Description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination.
Published: 2026-09-14
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service (App Termination)
Action: Patch Immediately
AI Analysis

Impact

An out‑of‑bounds write bug (CWE‑787) was addressed with improved bounds checking; processing a maliciously crafted file may lead to unexpected app termination.

Affected Systems

Apple operating systems including iOS, iPadOS, macOS (Golden Gate, Sequoia, Tahoe), tvOS, visionOS, and watchOS are affected. The vulnerability is mitigated in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, vision 27, and watchOS 27.

Risk and Exploitability

The CVSS score is 7.8 and the EPSS score is less than 1%, indicating a high severity but low current exploitation probability. Based on the description, the vulnerability does not provide a direct code execution path; instead, a maliciously crafted file may trigger application crashes when opened, representing a denial‑of‑service risk that requires user interaction to trigger. Additionally, the vulnerability is not listed in CISA’s KEV catalog.

Generated by OpenCVE AI on September 20, 2026 at 18:42 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update to the latest Apple OS releases: iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.
  • Configure devices to limit automatic opening of external files, ensuring only trusted applications can read or execute user‑provided content.
  • Stay current with Apple security advisories and apply any future patches promptly.

Generated by OpenCVE AI on September 20, 2026 at 18:42 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 20 Sep 2026 19:00:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Write Causes App Termination in Apple Operating Systems

Thu, 17 Sep 2026 22:15:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Write Causes App Termination in Apple Operating Systems

Wed, 16 Sep 2026 09:30:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Write Vulnerability in Apple Operating Systems Leading to App Termination

Wed, 16 Sep 2026 01:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple ipados
Apple iphone Os
CPEs cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Vendors & Products Apple ipados
Apple iphone Os

Tue, 15 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 15 Sep 2026 09:15:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Write Vulnerability in Apple Operating Systems Leading to App Termination
Weaknesses CWE-787

Tue, 15 Sep 2026 02:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos
Vendors & Products Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Description An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination.
References

Subscriptions

Apple Ios And Ipados Ipados Iphone Os Macos Tvos Visionos Watchos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-09-15T17:52:06.397Z

Reserved: 2026-09-01T21:13:17.756Z

Link: CVE-2026-84575

cve-icon Vulnrichment

Updated: 2026-09-15T17:51:24.260Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-14T21:17:33.750

Modified: 2026-09-16T01:06:34.923

Link: CVE-2026-84575

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-20T18:45:02Z

Weaknesses