Medium severity5.5NVD Advisory· Published Sep 14, 2026· Updated Sep 17, 2026
CVE-2026-84586
CVE-2026-84586
Description
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, watchOS 27. A malicious application may be able to leak sensitive user information.
Affected products
4cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: <27.0
- (no CPE)range: Golden Gate 27
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <27.0
- (no CPE)range: 27
Patches
Vulnerability mechanics
References
2- support.apple.com/en-us/149035nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149037nvdRelease NotesVendor Advisory
News mentions
2- watchOS: 25 Vulnerabilities Patched in Same-Day Apple Security UpdateVypr Intelligence · Sep 14, 2026
- Apple Updates Everything, (Mon, Sep 14th)SANS Internet Storm Center · Sep 14, 2026