Apple's macOS Golden Gate: 25 Vulnerabilities Patched in October 2026 Update
Apple released 25 security patches for macOS Golden Gate and other operating systems on October 26, 2026, addressing critical vulnerabilities.
Key findings
- Apple patched 25 vulnerabilities in macOS Golden Gate and other OS versions on October 26, 2026.
- Vulnerabilities included buffer overflows, memory corruption, and privilege escalation risks.
- Patches were released for macOS Golden Gate versions 27 and 27.2, among others.
- No vulnerabilities in this batch were reported as actively exploited in the wild.
- The fixes address issues like unexpected termination, data disclosure, and sandbox escapes.
On October 26, 2026, Apple Inc. released a significant security update addressing 25 vulnerabilities in macOS Golden Gate, with patches also extending to other Apple operating systems like iOS, iPadOS, tvOS, watchOS, and visionOS. The disclosed issues span various bug classes, including buffer overflows, type confusion, out-of-bounds reads and writes, null pointer dereferences, use-after-free vulnerabilities, and logic flaws. These vulnerabilities, if exploited, could lead to unexpected process termination, disclosure of process memory, access to sensitive user data, memory corruption, denial-of-service conditions, and in some cases, the ability to bypass security checks or gain root privileges.
Several vulnerabilities were addressed through improved bounds checking and input validation. For instance, CVE-2026-86991, a buffer overflow, was fixed with improved bounds checking, preventing unexpected process termination. Similarly, CVE-2026-86972, another buffer overflow, was mitigated by enhanced size validation, addressing potential memory corruption when processing maliciously crafted audio files. CVE-2026-86974, a type confusion issue, was resolved with improved checks, fixing memory corruption risks when processing malicious web content.
Memory management vulnerabilities were also a significant focus. CVE-2026-86958, an issue addressed with improved memory handling, could have allowed an attacker with memory write capability to bypass pointer authentication codes and run arbitrary code. CVE-2026-86946, a use-after-free vulnerability, was fixed with improved memory management, preventing unexpected system termination or kernel memory corruption. CVE-2026-84545, another use-after-free issue, could have allowed an app with sandbox restrictions to escape and execute code with root privileges, which was addressed with improved memory management.
Security and access control flaws were also part of this batch. CVE-2026-86968, an access issue, was resolved with improved access control, preventing malicious apps from accessing restricted system interfaces. CVE-2026-86939, a permissions issue, was fixed with additional restrictions, preventing an attacker with root privileges from accessing protected user data. Furthermore, logic issues like CVE-2026-86937 and CVE-2026-86936, which could have allowed an app to bypass Gatekeeper checks or gain root privileges, were addressed with improved state management and checks, respectively.
Path traversal vulnerabilities, such as CVE-2026-86877 and CVE-2026-84545, were addressed with improved path validation and sandbox escapes, respectively. These could have allowed malicious apps to delete files or execute code with root privileges. CVE-2026-86973, an out-of-bounds read, was fixed with improved bounds checking, preventing unexpected process crashes when processing malicious web content. CVE-2026-86969, an out-of-bounds write, was addressed with improved input validation, preventing unexpected system termination or kernel memory corruption.
The vulnerabilities were patched across various versions, including macOS Golden Gate 27 and 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, among others for different operating systems. Users are advised to update to the latest available versions to protect against these security risks. While the SANS Internet Storm Center noted a large volume of patches, no new vulnerabilities in this batch were explicitly marked as already exploited in the wild. However, the sheer number and variety of issues underscore the importance of timely security updates for Apple's ecosystem.
The broad range of vulnerabilities patched, affecting core system components and user data access, highlights the ongoing efforts by Apple to secure its operating systems against diverse attack vectors. Users should ensure their macOS Golden Gate and other affected Apple devices are updated to the patched versions to mitigate potential risks. The consistent release of security updates indicates a proactive approach to addressing newly discovered vulnerabilities.