AI description
CVE-2026-84496 is an out-of-bounds write vulnerability affecting the Apple File System (APFS) in macOS. The issue occurs when the operating system attempts to mount a maliciously crafted disk image. If triggered, this flaw can cause unexpected system termination or corrupt the system's kernel memory. The vulnerability was discovered and reported to Apple by a collaborative group of security researchers, including Maher Azzouzi, Jonathan Bar Or, and several others. Apple resolved the issue by implementing improved bounds checking to prevent unauthorized out-of-bounds writes. The security patch was released on October 26, 2026, and is included in the macOS Golden Gate 27.2 and macOS Tahoe 26.7.2 software updates.
- Description
- An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
- Source
- product-security@apple.com
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 6.5
- Impact score
- 3.6
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Severity
- MEDIUM
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-787
Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.
- Hype score
20
Two new CVEs (CVE-2026-112550, CVE-2026-84496) in the Apple ecosystem. As always - patch your boxes.
@yo_yo_yo_jbo
26 Oct 2026
1986 Impressions
0 Retweets
29 Likes
3 Bookmarks
0 Replies
0 Quotes
CVE-2026-65373, CVE-2026-112511, CVE-2026-84496, CVE-2026-113946, CVE-2026-113941, CVE-2026-84498, CVE-2026-84590, CVE-2026-112482, CVE-2026-112457, CVE-2026-112443, CVE-2026-112708, CVE-2026-112461, CVE-2026-112417, CVE-2026-112481, CVE-2026-112451, CVE-2026-112622, https://t.co
@calysteon
26 Oct 2026
14206 Impressions
14 Retweets
215 Likes
58 Bookmarks
13 Replies
2 Quotes