CVEsAppleCVE-2026-84610Published Oct 26, 20:42 · Updated Oct 26, 20:42 UTC
–
Not scored
CVE-2026-84610

A file quarantine bypass was addressed with additional checks.

macOS
AffectedmacOS
FixUpdate to 15.8.2, 26.7.2, 27 or newer
PublishedOct 26, 20:42 · apple
ScoredNot yet
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:05 UTC

What we know

No known exploitation. CISA KEV, checked 22:05 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
No severity score yet.

Description

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A maliciously crafted ZIP archive may bypass Gatekeeper checks.

From apple

Affected and fixed versions

ProductAffectedFixed inmacOSbefore 15.8.215.8.2macOSbefore 26.7.226.7.2macOSbefore 2727

Exploit code

Exploit-DBnone knownMetasploitnone knownNucleinone known

References

support.apple.com/en-us/149035 · support.apple.comsupport.apple.com/en-us/149522 · support.apple.comsupport.apple.com/en-us/149523 · support.apple.com

Other CVEs in macOS

All 1,938 →
–An out-of-bounds read was addressed with improved bounds checking. · CVE-2026-113945Oct 268.4A logic issue was addressed with improved checks. · CVE-2026-65327Oct 26–An out-of-bounds read was addressed with improved bounds checking. · CVE-2026-112529Oct 26