Apple Releases Critical Security Updates for macOS Golden Gate and Others

www.macwelt.de

Apple Releases Critical Security Updates for macOS Golden Gate and Others

First seen 29 Sep 2026, 19:12 UTC • •70.5

Article Content

1 / 3

Browse articles

ThreatCluster •September 30, 2026 at 18:35 UTC

•CVE-2026-86950 allows arbitrary code execution through CoreGraphics.
•Updates released for macOS Golden Gate, Tahoe, and Sequoia on September 29, 2026.
•No CVEs reported for macOS Golden Gate 27.0.1, but critical vulnerabilities exist in Tahoe and Sequoia.

On September 29, 2026, Apple released updates for macOS Golden Gate 27.0.1, Tahoe 26.7.1, and Sequoia 15.8.1. The updates for Tahoe and Sequoia address a critical vulnerability (CVE-2026-86950) in CoreGraphics that allows for arbitrary code execution via manipulated files. This vulnerability was reportedly exploited in sophisticated attacks targeting specific individuals using iOS versions prior to iOS 27. Apple has not disclosed any CVE entries for the Golden Gate update itself. Users are advised to install these updates to mitigate potential risks. The updates follow a three-month beta testing period for the new macOS versions, which were released just two weeks prior. Apple also addressed bugs in iOS 27.0.1 and watchOS 27.0.1, which included issues causing device crashes and screen freezes.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 44d ago How this analysis works

Timeline

2026-09-28

CVE-2026-86950 published

Apple disclosed a critical vulnerability in CoreGraphics allowing arbitrary code execution.

2026-09-29

Apple releases macOS updates

Apple released macOS Golden Gate 27.0.1, Tahoe 26.7.1, and Sequoia 15.8.1 addressing critical vulnerabilities.

More articles in this cluster (2)

Threat Graph

6 entities, 5 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Vulnerability (1)

CVE-2026-86950

Affected Platform (5)

IOS
IPadOS
MacOS
VisionOS
WatchOS

Relationships

CVE-2026-86950 targets IOS
CVE-2026-86950 targets IPadOS
CVE-2026-86950 targets MacOS
CVE-2026-86950 targets VisionOS
CVE-2026-86950 related to WatchOS

Following this threat?

Track CVE-2026-86950 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

PHP2Shell Vulnerabilities Threaten 70% of Websites with Remote Code Execution The PHP2Shell vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, pose a critical threat to approximately 70% of websites globally, allowing unauthenticated remote code execution. Discovered by the security firm Calif using AI, these flaws were leaked before a scheduled patch on October 21, 2026…

CISA Adds Critical Adobe and Google Vulnerabilities to KEV Catalog On October 27, 2026, CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-48356 in Adobe Commerce and Magento, and CVE-2026-111497 in Google Brotli. CVE-2026-48356 allows unrestricted file uploads, potentially enabling attackers to execute arbitrary code, while CVE-2026-111497…