CVE-2026-84555

Received Received - Intake

Improper Access Control in macOS Golden Gate 27

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: Apple Inc.

Description

An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to access sensitive user data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-14

Generated

2026-09-15

AI Q&A

2026-09-15

EPSS Evaluated

N/A

NVD

CVE-2026-84555

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos_golden_gate	27
apple	macos_sequoia	15.8

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is an authorization issue where an app could access sensitive user data due to insufficient access controls. It affects macOS Golden Gate 27 and macOS Sequoia 15.8.

Impact Analysis

An attacker could exploit this to access your private data, such as files, messages, or other sensitive information stored on your device.

Compliance Impact

This could lead to unauthorized data exposure, potentially violating GDPR (data protection) or HIPAA (health data privacy) if sensitive user data is compromised.

Mitigation Strategies

Update to macOS Golden Gate 27 or macOS Sequoia 15.8 or later to address the authorization issue. Ensure all systems are running the latest patched versions to prevent unauthorized access to sensitive user data.

Hi! I’m here to help you understand CVE-2026-84555. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70