Skip to content
NewA calmer, faster ZeroHour
StoryAdvisorymedium

Apple advisories describe AirPlay Bluetooth rate-limit bypass

1 source · 5 articlesFirst reported Updated ()1
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Apple’s November 9 advisories say a nearby Bluetooth attacker may bypass an AirPlay rate limit on several macOS and watchOS releases; excerpts name no CVE.

Apple Product Security issued advisories APPLE-SA-11-09-2026-4 through -8, later republished in truncated form on Full Disclosure. The visible notes cover AirPlay on macOS Golden Gate 27.2.1, macOS Tahoe 26.7.3, macOS Sequoia 15.8.3, watchOS 27.2.1, and watchOS 26.6.1. They say an attacker in Bluetooth range may bypass a rate limit or rate control; the Tahoe note specifically mentions pairing. No CVE is named, and the excerpts do not say the issue is exploited. Several copies cut off mid-sentence, and the watchOS 26.6.1 device list ends unfinished.

Key facts
  • Advisory IDs are APPLE-SA-11-09-2026-4 through APPLE-SA-11-09-2026-8.
  • Named releases are Golden Gate 27.2.1, Tahoe 26.7.3, Sequoia 15.8.3, and two watchOS builds.
  • watchOS 27.2.1 covers Series 9 and later; 26.6.1 names Series 6–8 and SE (2nd generation).
  • Apple links some updates to support pages 149718, 100100, and 149719.
  • The mailing-list excerpts are incomplete and do not name a CVE or exploitation.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Nov 9, 2026Apple posted the five AirPlay security advisories. · Full Disclosure
  2. Nov 12, 2026Full Disclosure republished the truncated advisory excerpts. · Full Disclosure

What each outlet adds

beyond the shared facts
  • Full DisclosureLists five advisory IDs, affected releases, and truncated AirPlay wording.
Vendors
Apple
Products
macOS Golden GateAirPlaymacOS SequoiawatchOSApple WatchmacOS Tahoe
Organizations
Apple Product Security

Coverage

oldest first · one row per article · UTC
  1. · 1d ago Full DisclosureFirst report

    Apple ships macOS Golden Gate 27.2.1 security update

    The cut-off advisory says a Bluetooth-range attacker may bypass an AirPlay rate control.

  2. · 1d ago Full Disclosure

    macOS Tahoe 26.7.3 fixes AirPlay Bluetooth pairing rate-limit bypass

    Apple says a nearby Bluetooth attacker can bypass AirPlay's pairing rate limit on macOS Tahoe.

  3. · 1d ago Full Disclosure

    macOS Sequoia 15.8.3 fixes AirPlay Bluetooth rate-limit bypass

    Apple’s Sequoia advisory says a Bluetooth-range attacker may bypass an AirPlay rate limit; the sentence is incomplete.

  4. · 1d ago Full Disclosure

    watchOS 27.2.1 fixes AirPlay rate-limit bypass on newer watches

    The advisory covers Apple Watch Series 9 and later and describes a Bluetooth-range AirPlay rate-limit bypass.

  5. · 1d ago Full Disclosure

    Apple posts watchOS 26.6.1 security update for older watches

    The notice names an AirPlay fix for Watch Series 6, 7 and 8 and Watch SE (2nd generation); the impact line is cut off.