CVE-2026-84616

Published Sep 14, 2026

Last updated 2 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-84616 describes a type confusion vulnerability found in multiple Apple operating systems. This issue stemmed from a need for improved memory handling within these systems. The flaw could potentially allow an application to cause unexpected termination of the system. Apple has addressed this vulnerability through updates in iOS 26.7 and 27, iPadOS 26.7 and 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.

Description: A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
Source: product-security@apple.com
NVD status: Analyzed
Products: ipados, iphone_os, macos, tvos, visionos, watchos

Risk scores

CVSS 3.1

Type: Secondary
Base score: 5.5
Impact score: 3.6
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity: MEDIUM

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-441

Hype score: Not currently trending

CVE-2026-84607 research: Located the fix for CVE-2026-84607 (AVEVideoEncoder: sandboxed app -> arbitrary code with kernel privileges). CVE-2026-84616 is still unlocated. repo: https://t.co/rK6yLTgXEN p.s. AI-assisted
@pauyedin
16 Sept 2026
7001 Impressions
8 Retweets
89 Likes
62 Bookmarks
1 Reply
0 Quotes

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "0896A319-539F-45D2-ACA1-7225AE5C06ED",
            "versionEndExcluding": "26.7",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "B331E4FC-727F-403B-8689-E647A51204FD",
            "versionEndExcluding": "26.7",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "241A56D1-1E33-4317-A053-85AF8E3770B3",
            "versionEndExcluding": "15.8",
            "versionStartIncluding": "15.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "1BE83000-26C0-49C5-A966-BB40AD6F8BEE",
            "versionEndExcluding": "26.7",
            "versionStartIncluding": "26.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "6BD26C5D-C2F6-4BB6-A1E6-1F5723EA7458",
            "versionEndExcluding": "27.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "6F43E9DC-5D72-4325-9965-E6B50054B8E8",
            "versionEndExcluding": "27.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "52C964A6-6BF4-4C0A-9C20-FBDE815AE5DF",
            "versionEndExcluding": "27.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.