CVE-2026-84585

Undergoing Analysis Undergoing Analysis - In Progress

Permissions Issue in macOS Golden Gate 27

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: Apple Inc.

Description

A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access local network devices without user consent.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-14

Generated

2026-10-05

AI Q&A

2026-09-15

EPSS Evaluated

2026-10-03

NVD

CVE-2026-84585

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos_golden_gate	27

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a permissions issue in macOS Golden Gate 27 where an app could access local network devices without the user's consent due to improper state management.

Impact Analysis

An attacker could exploit this to gain unauthorized access to your local network devices, potentially intercepting data or performing actions on your network without your knowledge.

Compliance Impact

The provided CVE data does not specify how this vulnerability affects compliance with standards like GDPR or HIPAA. The issue involves an app potentially accessing local network devices without user consent, but no direct impact on regulatory compliance is mentioned.

Mitigation Strategies

Update to macOS Golden Gate 27 or later to address the permissions issue. Avoid installing untrusted applications that may exploit this vulnerability.

Hi! I’m here to help you understand CVE-2026-84585. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70