Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-84604

Apple Macos: out-of-bounds write

Risk score
50/100
CVSS
7.8 v3.1
Exploit chance (30 days)
0.2%
Published
26 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted audit file may corrupt process memory.
Affected
Apple Macos
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Story map

Story map: Apple MacosTHE FLAWSTHE FIXCVE-2026-84604Out-of-bounds writeCVSS 7.8 · EPSS 0%CVE-2026-65400Apple macOS ImproperAuthentication VulnerabilityCVSS 9.8 · exploitedCVE-2026-86929Out-of-bounds read can lead toremote code executionCVSS 8.8 · EPSS 1%CVE-2026-113947Privilege escalation can lead toremote code executionCVSS 8.8 · EPSS 1%FixApply the vendor's securityupdate; see the linked advisory.Who is exposedApple MacosRED · ACT TODAYApple MacosAn authentication issue wasaddressed with improved statemanagement. This issue is fixedin macOS Golden Gate 27, macOSSequoia 15.7.9, macOS Sonoma14.8.9, macOS Tahoe 26.6.1,macOS Tahoe 26.7. An attacker…Where it standsExploited in the wildOn CISA's exploited list since 18 AugUS federal deadline 21 AugHOW IT UNFOLDEDOfficial record on the left, the press on the right, oldest first.18 Aug · CISAAdded to the Known Exploited Vulnerabilities list21 Aug · DeadlineUS federal agencies must have patchedCONNECTS TOSame weaknessOut-of-bounds write (CWE-787)355 other warnings in 30 days →Same productEarlier Apple Macos warnings23 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Apple Macos: Red, act today. An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

The flaws

  • CVE-2026-84604: Out-of-bounds write (CVSS 7.8 · EPSS 0%)
  • CVE-2026-65400: Apple macOS Improper Authentication Vulnerability (CVSS 9.8 · exploited)
  • CVE-2026-86929: Out-of-bounds read can lead to remote code execution (CVSS 8.8 · EPSS 1%)
  • CVE-2026-113947: Privilege escalation can lead to remote code execution (CVSS 8.8 · EPSS 1%)

The fix

Fix: Apply the vendor's security update; see the linked advisory.

Who is exposed: Apple Macos

Where it stands

  • Exploited in the wild
  • On CISA's exploited list since 18 Aug
  • US federal deadline 21 Aug

How it unfolded

  1. 18 Aug, CISA (official): Added to the Known Exploited Vulnerabilities list
  2. 21 Aug, Deadline (official): US federal agencies must have patched

Connects to

Why it is Yellow

  • CVSS 7.8 high

References

Original description

A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted audit file may corrupt process memory.

Last activity 26 Oct 2026. Patch Forecast updates every hour.