macOS 27.0.1 is Out--Build 26A434, 3.3GB of Unnamed Bug Fixes and One Platform SSO Fix, While Tahoe 26.7.1 and Sequoia 15.8.1 Patch an Exploited CoreGraphics Bug

Apple released macOS 27.0.1 on September 28, the first update to macOS 27 Golden Gate, as build 26A434 and a download of about 3.3GB through Software Update in System Settings. Apple's update notes say all of it in one line: "This update provides bug fixes for your Mac." The same day Apple shipped macOS Tahoe 26.7.1 and macOS Sequoia 15.8.1 for the Macs still on those releases, and those two carry the fix that matters: a CoreGraphics bug Apple says may already have been exploited.

Apple names one fix, and it is for managed Macs

The consumer notes name nothing, but Apple's enterprise notes for Golden Gate list one change for 27.0.1: Apple "resolved an issue where Platform SSO did not display username and password fields at the Lock Screen after waking from sleep." If your Mac signs in through an identity provider at work, that is your fix. The teardown at Eclectic Light puts the download at about 3.3GB, confirms the build as 26A434, and finds the firmware unchanged; Safari moves to 27.0.1, Passwords to 3.0.1, and Mail, Messages and Shortcuts get small build increments. By our count the update arrived 14 days after Golden Gate itself, which AppleInsider dates to September 14, alongside iOS 27.0.1, iPadOS 27.0.1, watchOS 27.0.1 and visionOS 27.0.1. Our September 15 report on macOS 27 Golden Gate has what the big release changed, and our September 22 Tip on Golden Gate's first-week problems has the workarounds that were current before this update; Apple has not said which of those problems 27.0.1 addresses.

There are no CVEs for 27.0.1, and a zero-day for everyone else

On Apple's security releases page, the 27.0.1 entry reads "This update has no published CVE entries," and as of October 3 the page lists 27.0.1 as the current macOS. The entries beside it are different. Apple's security notes for macOS Tahoe 26.7.1 describe one CoreGraphics fix, CVE-2026-86950, credited to Meta Product Security: "Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27." The description is an out-of-bounds write fixed with improved bounds checking, and Sequoia 15.8.1 carries the same fix. TidBITS notes that none of the 27.0.1 releases has security notes, that the visionOS 27.0.1 notes nonetheless say "security fixes," and wonders whether 27.0.1 quietly fixes the same bug; its advice is that unless you are a targeted individual there is no need to rush, but to install within a few days. Apple's wording, "on versions of iOS before iOS 27," is the only hint that the 27 generation was not affected, and Apple has not said so for the Mac. 9to5Mac adds that 26.7.1 and 15.8.1 went through two release candidates before shipping, and recalls that Apple said in June it was accelerating security releases because AI tools can speed up the building of exploits once a fix is public. Our September 19 report on Tahoe 26.7 and Sequoia 15.8 covered the 150-plus fixes each of those releases shipped with; this is their first follow-up.

What to do now

If you are on Golden Gate, install 27.0.1 from System Settings, Software Update, when you have 3.3GB of download and a restart to spare; MacRumors reported it as fixing unspecified bugs and nothing more, so there is no feature to wait for and no known reason to hold back. If you are on an Intel Mac, or on an Apple silicon Mac you have kept on Tahoe or Sequoia, 26.7.1 or 15.8.1 is the update that closes an exploited hole, and that one should not wait a week. The builds, per AppleInsider, are 25G241 for Tahoe 26.7.1 and 24H32 for Sequoia 15.8.1.

We have been here before. On October 3, 1997, we pointed to PowerPage's 1997 developer release notes for the Mac OS 8.1 beta, an updater to Mac OS 8 due in early December as a download and a CD; when it shipped, our February 1998 hands-on with Mac OS 8.1 recorded a 22MB download that took 70 minutes over ISDN and came with three read-me files explaining what had changed. The first updater to macOS 27 is 3.3GB and comes with one sentence. We'll post a hands-on report after we install it.