CVE-2026-84535General(apple / macos)

LOWCVSS 8.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch apple macos systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • macos

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-14); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
Products
macos

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-14: 1Mentions · 2026-09-18: 1Patch / Workaround · 2026-09-18: 1Technical Details · 2026-09-18: 109-1409-18
Signal classification2 categories
General
150.0%
Patch
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-09-141
General1
2026-09-181
Patch1
Full discourse2 posts
  • SwayZGl1tZyyy@SwayZGl1tZyyy
    General

    macOS Golden Gate (27.0): CVE-2026-84567 CVE-2026-84535 https://t.co/NEAoIbPw0M

    Post summary

    The message lists two CVEs with a shortened link but offers no details about PoC, exploits, patches, or active exploitation.

    0103442.9K
    45 followersView on X
  • Ryx@PadhiyarRushi
    Patch

    Sequoia 15.8 fixed multiple sandbox escapes and root paths: • CVE-2026-65381 – entitlement validation → sandbox breakout • CVE-2026-84535 – Automator sandbox escape • CVE-2026-65362 / 84505 / 43786 / 86917 – various “app may gain root” issues Local privilege escalation surface is still very much alive on macOS. https://support.apple.com/en-us/149043 #Cybersecurity #AI #AISecurity #MCP #Claude #GPT #Infosec #Trending #macOS #PrivilegeEscalation

    Post summary

    The post announces that macOS Sequoia 15.8 patches several local privilege escalation vulnerabilities, providing a link to the vendor advisory and brief technical descriptions of each CVE.

    01064635
    954 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSapplemacos---

Explore more