CVE-2026-84494

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-26 · updated 2026-10-27

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to cause unexpected system termination or write kernel memory.

Affected products

Apple iOS and iPadOS: before 27.2 — fixed in 27.2
Apple macOS: before 27.2 — fixed in 27.2
Apple visionOS: before 27.2 — fixed in 27.2

How to fix

Upgrade to a fixed version: Apple iOS and iPadOS 27.2; Apple macOS 27.2; Apple visionOS 27.2. Check the vendor advisory for mitigations.

References

https://support.apple.com/en-us/149230
https://support.apple.com/en-us/149521
https://support.apple.com/en-us/149526

Get alerted when CVE-2026-84494 or the next vulnerability affects your stack