CVE-2026-84607

Published Sep 14, 2026

Last updated 2 months ago

Mobile device

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-84607 describes a race condition vulnerability found across multiple Apple operating systems, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. This flaw could allow a sandboxed application to execute arbitrary code with kernel privileges. Apple addressed this issue by implementing improved state management. The fix was included in updates such as iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27, which were released around September 14, 2026.

Description: A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to execute arbitrary code with kernel privileges.
Source: product-security@apple.com
NVD status: Analyzed
Products: ipados, iphone_os, macos, tvos, visionos, watchos

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.8
Impact score: 6
Exploitability score: 1.1
Vector string: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity: HIGH

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-362

Hype score: Not currently trending

CVE-2026-84607 research: Located the fix for CVE-2026-84607 (AVEVideoEncoder: sandboxed app -> arbitrary code with kernel privileges). CVE-2026-84616 is still unlocated. repo: https://t.co/rK6yLTgXEN p.s. AI-assisted
@pauyedin
16 Sept 2026
7001 Impressions
8 Retweets
89 Likes
62 Bookmarks
1 Reply
0 Quotes

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "0896A319-539F-45D2-ACA1-7225AE5C06ED",
            "versionEndExcluding": "26.7",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "B331E4FC-727F-403B-8689-E647A51204FD",
            "versionEndExcluding": "26.7",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "241A56D1-1E33-4317-A053-85AF8E3770B3",
            "versionEndExcluding": "15.8",
            "versionStartIncluding": "15.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "1BE83000-26C0-49C5-A966-BB40AD6F8BEE",
            "versionEndExcluding": "26.7",
            "versionStartIncluding": "26.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "6BD26C5D-C2F6-4BB6-A1E6-1F5723EA7458",
            "versionEndExcluding": "27.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "6F43E9DC-5D72-4325-9965-E6B50054B8E8",
            "versionEndExcluding": "27.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "52C964A6-6BF4-4C0A-9C20-FBDE815AE5DF",
            "versionEndExcluding": "27.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.