CVE-2026-84506

Published Sep 14, 2026 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Description
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination or corrupt kernel memory.

Analysis

AI-generated

Technical impact

A use‑after‑free flaw in macOS memory management may allow an application to cause unexpected system termination or corrupt kernel memory. This vulnerability could potentially lead to privilege escalation or system instability, enabling an attacker to gain kernel‑level access or disrupt service.

Affected Systems

Apple macOS versions prior to macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 are affected. The issue was fixed in those releases, so systems running earlier macOS versions remain vulnerable.

Risk and Exploitability

The flaw achieves native code execution at the kernel level, representing the highest possible impact. No public exploitation data is currently available (EPSS score < 1%, KEV not listed), but the severity inferred from the CVSS and the nature of kernel privilege escalation suggests a high to critical risk. Likely attackers have local application execution privileges and can exploit the flaw via a malicious app or a crafted input that leads to the use‑after‑free condition.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest macOS update that includes fix – macOS Golden Gate 27, Sequoia 15.8, or Tahoe 26.7 or newer
  • Confirm Gatekeeper and XProtect are enabled to prevent installation of malicious applications
  • Review system logs for unexpected kernel activities and apply additional application whitelisting where feasible

Generated by OpenCVE AI on October 20, 2026 at 13:07 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title Kernel Privilege Escalation via Use-After-Free in macOS
Type Values Removed Values Added
Description A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to execute arbitrary code with kernel privileges. A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination or corrupt kernel memory.
Type Values Removed Values Added
Title Kernel Privilege Escalation via Use-After-Free in macOS
Type Values Removed Values Added
Title macOS Use-After-Free Leading to Kernel-Privilege Escalation
Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Type Values Removed Values Added
Title macOS Use-After-Free Leading to Kernel-Privilege Escalation
Weaknesses CWE-416
Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos
Type Values Removed Values Added
Description A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to execute arbitrary code with kernel privileges.
References
Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Oct 26, 2026, 8:38 PM
Reserved
Sep 1, 2026, 9:13 PM
Status
Modified
Published
Sep 14, 2026, 9:17 PM
Modified
Oct 20, 2026, 1:17 AM