CVE-2026-84506

Analyzed Analyzed - Analysis Complete

Memory Corruption in macOS Golden Gate

Publication date: 2026-09-14

Last updated on: 2026-09-16

Assigner: Apple Inc.

Description

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to execute arbitrary code with kernel privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-16

Generated

2026-10-05

AI Q&A

2026-09-15

EPSS Evaluated

2026-10-03

NVD

CVE-2026-84506

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	From 15.0 (inc) to 15.8 (exc)
apple	macos	From 26.0 (inc) to 26.7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This is a use after free vulnerability caused by improper memory management. An attacker could exploit this to execute arbitrary code with kernel privileges on affected Apple macOS systems.

Detection Guidance

This vulnerability is a use-after-free issue in Apple macOS versions prior to Golden Gate 27, Sequoia 15.8, and Tahoe 26.7. Detection requires checking your macOS version against these updates. Use the command 'sw_vers' to check your macOS version. If your version is below the specified updates, your system is vulnerable.

Impact Analysis

If exploited, this vulnerability could allow an attacker to gain full control over your system, install malware, steal data, or perform other malicious actions with the highest system privileges.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with standards like GDPR or HIPAA. The vulnerability allows arbitrary code execution with kernel privileges, which could potentially lead to unauthorized access or data breaches. However, specific compliance implications are not detailed in the given context.

Mitigation Strategies

Update to the latest versions of macOS Golden Gate 27, macOS Sequoia 15.8, or macOS Tahoe 26.7 to address the use after free issue and prevent arbitrary code execution with kernel privileges.

Hi! I’m here to help you understand CVE-2026-84506. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70