What is the CVSS score of EUVD-2026-78006?

EUVD-2026-78006 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Is there a patch available for EUVD-2026-78006?

Yes, a patch is available for EUVD-2026-78006. Update the affected software to the latest version immediately.

Apple iOS EUVD-2026-78006

| CVE-2026-84602 MEDIUM

Access of Resource Using Incompatible Type (Type Confusion) (CWE-843)

2026-09-14 apple

GHSA-247g-c6c9-8q4v

Memory Corruption Apple macOS Tvos Visionos Watchos Ios And Ipados

5.5

CVSS 3.1 · Vendor: apple

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Install or run malicious app locally
Exploit

Invoke vulnerable OS API with crafted input
Execution

Trigger type confusion (mismatched object type)
Impact

Cause unexpected system termination (DoS)

Vulnerability Assessment

Weakness	CWE CWE-843 ASVS 5.0 V15 - Secure Coding and Architecture Type safety enforcement MITRE ATT&CK 1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Exploitation Conditions	Requires a locally installed and executing app on an affected Apple device (PR:L, AV:L) - the attacker must already have a malicious or compromised application running on the target, so this is not remotely exploitable and needs no user interaction beyond that app running (UI:N). Exploitation is limited to unaffected/unpatched versions: iOS/iPadOS before 26.7 (and the 27 line before 27), macOS before Sequoia 15.8, Tahoe 26.7, or Golden Gate 27, and tvOS/visionOS/watchOS before 27. The maximum achievable outcome is unexpected system termination (a crash/DoS); there is no path to code execution, privilege gain, or data access described.
Impact	This is a genuinely low-priority issue despite its MEDIUM 5.5 CVSS rating. All signals align on limited real-world risk: the CVSS vector is AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - a local (not network) vector requiring an already-installed, running app with local privileges, and the ONLY impact is availability (A:H, C:N/I:N) manifesting as unexpected system termination, i.e. a denial-of-service crash with no code execution, data theft, or integrity loss. EPSS confirms this at 0.17% (7th percentile), among the lowest exploitation-likelihood tiers. It is NOT in CISA KEV (no active exploitation), and no public POC has been identified. SSVC framing: exploitation=none, automatable=no (requires a malicious/compromised app to already be present on-device), technical impact=partial (crash only). No conflicting signals - the CVSS vector, EPSS, and description agree. The one caveat is a tag mismatch: the input labels this 'Information Disclosure,' which contradicts the vector (C:N means no confidentiality impact); this is a pure availability/DoS issue, not disclosure. Realistic priority is routine patch-cycle, not emergency remediation.
Exploit ScenarioDerived	A user installs a malicious or compromised app from a third-party source (or an attacker abuses a legitimate app already running on the device). The app triggers the type-confusion flaw in the affected OS component, forcing the system to hit an inconsistent object type and terminate unexpectedly, degrading device availability. No public exploit code exists and no active exploitation is reported; impact is limited to a crash with no data compromise.

This Month Plan within 30 days. Why: MEDIUM severity (CVSS 4.0-6.9).

Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Sep 17, 2026

A type confusion flaw (CWE-843) in multiple Apple operating systems lets an already-installed, locally executing app trigger a type-handling error that ends in unexpected system termination, giving a crash-based denial of service but no path to code execution, privilege gain, or data access. Affected are iOS/iPadOS before 26.7 (and the 27 line before 27), macOS before Sequoia 15.8, Tahoe 26.7 or Golden Gate 27, and tvOS, visionOS and watchOS before 27; Apple has shipped fixed versions in each of those releases, and exploitation requires an authenticated local app context (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). No public exploit code has been identified at time of analysis and EPSS is only 0.17% (7th percentile), so despite the MEDIUM 5.5 rating this is a genuinely low-priority issue with limited impact beyond a system crash.

RemediationAI

Vendor-released patches are available: update to iOS 26.7 / iPadOS 26.7 or the 27 release line, macOS Sequoia 15.8, macOS Tahoe 26.7 or macOS Golden Gate 27, and tvOS 27, visionOS 27 or watchOS 27 as applicable, following the per-platform guidance in Apple advisories https://support.apple.com/en-us/149034, /149035, /149036, /149037, /149038, /149041, /149042 and /149043. Because exploitation requires an attacker-controlled app already running locally on the device (AV:L/PR:L), enterprises can reduce exposure while staging updates by restricting app installation to vetted, signed/notarized or App Store-distributed software, enforcing MDM-managed allowlists, and removing untrusted or sideloaded applications - with the trade-off of reduced user flexibility and potential business friction. Restricting untrusted local execution is the only meaningful compensating control here; there is no realistic network-side or configuration toggle that blocks the flaw itself, and network perimeter defenses are irrelevant given the local attack vector. Prompt patching remains the primary fix, though the low severity (availability-only impact, EPSS 0.17%, no public exploit identified at time of analysis) justifies treating the update as routine rather than emergency remediation.

Affected VersionsENISA

macOS 0 <15.8

watchOS 0 <27

macOS 0 <26.7

visionOS 0 <27

iOS and iPadOS 0 <27

macOS 0 <27

iOS and iPadOS 0 <26.7

tvOS 0 <27

Affected Packages

euvd ios_and_ipados fix: 26.7, 27

euvd macos fix: 15.8, 26.7, 27

euvd tvos fix: 27

euvd visionos fix: 27

euvd watchos fix: 27

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 5 packages in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

The root cause is CWE-843 (Access of Resource Using Incompatible Type, i.e. type confusion), a memory-corruption class in which an object of one type is treated as another - typically because a validation or bounds check fails to confirm the actual runtime type before a cast or dereference. In this instance Apple addressed the flaw 'with improved checks,' meaning the fix tightens type validation in the affected kernel/system component rather than adding a new mitigation layer. The assessed vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H describes a low-complexity local attack that requires the attacker to already have an app running with normal user privileges (PR:L) and no further user interaction (UI:N); the only demonstrated consequence is high availability impact (system termination), with confidentiality and integrity unaffected (C:N/I:N) and no scope change (S:U). CPE data confirms the affected platforms are Apple iOS and iPadOS, macOS, tvOS, visionOS and watchOS, consistent with a shared codebase component shipped across Apple's product line. Although the input tags include 'Information Disclosure' and 'Memory Corruption,' the assessed impact and vector do not support any data-exposure outcome - exploitation terminates in a crash, not a leak or memory corruption that yields code execution.

Know when macOS gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (apple) PRIMARY 5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

vuln.today AI 5.5 MEDIUM

Local malicious app needed so AV:L/PR:L; no user interaction and reliable trigger so UI:N/AC:L; impact is only a system crash so A:H with C:N/I:N.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (apple).

CVSS VectorVendor: apple

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVSS changed

Sep 17, 2026 - 16:22 NVD

5.5 (MEDIUM)

Patch available

Sep 14, 2026 - 22:19 EUVD

CVE Published

Sep 14, 2026 - 20:48 cve.org

UNKNOWN (no severity yet)

CVE Published

Sep 14, 2026 - 20:48 cve.org

MEDIUM 5.5

DescriptionCVE.org

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.

Threat Intelligence Overview

EPSS Score

0.2%

Top 93% exploitable

Prevalence

Ubiquitous

Apple consumer OS family across iPhone, iPad, Mac, Watch, TV, Vision

Data Quality

4 sources

Confidence: Medium

EUVD 🇯🇵JVN

NVD

CVE.org

EPSS

VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity MEDIUM

CISA KEV No

Public POC No

EPSS 0.2%

Patch available Yes

Active threat No

Deciding rule

MEDIUM severity (CVSS 4.0-6.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Scheduled

Exploitation· derived

None

System Exposure· derived

Small

Automatable· derived

Human Impact· derived

High

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +28

PoC: 0

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Memory Corruption HIGH

Memory corruption occurs when a program writes data beyond the boundaries of allocated memory regions or accesses memory in unintended ways, violating the integrity of the process's address space.