CVEsAppleCVE-2026-84545Published Oct 26, 20:41 · Updated Oct 26, 20:41 UTC
–
Not scored
CVE-2026-84545

A use after free issue was addressed with improved memory management.

macOS
AffectedmacOS
FixUpdate to 15.8.2, 26.7.2, 27 or newer
PublishedOct 26, 20:41 · apple
ScoredNot yet
Exploit code publicNone known · checked 22:18 UTC
ExploitedNone known · CISA KEV checked 22:30 UTC

What we know

No known exploitation. CISA KEV, checked 22:30 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 22:18 UTC.
No severity score yet.

Description

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app with App Sandbox restrictions may be able to escape the sandbox and execute code with root privileges.

From apple

Affected and fixed versions

ProductAffectedFixed inmacOSbefore 15.8.215.8.2macOSbefore 26.7.226.7.2macOSbefore 2727

Exploit code

Exploit-DBnone knownMetasploitnone knownNucleinone known

References

support.apple.com/en-us/149035 · support.apple.comsupport.apple.com/en-us/149522 · support.apple.comsupport.apple.com/en-us/149523 · support.apple.com

Other CVEs in macOS

All 1,938 →
–An out-of-bounds read was addressed with improved bounds checking. · CVE-2026-113945Oct 268.4A logic issue was addressed with improved checks. · CVE-2026-65327Oct 26–An out-of-bounds read was addressed with improved bounds checking. · CVE-2026-112529Oct 26