Apple Rolls Out Massive Security Update Fixing 273 Vulnerabilities Across Its Devices
Apple's coordinated rollout patches 273 unique vulnerabilities across iOS 27, macOS Golden Gate 27, watchOS and Safari, including remote code execution flaws.
Apple shipped one of its largest coordinated security updates on September 14, 2026, fixing 273 unique CVEs across iOS 27, iPadOS 27, macOS Golden Gate 27, watchOS 27, tvOS 27, visionOS 27, Safari 27 and Xcode 27. Highlights include CVE-2026-65414, a Bluetooth out-of-bounds write enabling remote code execution, and CVE-2026-84607, an AVEVideoEncoder race condition granting kernel privileges to sandboxed apps. macOS Golden Gate 27 covers the broadest set with 210 CVEs, and Apple states none of the flaws were exploited in the wild.
- 273 unique CVEs fixed across ten advisories for all Apple platforms
- CVE-2026-65414 Bluetooth flaw allows remote arbitrary code execution
- CVE-2026-84607 race condition grants kernel privileges from sandboxed apps
- CVE-2026-65400 Screen Sharing Server flaw bypasses authentication
- No in-the-wild exploitation stated; enterprises should patch entire fleets
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-43692+1 related CVE | Input Validation RCE Flaw in Apple macOS (Sequoia, Tahoe, Golden Gate) | 8.8 group max | — | ||
CVE-2026-65414+3 related CVEs | Out-of-Bounds Write in Apple iOS, iPadOS, macOS Enables Remote Code Execution | 9.8 group max | — | ||
CVE-2026-64753+1 related CVE | Permissions Flaw in Apple Safari and iOS/macOS Lets Web Content Leak User Data | 6.5 group max | — | ||
| CVE-2026-65393 | macOS Permission Validation Flaw Lets Apps Access User-Sensitive Data | 5.5 | — | ||
| CVE-2026-65400 | Authentication Bypass in Apple macOS Screen Sharing | 9.8 | 2% | KEV | KEV |
From the original article
3 min read at cybersecuritynews.com
Apple has released one of its largest coordinated security rollouts, addressing 273 distinct critical vulnerabilities across iPhone, iPad, Mac, Apple Watch, Apple TV, Vision Pro, Safari, and Xcode. The patches arrived on September 14, 2026, through iOS 27, iPadOS 27, macOS Golden Gate 27, watchOS 27, tvOS 27, visionOS 27, Safari 27, and Xcode 27, […]
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.