The Apple Security Update Review for September 2026
Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs. For the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn’t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. How
Read at Zero Day Initiative blog
- Vendor
- Apple
- Product
- iOS / iPadOS, macOS, watchOS / tvOS / visionOS
- Exploitation
- observed in the wild
- Exposure class
- Mobile OS, Operating system
Why it ranks 52 (High)
- Exploitation observed in the wild
- Product class: mobile OS, operating system
- Widely deployed vendor product (Apple)
- Covered by 5 independent sources
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Zero Day Initiative blog (thezdi.com)
- CVE-2026-65400 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-65414 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-65346 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-84607 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-43790 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.