Medium severity6.5NVD Advisory· Published Sep 14, 2026· Updated Sep 16, 2026
CVE-2026-84596
CVE-2026-84596
Description
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9- Range: = 27
= 27+ 1 more
- (no CPE)range: = 27
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <27.0
- Range: = 27
Patches
Vulnerability mechanics
References
5- support.apple.com/en-us/149034nvdVendor Advisory
- support.apple.com/en-us/149035nvdVendor Advisory
- support.apple.com/en-us/149036nvdVendor Advisory
- support.apple.com/en-us/149037nvdVendor Advisory
- support.apple.com/en-us/149038nvdVendor Advisory
News mentions
1- Apple Updates Everything, (Mon, Sep 14th)SANS Internet Storm Center · Sep 14, 2026