CVE-2026-84508: Apple iOS vulnerability
Published Oct 20, 2026
·Updated
This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, visionOS 27. An app may be able to access protected user data.
Affected Software
5 affected components
Apple iOS<27
Apple iPadOS<27
Apple macOS Golden Gate<27
Apple macOS Tahoe<26.7
Apple visionOS<27
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
iOS/iPadOSto a version that resolves this vulnerability.Fixed in 27 - Upgrade
Upgrade
macOS Golden Gateto a version that resolves this vulnerability.Fixed in 27 - Upgrade
Upgrade
macOS Tahoeto a version that resolves this vulnerability.Fixed in 26.7 - Upgrade
Upgrade
visionOSto a version that resolves this vulnerability.Fixed in 27
Event History
Oct 20, 2026
CVE Published
via MITRE·12:50 AM
Data Sourced
via MITRE·12:50 AM
DescriptionWeakness
Data Sourced
via NVD·01:17 AM
Description
Frequently Asked Questions
1
Which releases include the fix?
The issue is fixed in iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, and visionOS 27.
2
What was changed to address the issue?
Apple addressed the issue by improving validation of the caller's access.