{"id":"CVE-2026-84577","aliases":[],"cve":{"records":[{"id":"CVE-2026-84577","source":"apple","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-01T21:13:17.756Z","published":"2026-09-14T20:48:18.656Z","modified":"2026-10-26T20:35:51.623Z"}],"publishers":[{"name":"apple","role":"CNA","organizationId":"286789f9-fbc2-4510-9f9a-43facdede74c","modified":"2026-10-26T20:35:51.623Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-09-16T14:47:37.224Z"}],"references":[{"url":"https://support.apple.com/en-us/149035","tags":[],"source":"apple"},{"url":"https://support.apple.com/en-us/149042","tags":[],"source":"apple"}],"weaknesses":[{"id":"CWE-120","description":"CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')","source":"CISA-ADP"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-09-16T14:43:34.014549Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"An access issue was addressed with additional sandbox restrictions.","titleSource":"apple","descriptionSource":"apple","description":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7. An app may be able to bypass sandbox restrictions.","score":8.2,"severity":"high","published":"2026-09-14T20:48:18.656Z","modified":"2026-10-26T20:35:51.623Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Apple","name":"macOS","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"26.7","versionType":"custom"},{"version":"0","status":"affected","lessThan":"27","versionType":"custom"}],"cpes":[],"source":"apple","url":"https://www.cve.org/CVERecord?id=CVE-2026-84577"}],"remediation":[],"references":["https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149042"],"sources":[{"name":"CVE","id":"CVE-2026-84577","modified":"2026-10-26T20:35:51.623Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-84577"}],"assessments":[{"source":"CISA-ADP","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","score":8.2}],"sourceAffected":[],"observedAt":"2026-10-29T14:46:03.961Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T14:00:31.626Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"An access issue in macOS allows an app to bypass sandbox restrictions, fixed in macOS Golden Gate 27 and macOS Tahoe 26.7. The issue affects versions less than 26.7 and 27. An attacker may bypass sandbox restrictions.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:43:50.057Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-84577"}]}}