app may be able to cause unexpected system termination.
Affects SMB

x

x

x

CVE-2026-65377: An app may be able to cause unexpected system termination.
Affects Kernel

x

x

x

x

x

x

x

x

CVE-2026-65378: An app may be able to access sensitive user data.
Affects Spotlight

x

x

x

CVE-2026-65380: An app may be able to access protected user data.
Affects Sandbox

x

CVE-2026-65381: A malicious app may be able to break out of its sandbox.
Affects AppleMobileFileIntegrity

x

x

x

CVE-2026-65382: An app may be able to access sensitive user data.
Affects LaunchServices

x

x

x

CVE-2026-65383: An app may bypass Gatekeeper checks.
Affects System Settings

x

CVE-2026-65390: Processing maliciously crafted web content may lead to memory corruption.
Affects WebRTC

x

x

x

CVE-2026-65391: Processing maliciously crafted web content may lead to memory corruption.
Affects WebRTC

x

x

x

CVE-2026-65393: An app may be able to access user-sensitive data.
Affects Xcode IDE

x

CVE-2026-65395: Processing a maliciously crafted image may result in memory corruption.
Affects ImageIO

x

x

x

x

x

x

x

CVE-2026-65398: An app may be able to cause unexpected system termination or corrupt kernel memory.
Affects IOMobileFrameBuffer

x

x

CVE-2026-65399: An archive may be able to bypass Gatekeeper.
Affects copyfile

x

x

x

x

x

x

x

CVE-2026-65400: An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.
Affects Screen Sharing Server

x

x

CVE-2026-65401: An app may be able to cause unexpected system termination.
Affects Kernel

x

CVE-2026-65402: An app may be able to cause unexpected system termination.
Affects Kernel

x

x

x

x

x

CVE-2026-65403: An app may be able to access sensitive user data.
Affects Reminders

x

x

x

x

x

x

x

CVE-2026-65404: A malicious application may be able to bypass Privacy preferences.
Affects Accounts

x

x

CVE-2026-65405: An app may be able to determine kernel memory layout.
Affects Kernel

x

x

x

x

x

x

x

x

CVE-2026-65406: An app may be able to access sensitive user data.
Affects BackgroundAssets

x

x

x

x

x

x

x

CVE-2026-65407: An app may be able to cause unexpected system termination.
Affects AppleAVD

x

x

x

x

x

x

x

x

CVE-2026-65408: An app may be able to cause unexpected system termination.
Affects Apple Neural Engine

x

x

x

x

x

CVE-2026-65409: An app may be able to cause a denial of service.
Affects Foundation

x

x

x

x

x

x

x

x

CVE-2026-65410: An app may be able to cause unexpected system termination.
Affects AVEVideoEncoder

x

x

x

x

x

x

x

CVE-2026-65411: An app may be able to modify protected parts of the file system.
Affects MobileBackup

x

x

x

CVE-2026-65412: Processing web content may lead to a denial-of-service.
Affects CoreText

x

x

x

x

x

x

x

CVE-2026-65413: An app may be able to cause a denial of service.
Affects SceneKit

x

x

x

CVE-2026-65415: A local user may be able to cause unexpected system termination or read kernel memory.
Affects Kernel

x

x

x

x

x

CVE-2026-84487: Processing a maliciously crafted file may result in disclosure of process memory.
Affects SceneKit

x

x

x

x

x

x

x

x

CVE-2026-84489: An app may be able to cause a denial of service.
Affects CoreUI

x

x

CVE-2026-84491: An app may be able to access sensitive user data.
Affects Photos Storage

x

x

x

x

x

x

CVE-2026-84492: An app may be able to cause unexpected system termination.
Affects Graphics

x

x

x

x

x

x

x

x

CVE-2026-84497: Opening a maliciously crafted file may lead to unexpected process termination.
Affects Model I/O

x

x

x

x

x

x

x

CVE-2026-84505: An app may be able to gain root privileges.
Affects Directory Utility

x

x

x

CVE-2026-84506: An app may be able to execute arbitrary code with kernel privileges.
Affects udf

x

x

x

CVE-2026-84507: An app may be able to cause unexpected system termination or corrupt kernel memory.
Affects Kernel

x

x

x

x

x

x

x

x

CVE-2026-84509: Connecting to a malicious SMB server may lead to unexpected system termination.
Affects SMB

x

x

x

CVE-2026-84510: Mounting a maliciously crafted volume may lead to unexpected system termination.
Affects exFAT

x

x

x

x

x

CVE-2026-84511: Processing a maliciously crafted asset catalog may lead to unexpected process termination.
Affects CoreUI

x

x

x

x

x

x

x

CVE-2026-84512: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
Affects Disk Images

x

x

x

CVE-2026-84513: A malicious application may be able to determine a user's current location.
Affects Symptom Framework

x

x

x

x

x

x

x

x

CVE-2026-84514: An app may be able to modify protected parts of the file system.
Affects Kext Management

x

x

x

CVE-2026-84515: Connecting to a malicious SMB server may lead to kernel memory corruption.
Affects SMB

x

x

x

CVE-2026-84516: Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory.
Affects CUPS

x

x

x

CVE-2026-84517: An app may be able to cause unexpected system termination.
Affects Kernel

x

x

x

CVE-2026-84518: A malicious website may be able to determine what apps a user has installed.
Affects Safari

x

x

CVE-2026-84519: Mounting a disk image with maliciously crafted files may lead to unexpected system termination.
Affects AppleDouble

x

x

x

x

x

CVE-2026-84520: A local attacker may be able to cause unexpected system termination or corrupt kernel memory.
Affects AppleFDEKeyStore

x

CVE-2026-84521: An app may be able to cause unexpected system termination.
Affects Kernel

x

x

x

CVE-2026-84522: An app may be able to access sensitive user data.
Affects Archive Utility

x

CVE-2026-84523: An app may be able to cause unexpected system termination or write kernel memory.
Affects APFS

x

x

x

x

x

x

x

x

CVE-2026-84524: Processing a maliciously crafted font file may lead to unexpected app termination.
Affects FontParser

x

x

x

x

x

x

x

x

CVE-2026-84525: An app may be able to access user-sensitive data.
Affects ATS

x

x

x

CVE-2026-84526: Processing a maliciously crafted 3D scene may lead to unexpected process termination.
Affects SceneKit

x

x

x

x

x

x

x

x

CVE-2026-84527: An app may be able to access sensitive user data.
Affects TCC

x

x

x

x

x

x

x

CVE-2026-84530: An app may be able to disclose kernel memory.
Affects Kernel

x

x

x

x

x

x

x

CVE-2026-84531: Processing maliciously crafted NTLM input may lead to unexpected app termination.
Affects Security

x

x

CVE-2026-84532: Opening a maliciously crafted file may cause unexpected process termination or disclose process memory.
Affects RealityKit

x

x

x

x

x

x

x

CVE-2026-84533: An attacker in a privileged network position may be able to modify network traffic.
Affects Heimdal

x

x

x

x

CVE-2026-84534: Extracting a maliciously crafted archive may allow an attacker to write arbitrary files.
Affects file_cmds

x

x

x

x

x

x

CVE-2026-84535: An app may be able to break out of its sandbox.
Affects Automator

x

x

x

CVE-2026-84536: Connecting to a malicious SMB server may lead to unexpected system termination.
Affects SMB

x

x

x

CVE-2026-84537: An app may be able to cause unexpected system termination or corrupt kernel memory.
Affects SMB

x

x

x

CVE-2026-84538: A remote attacker may be able to cause a denial-of-service.
Affects Kernel

x

x

x

CVE-2026-84540: An app may be able to access sensitive user data.
Affects CUPS

x

x

x

CVE-2026-84541: An application may be able to access restricted files.
Affects CUPS

x

x

x

CVE-2026-84543: Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory.
Affects SMB

x

x

x

CVE-2026-84544: Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory.
Affects Kernel

x

x

x

CVE-2026-84548: Processing a maliciously crafted document may lead to an out-of-bounds read.
Affects Quick Look

x

x

x

CVE-2026-84549: Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory.
Affects Kernel

x

x

x

CVE-2026-84550: An app may be able to cause unexpected system termination.
Affects Disk Images

x

x

x

CVE-2026-84551: An app may be able to bypass network restrictions.
Affects Sandbox

x

x

x

x

CVE-2026-84552: An app may be able to cause unexpected system termination.
Affects Disk Images

x

x

x

x

x

CVE-2026-84553: A remote attacker may be able to cause a denial-of-service.
Affects smbx

x

x

x

CVE-2026-84554: An attacker in a privileged network position may be able to cause a denial-of-service.
Affects CUPS

x

x

x

CVE-2026-84555: An app may be able to access sensitive user data.
Affects Sandbox

x

x

CVE-2026-84556: An app may be able to access sensitive user data.
Affects Keychain Access

x

x

x

CVE-2026-84558: An app may be able to cause unexpected system termination.
Affects Kernel

x

CVE-2026-84559: A malicious application may be able to access restricted files.
Affects CoreServices

x

x

x

CVE-2026-84560: An app may gain unauthorized access to Bluetooth.
Affects Bluetooth

x

x

x

x

x

CVE-2026-84561: An app may be able to cause unexpected system termination or corrupt kernel memory.
Affects Kernel

x

x

x

x

x

x

x

x

CVE-2026-84563: An app may be able to cause unexpected system termination.
Affects CUPS

x

x

x

CVE-2026-84564: Processing a maliciously crafted image may result in disclosure of process memory.
Affects ImageIO

x

x

x

x

x

x

x

x

CVE-2026-84565: Processing a maliciously crafted disk image may lead to unexpected app termination.
Affects Disk Images

x

x

x

CVE-2026-84566: A local attacker may be able to cause unexpected system termination or corrupt kernel memory.
Affects Kernel

x

x

x

x

x

CVE-2026-84567: An app may be able to cause unexpected system termination.
Affects cd9660

x

x

x

CVE-2026-84568: An attacker with control of a network directory server may be able to execute arbitrary code with root privileges.
Affects autofs

x

x

x

CVE-2026-84569: An app may be able to access sensitive user data.
Affects Foundation

x

CVE-2026-84570: An app may be able to bypass Gatekeeper checks.
Affects autofs

x

x

x

CVE-2026-84571: Processing a maliciously crafted image may lead to unexpected app termination.
Affects CoreUI

x

x

x

x

x

CVE-2026-84572: An app may be able to cause unexpected system termination or read kernel memory.
Affects udf

x

x

x

CVE-2026-84573: An app may be able to access sensitive user data.
Affects Mail

x

x

x

CVE-2026-84574: An app may be able to bypass Privacy preferences.
Affects CoreServices

x

x

x

CVE-2026-84575: Processing a maliciously crafted file may lead to unexpected app termination.
Affects CoreUI

x

x

x

x

x

x

x

CVE-2026-84576: An app may be able to access sensitive user data.
Affects QuartzCore

x

x

x

CVE-2026-84577: An app may be able to bypass sandbox restrictions.
Affects libxpc

x

x

CVE-2026-84578: An app may be able to break out of its sandbox.
Affects quarantine

x

x

x

CVE-2026-84580: An app may be able to break out of its sandbox.
Affects quarantine

x

x

x

CVE-2026-84581: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
Affects HFS

x

x

x

CVE-2026-84583: A local app may be able to read a persistent account identifier.
Affects AuthKit

x

x

x

x

x

x

x

x

CVE-2026-84584: An app may be able to break out of its sandbox.
Affects Archive Utility

x

CVE-2026-84585: An app may be able to access local network devices without user consent.
Affects NetworkExtension

x

CVE-2026-84586: A malicious application may be able to leak sensitive user information.
Affects Apple Account

x

x

CVE-2026-84587: An app may be able to access protected user data.
Affects AppKit

x

x

x

CVE-2026-84588: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
Affects Kernel

x

CVE-2026-84589: An app may be able to modify Privacy preferences.
Affects TCC

x

CVE-2026-84593: An app may be able to cause unexpected system termination.
Affects AppleKeyStore

x

CVE-2026-84596: Processing a maliciously crafted font may result in the disclosure of process memory.
Affects CoreText

x

x

x

x

x

CVE-2026-84597: Processing a maliciously crafted font may result in the disclosure of process memory.
Affects FontParser

x

x

x

x

x

CVE-2026-84598: An attacker with physical access to a trust-paired device may be able to read and write arbitrary files.
Affects MobileBackup

x

x

CVE-2026-84600: A malicious shortcut may be able to send messages without user confirmation.
Affects Shortcuts

x

x

x

x

x

CVE-2026-84601: An app may be able to bypass Apple Intelligence security prompts.
Affects Apple Intelligence

x

CVE-2026-84602: An app may be able to cause unexpected system termination.
Affects Kernel

x

x

x

x

x

x

x

x

CVE-2026-84603: An app may be able to access sensitive user data.
Affects Sandbox Profiles

x

x

x

CVE-2026-84606: An app may be able to identify a user across reinstalls.
Affects iCloud

x

x

x

CVE-2026-84607: A sandboxed app may be able to execute arbitrary code with kernel privileges.
Affects AVEVideoEncoder

x

x

x

x

x

x

x

x

CVE-2026-84609: An app may be able to modify protected system files.
Affects Software Update

x

x

x

x

x

x

x

CVE-2026-84611: Processing a maliciously crafted 3D model may lead to memory corruption.
Affects SceneKit

x

x

x

x

x

x

x

x

CVE-2026-84612: An app may be able to read persistent device identifiers.
Affects DeviceCheck

x

x

x

x

x

x

x

x

CVE-2026-84615: An app may be able to access sensitive user data.
Affects Music

x

x

x

x

CVE-2026-84616: An app may be able to cause unexpected system termination.
Affects AVEVideoEncoder

x

x

x

x

x

x

x

x

CVE-2026-84617: An app may be able to access sensitive user data.
Affects XPC

x

x

x

x

x

x

CVE-2026-84618: An app may be able to access sensitive user data.
Affects Game Center

x

x

x

CVE-2026-84619: An app may be able to cause unexpected system termination or write kernel memory.
Affects Kernel

x

x

x

CVE-2026-84620: Processing a maliciously crafted 3D model may lead to memory corruption.
Affects SceneKit

x

x

x

x

x

x

x

x

CVE-2026-84621: An app may be able to access sensitive user data.
Affects Spotlight

x

x

x

x

x

CVE-2026-84622: An app with root privileges may be able to read uninitialized kernel memory.
Affects Kernel

x

x

x

x

x

x

x

x

CVE-2026-84623: An app may be able to fingerprint the device.
Affects Power Management

x

x

CVE-2026-84624: A sandboxed app may be able to access restricted files.
Affects CoreML

x

x

x

x

x

x

CVE-2026-84625: An app may be able to fingerprint the user.
Affects Sandbox Profiles

x

x

x

x

CVE-2026-84626: An app may be able to identify what other apps a user has installed.
Affects NetworkExtension

x

x

x

x

x

x

x

x

CVE-2026-84628: A sandboxed app may be able to access the System Keychain.
Affects MediaRemote

x

x

x

x

x

CVE-2026-84629: An app may be able to fingerprint the user.
Affects Photos Storage

x

x

x

x

CVE-2026-84631: An app may be able to gain root privileges.
Affects Bluetooth

x

CVE-2026-84632: Processing a maliciously crafted 3D model may lead to memory corruption.
Affects SceneKit

x

x

x

x

x

x

x

x

CVE-2026-84635: Processing maliciously crafted web content may lead to an unexpected process termination.
Affects WebKit

x

x

x

x

x

CVE-2026-84636: An app may be able to access sensitive user data.
Affects Wi-Fi Connectivity

x

x

x

x

CVE-2026-86869: Processing a maliciously crafted image may lead to unexpected app termination.
Affects ImageIO

x

x

CVE-2026-86870: Processing a maliciously crafted file may lead to unexpected app termination.
Affects libarchive

x

x

x

x

x

CVE-2026-86876: A sandboxed process may be able to circumvent sandbox restrictions.
Affects CoreMedia

x

x

x

x

x

x

x

CVE-2026-86878: An app may be able to access sensitive user data.
Affects Camera

x

CVE-2026-86879: A remote attacker may be able to cause a denial-of-service.
Affects Baseband

x

CVE-2026-86881: An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages.
Affects Security

x

x

x

x

x

x

x

x

CVE-2026-86882: Processing a maliciously crafted image may lead to unexpected process termination.
Affects Accelerate Framework

x

x

x

x

x

x

x

x

CVE-2026-86883: An app may be able to access sensitive user data.
Affects Managed Configuration

x

x

CVE-2026-86884: An app may be able to access sensitive user data.
Affects Siri

x

x

x

x

CVE-2026-86885: An attacker in radio range may be able to cause unexpected system termination.
Affects Baseband

x

CVE-2026-86886: An app may be able to modify protected system files.
Affects TCC

x

x

x

CVE-2026-86887: An app may be able to bypass certain Privacy preferences.
Affects Time Zone

x

x

x

CVE-2026-86888: A local app may be able to read a persistent account identifier.
Affects App Store

x

x

x

x

x

x

CVE-2026-86889: An attacker in a privileged network position may be able to intercept network traffic.
Affects Security

x

x

x

CVE-2026-86890: An attacker with physical access to a locked device may be able to view sensitive user information.
Affects Siri Suggestions

x

x

CVE-2026-86891: An app may be able to access Bluetooth device information.
Affects Core Bluetooth

x

x

x

x

CVE-2026-86892: An app may be able to cause a denial-of-service.
Affects SpringBoard

x

x

x

CVE-2026-86893: An app may be able to read device name.
Affects CloudKit

x

x

x

x

CVE-2026-86894: An app may be able to break out of its sandbox.
Affects libxpc

x

CVE-2026-86895: A local app may be able to read a persistent account identifier.
Affects CloudKit

x

x

x

x

CVE-2026-86897: An app may be able to access sensitive user data.
Affects Safe Browsing

x

x

x

x

CVE-2026-86898: Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.
Affects WebKit

x

x

x

CVE-2026-86900: Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure.
Affects exFAT

x

CVE-2026-86901: Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure.
Affects exFAT

x

CVE-2026-86902: An app may be able to access sensitive user data.
Affects NSDocument

x

CVE-2026-86903: An app may be able to disclose kernel memory.
Affects Kernel

x

x

x

x

x

CVE-2026-86904: An app may be able to track users across apps and websites without permission.
Affects Watch App

x

x

x

CVE-2026-86905: An app may be able to delete credentials stored in Keychain.
Affects Authentication Services

x

x

x

CVE-2026-86909: An app may be able to bypass Gatekeeper checks.
Affects System Settings