---
id: CVE-2026-84551
title: A logic issue was addressed with improved validation
summary: >-
  A logic issue was addressed with improved validation. This issue is fixed in
  iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app
  may be able to bypass network restrictions.
severity: medium
cvss: 4.4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N'
cwe:
  - CWE-862
vendor: apple
product: ipados
affected:
  - ipados < 27.0
  - iphone_os < 27.0
  - macos < 27.0
  - visionos < 27.0
  - watchos < 27.0
patched:
  - ipados 27.0
  - iphone_os 27.0
  - macos 27.0
  - visionos 27.0
  - watchos 27.0
published: '2026-09-14'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T17:16:49.490'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-84551'
references:
  - url: 'https://support.apple.com/en-us/149034'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/149035'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/149037'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/149038'
    label: product-security@apple.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-17T16:59:27.399871Z'
epss: 0.0014
epssPercentile: 0.02766
ingestedAt: '2026-09-14T21:15:17.519Z'
---

## Overview

A logic issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to bypass network restrictions.

## Affected

- `ipados < 27.0`
- `iphone_os < 27.0`
- `macos < 27.0`
- `visionos < 27.0`
- `watchos < 27.0`

## Remediation

Upgrade past the affected range:

- `ipados 27.0`
- `iphone_os 27.0`
- `macos 27.0`
- `visionos 27.0`
- `watchos 27.0`