September 21, 2026

CVE Watchtower

← Back to CVE List

CVE-2026-84600NVD

Vulnerability Summary

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A malicious shortcut may be able to send messages without user confirmation.
Severity Level
UNKNOWN
Published Date
Sep 14, 2026
Last Modified
Sep 17, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.22%Probability
Root Weakness (CWE)
N/A

Affected & Patched Versions

Affected Versions
  • Apple iOS and iPadOS < 27
  • Apple macOS < 27
  • Apple tvOS < 27
  • Apple visionOS < 27
  • Apple watchOS < 27
Patched Versions
  • Apple iOS and iPadOS 27
  • Apple macOS 27
  • Apple tvOS 27
  • Apple visionOS 27
  • Apple watchOS 27
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.

External References