AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AppleCVE-2026-84568

Apple macOS: path traversal

Apple

CVE-2026-84568 · Published Sep 14, 2026 · updated Sep 15, 2026

High7.8
Fix: upgrade to 15.8 or later (3 fixed versions below)
Apple advisory

A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a network directory server may be able to execute arbitrary code with root privileges.

Affected versions

PackageAffectedFixed in
macOS
Product
< 15.815.8
< 26.726.7
< 2727
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-22

More Apple advisories

All Apple
Medium 5.5Sep 14Apple macOS: path traversalCVE-2026-86902fixed in 14.8.8 +1Medium 5.5Sep 14Apple iOS and iPadOS: out-of-bounds readCVE-2026-86903fixed in 27 +2High 7.5Sep 14A privacy issue was addressed with improved state managementCVE-2026-86904fixed in 26.7 +2Medium 5.5Sep 14Apple iOS and iPadOS: improper access controlCVE-2026-86905fixed in 27 +2Medium 4.4Sep 14Apple macOS: protection mechanism failureCVE-2026-86909fixed in 27Medium 5.5Sep 14Apple macOS: path traversalCVE-2026-86910fixed in 15.8 +2