CVE-2026-84530Disclosure(apple / ipados)

MEDIUMCVSS 3.3 · LOW

Exploit discussion active in current signal (3 latest mentions)

Immediate actions

Patch apple ipados systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

An information disclosure issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.

apple CVEs Back to dashboard

4.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-200

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

ipados
iphone_os
macos
tvos

Threat summary

Public PoC and exploit tooling are both present
Patch or workaround signal is available
6 mentions across 2 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 1 signal
PoC mentioned or linked in 2 signals
Patch or workaround mentioned in 3 signals
Technical details provided in 6 signals
Disclosure: 3 classified signals
Peaked 1d ago at 3 mentions (2026-09-22); latest day: 3
6 total mentions across 2 days

Affected systems

Vendors

apple

Products

ipadosiphone_osmacostvosvisionoswatchos

Deep dive

Activity timeline6 mentions / 2d

Signal classification3 categories

Disclosure

350.0%

PoC

233.3%

Patch

116.7%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-22	3	Patch1PoC2
2026-09-23	3	Disclosure3

Full discourse6 posts

Vladislav Shevchenko@destr4ctt46d
Patch
Finally got around to writing up CVE-2026-84530, which was fixed in the iOS 27 security release This one is a kernel address leak in AIO subsystem - aio_workq_entry pointer gets left in kqueue metadata and can be read back from userspace More details: https://github.com/vschko/CaseStudies/tree/main/CVE-2026-84530 https://t.co/KQ4uVdQtBl
Post summary
The tweet reports that CVE‑2026‑84530 is a kernel address leak in the AIO subsystem, fixed in iOS 27 security release, with technical details but no PoC, exploit tool, or evidence of active exploitation.
42601627814.2K
453 followersView on X
!Manan@0xManan46d
PoC
iOS 27 just patched a clean kernel address leak. CVE-2026-84530 : the AIO subsystem leaves an aio_workq_entry pointer sitting in kqueue metadata. userspace can read it right back. no corruption needed, just a leftover kernel pointer handed to you on a platter. useful primitive for anyone building bigger chains. fixed in the latest iOS 27 security release. Full write-up by @destr4ctt : https://github.com/vschko/CaseStudies/tree/main/CVE-2026-84530 #iOS #ExploitDev #CVE
Post summary
The post discloses CVE-2026-84530, a kernel address leak in iOS 27's AIO subsystem, and links to a GitHub write-up providing a user-space read primitive useful for exploitation chains. It notes the issue is fixed in the latest iOS 27 security release but focuses primarily on the technical details and PoC availability rather than functional exploit tools or active attacks.
28076348.0K
2.3K followersView on X
Mr.Niko@_MrNiko46d
PoC
🚨 CVE-2026-84530 iOS kernel pointer leak AIO kqueue hands you an aio_workq_entry address. aio_register_kevent puts entryp in http://kev.data. kevent_register copies it into kn_sdata. filt_aioattach stores it in kn_hook and never clears kn_sdata. EXTINFO zeroes kqext_kev.data. kqext_sdata still prints the kernel address. fixed on iOS 27. writeup + PoC: https://github.com/vschko/CaseStudies/tree/main/CVE-2026-84530 credit: vschko #iOS #ExploitDev #InfoSec
Post summary
The tweet discloses a kernel pointer leak (CVE‑2026‑84530) with technical explanation, links to a PoC write‑up, and notes the issue is fixed in iOS 27, without mentioning exploit tools or active exploitation.
37056395.6K
1.6K followersView on X
habib@hbeeb200145d
Disclosure
النطاق الشامل والدقيق لجميع الثغرات المكتشفة والمطروحة حالياً بتاريخ اليوم 23/09/2026 مع اكتاشف تغرة جديدك ثغرة تسريب عناوين النواة النظيفة (⁠CVE-2026-84530⁠): يغطي إصدارات نظام التشغيل من iOS 26.0 وحتى iOS 26.6، وذلك على النحو التالي:
Post summary
The text discloses a newly discovered kernel address leak vulnerability (CVE-2026-84530) affecting iOS versions 26.0 through 26.6, but provides no information about proof‑of‑concept, exploits, active exploitation, or patches.
60010327
197 followersView on X
habib@hbeeb200145d
Disclosure
- ثغرة تسريب عناوين النواة النظيفة (⁠CVE-2026-84530⁠): المفهوم: ثغرة قراءة مباشرة في البيانات الوصفية لـ AIO تسمح بنقل عناوين ذاكرة النواة بوضوح إلى مساحة المستخدم بدون أحداث إتلاف للذاكرة، مما يكسر حماية KASLR التشفيرية بسهولة.
Post summary
The text announces CVE-2026-84530, describing it as a direct read vulnerability in AIO metadata that leaks kernel addresses and breaks KASLR. It provides technical details but no PoC, exploit, or remediation information.
1000085
197 followersView on X
habib@hbeeb200145d
Disclosure
*-بالنسبة للأجهزة الأحدث من معالج A14 فما فوق (مثل iPhone 12, 13, 14, 15, 16) تستفيد من ثغرات النواة الثلاث(⁠CVE-2026-84530⁠, ⁠CVE-2026-65343⁠, ⁠CVE-2026-64788⁠) وتفتقد لثغرة الإقلاع العتادية ⁠usbliter8⁠؛ النسبة المكتملة الأجهزة هو 55%، والنسبة المتبقية لها هي 45%
Post summary
The text discloses which iPhone models (A14+ chips) are affected by three specific kernel CVEs and notes the lack of a hardware boot vulnerability, providing device coverage percentages without mentioning patches, exploits, or active attacks.
0000090
197 followersView on X

CPE platform detail6 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

6 of 6 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	apple	ipados	-	-	-
OS	apple	iphone_os	-	-	-
OS	apple	macos	-	-	-
OS	apple	tvos	-	-	-
OS	apple	visionos	-	-	-
OS	apple	watchos	-	-	-

Explore more

Back to dashboard apple CVEs ipados vulnerabilities

What researchers are saying

CVE-2026-84530

!Manan[verified]@0xMananPoC

The post discloses CVE-2026-84530, a kernel address leak in iOS 27's AIO subsystem, and links to a GitHub write-up providing a user-space read primitive useful for exploitation chains. It notes the issue is fixed in the latest iOS 27 security release but focuses primarily on the technical details and PoC availability rather than functional exploit tools or active attacks.

Mr.Niko[verified]@_MrNikoPoC

The tweet discloses a kernel pointer leak (CVE‑2026‑84530) with technical explanation, links to a PoC write‑up, and notes the issue is fixed in iOS 27, without mentioning exploit tools or active exploitation.

Vladislav Shevchenko@destr4cttPatch

The tweet reports that CVE‑2026‑84530 is a kernel address leak in the AIO subsystem, fixed in iOS 27 security release, with technical details but no PoC, exploit tool, or evidence of active exploitation.

habib@hbeeb2001Disclosure

The text discloses a newly discovered kernel address leak vulnerability (CVE-2026-84530) affecting iOS versions 26.0 through 26.6, but provides no information about proof‑of‑concept, exploits, active exploitation, or patches.

habib@hbeeb2001Disclosure

The text announces CVE-2026-84530, describing it as a direct read vulnerability in AIO metadata that leaks kernel addresses and breaks KASLR. It provides technical details but no PoC, exploit, or remediation information.

habib@hbeeb2001Disclosure

The text discloses which iPhone models (A14+ chips) are affected by three specific kernel CVEs and notes the lack of a hardware boot vulnerability, providing device coverage percentages without mentioning patches, exploits, or active attacks.