What is the CVSS score of CVE-2026-84611?

CVE-2026-84611 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Tvos are affected by CVE-2026-84611?

Apple has released fixes for a memory-corruption flaw in the 3D model parsing frameworks used across iOS/iPadOS, macOS, tvOS, visionOS, and watchOS, which could allow code execution on a device if a…. A patch is available.

How to fix or mitigate CVE-2026-84611?

Within 24 hours, confirm which Apple devices and OS versions in your fleet fall below the fixed releases - iOS/iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7, and the current tvOS 27, visionOS 27, and watchOS 27 builds - and begin staged deployment to those assets, prioritizing Macs used by engineering, design, and other roles that routinely open third-party 3D model files. Within 7 days, enforce update compliance through your MDM/UEM platform, block or quarantine untrusted 3D model attachments at the email and web gateway where feasible, and remind users not to open model files from unknown sources. Within 30 days, verify full fleet compliance with reporting from MDM, document any devices that cannot be updated with a risk acceptance or compensating control, and add Apple OS version currency to your standing vulnerability management metrics so future framework flaws in media and file parsers are caught quickly.

Tvos CVE-2026-84611

EUVD-2026-78107 HIGH

Out-of-bounds Write (CWE-787)

2026-09-14 apple

GHSA-9x72-5f4j-fqf4

Buffer Overflow Memory Corruption Apple Tvos Visionos Watchos Ios And Ipados

7.3

CVSS 3.1 · Vendor: apple

Severity by source

Vendor (apple) PRIMARY

7.3 HIGH

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Primary rating from Vendor (apple) · only source for this CVE.

CVSS VectorVendor: apple

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Sep 15, 2026 - 17:36 vuln.today

CVSS changed

Sep 15, 2026 - 15:22 NVD

7.3 (HIGH)

Patch available

Sep 14, 2026 - 22:19 EUVD

CVE Published

Sep 14, 2026 - 20:51 cve.org

UNKNOWN (no severity yet)

CVE Published

Sep 14, 2026 - 20:51 cve.org

HIGH 7.3

DescriptionCVE.org

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption.

AnalysisAI

An out-of-bounds write (CWE-787) in the Apple frameworks that parse 3D model files lets a maliciously crafted model corrupt memory when it is opened on an affected device, potentially giving the attacker code execution in the context of the processing application. The flaw affects iOS/iPadOS before 26.7 and 27, macOS Sequoia before 15.8, macOS Tahoe before 26.7, macOS Golden Gate 27, tvOS before 27, visionOS before 27 and watchOS before 27, and Apple has shipped fixes for all of them. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Recommended ActionAI

Within 24 hours, confirm which Apple devices and OS versions in your fleet fall below the fixed releases - iOS/iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7, and the current tvOS 27, visionOS 27, and watchOS 27 builds - and begin staged deployment to those assets, prioritizing Macs used by engineering, design, and other roles that routinely open third-party 3D model files. …

Threat intelligence, references, and detailed analysis are available after sign-in.