CVE-2026-84531
published 2026-09-14CVE-2026-84531: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. Processing…
PriorityP424medium6.2CVSS 3.1
AVLACLPRNUINSUCNINAH
EPSS
0.15%
3.7th percentile
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. Processing maliciously crafted NTLM input may lead to unexpected app termination.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_and_ipados | < 27 | 27 |
| apple | ipados | < 27.0 | 27.0 |
| apple | iphone_os | < 27.0 | 27.0 |
| apple | macos | < 27 | 27 |
| apple | macos | < 27.0 | 27.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apple iOS/iPadOS/macOS up to 26 NTLM out-of-bounds write
vuldb·2026-09-20·CVSS 6.2
CVE-2026-84531 [MEDIUM] Apple iOS/iPadOS/macOS up to 26 NTLM out-of-bounds write
A vulnerability was found in Apple iOS, iPadOS and macOS up to 26. It has been rated as very critical. Affected by this issue is some unknown functionality of the component NTLM Handler. This manipulation causes out-of-bounds write.
This vulnerability is handled as CVE-2026-84531. The attack can be initiated remotely. There is not any exploit available.
Upgrading the affected component is advised.
GHSA
An out-of-bounds write issue was addressed with improved bounds checking.
ghsa_unreviewed·2026-09-14
CVE-2026-84531 An out-of-bounds write issue was addressed with improved bounds checking.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. Processing maliciously crafted NTLM input may lead to unexpected app termination.
No detection rules found.
No public exploits indexed.
2026-09-14
Published