About the security content of macOS Tahoe 26.7.2
This document describes the security content of macOS Tahoe 26.7.2.
About Apple security updates
For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.
Apple security documents reference vulnerabilities by CVE-ID when possible.
For more information about security, see the Apple Product Security page.
macOS Tahoe 26.7.2
Released October 26, 2026
Accelerate Framework
Available for: macOS Tahoe
Impact: Processing a maliciously crafted image may lead to unexpected app termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-86971: an anonymous researcher
Accounts
Available for: macOS Tahoe
Impact: A malicious application may be able to bypass Privacy preferences
Description: A logging issue was addressed with improved data redaction.
CVE-2026-113898: Bhaswanth Chigurupati
AirPort
Available for: macOS Tahoe
Impact: An app may be able to read sensitive location information
Description: An authorization issue was addressed with improved state management.
CVE-2026-112551: Nguyen Duc Anh of Noventiq, Sindre Sorhus
APFS
Available for: macOS Tahoe
Impact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-84496: 준우 이, Maher Azzouzi, Jonathan Bar Or (@yo_yo_yo_jbo), Marco Schmitt, Nathaniel Oh (@calysteon), Aswin Kumar Gokulakannan, Narendra Singh (@_3P1C), Thanatos Tian (HKPolyU) & wgg with Diffract, Jakob Pammer, an anonymous researcher, Bhuwan Bhetwal, Kwak kiyong (@Pwnkai23) , Song nuri
APFS
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or read kernel memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan Dautov, Peter Malone
APFS
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or write kernel memory
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112536: Ruslan Dautov, Thomas Guillem, Narendra Singh (@_3P1C), Kwak Kiyong (@Pwnkai23), Song Nuri, Thanatos Tian (HKPolyU) & wgg with Diffract
App Store
Available for: macOS Tahoe
Impact: An app may be able to bypass network restrictions
Description: This issue was addressed with improved checks.
CVE-2026-112467: Sindre Sorhus
App Store
Available for: macOS Tahoe
Impact: A remote attacker may be able to break out of the WebContent sandbox
Description: This issue was addressed with improved input validation.
CVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos
Apple Intelligence
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state management.
CVE-2026-86920: Johan Wahyudi
Apple Neural Engine
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-84595: tamdao
Apple Neural Engine
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112696: Jaeyeong Lee
AppleAVD
Available for: macOS Tahoe
Impact: Processing a maliciously crafted video file may lead to unexpected app termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112416: an anonymous researcher, Meta Red Team X - Nik Tsytsarkin, Narendra Singh (@_3P1C), Hcamael and 章鱼哥@aipy (aipyaipy.com), Dohyeon An @PILAB Technology, Inc
AppleAVD
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or corrupt process memory
Description: An out-of-bounds write was addressed with improved input validation.
CVE-2026-112415: Rahul Raj, Hcamael and 章鱼哥@aipy (aipyaipy.com)
AppleAVD
Available for: macOS Tahoe
Impact: A malicious app may be able to break out of its sandbox
Description: An information leakage was addressed with additional validation.
CVE-2026-112704: Josh Maine of Calif.io
AppleMobileFileIntegrity
Available for: macOS Tahoe
Impact: A malicious app may be able to read or write to protected files
Description: A permissions issue was addressed with additional restrictions.
CVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos
AppleRAID
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: A use after free issue was addressed with improved memory management.
CVE-2026-112531: Chanwit Muenprakoddee (ChemIndy)
Archive Utility
Available for: macOS Tahoe
Impact: An attacker with root privileges may be able to access protected user data
Description: A permissions issue was addressed with additional restrictions.
CVE-2026-86939: Lance Cain - Senior Security Researcher at SpecterOps Inc.
ArchiveService
Available for: macOS Tahoe
Impact: An app may bypass Gatekeeper checks
Description: A logic issue was addressed with improved state management.
CVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul Montgomery (@nullevent)
ArchiveService
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may bypass Gatekeeper checks
Description: A logic issue was addressed with improved checks.
CVE-2026-112568: an anonymous researcher
Audio
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to unexpected app termination
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112546: lunar815, Nathaniel Oh (@calysteon), Piotr Jerzy Duszynski, an anonymous researcher, Surej Sekhar, r3pwnx (@r3pwnx), Lily Cohl (@GenericCoding)
Audio
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with additional entitlement checks.
CVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud
AVEVideoEncoder
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io
AVEVideoEncoder
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved input validation.
CVE-2026-112689: Franco Belman at Blackwing Intelligence
AVEVideoEncoder
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112470: Hcamael and 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112468: Hcamael and 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112469: Hcamael and 章鱼哥@aipy (aipyaipy.com)
AVEVideoEncoder
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or read kernel memory
Description: An out-of-bounds read was addressed with improved input validation.
CVE-2026-112466: Hcamael and 章鱼哥@aipy (aipyaipy.com)
Bluetooth
Available for: macOS Tahoe
Impact: An attacker in physical proximity may be able to cause a denial-of-service
Description: A null pointer dereference was addressed with improved validation.
CVE-2026-112566: Chris Bailey - Short Circuit
BOM
Available for: macOS Tahoe
Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks
Description: A file quarantine bypass was addressed with additional checks.
CVE-2026-84610: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Murray Mike
BOM
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to heap corruption
Description: An out-of-bounds write issue was addressed with improved input validation.
CVE-2026-112670: Bhaswanth Chigurupati
BOM
Available for: macOS Tahoe
Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks
Description: The issue was addressed with improved checks.
CVE-2026-112672: 준우 이, Pasquale Scola
Calendar
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: A permissions issue was addressed with additional restrictions.
CVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re)
Carbon Core
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: A logging issue was addressed with improved data redaction.
CVE-2026-84528: zenith
Carbon Core
Available for: macOS Tahoe
Impact: An app may bypass Gatekeeper checks
Description: A file quarantine bypass was addressed with additional checks.
CVE-2026-86941: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs
CloudKit
Available for: macOS Tahoe
Impact: A malicious app may be able to gain root privileges
Description: A permissions issue was addressed with additional restrictions.
CVE-2026-86896: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs
ColorSync
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may disclose process memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112429: Mateusz Jurczyk of Google Project Zero
Compression
Available for: macOS Tahoe
Impact: An app may be able to disclose kernel memory
Description: A memory initialization issue was addressed with improved memory handling.
CVE-2026-113910: Tucker Willenborg
configd
Available for: macOS Tahoe
Impact: An app may be able to gain root privileges
Description: A parsing issue in the handling of directory paths was addressed with improved path validation.
CVE-2026-112545: Frederick Kaludis (Coiffeur0x90), Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs
Control Center
Available for: macOS Tahoe
Impact: A malicious application may be able to bypass Privacy preferences
Description: A permissions issue was addressed with additional restrictions.
CVE-2026-112462: DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat Srisutham, Yejun Kim, an anonymous researcher, Zwei Tasse Kaffee, Lakshay Sharma (MrW0r57)
copyfile
Available for: macOS Tahoe
Impact: An app may be able to modify protected parts of the file system
Description: This issue was addressed with improved handling of symlinks.
CVE-2026-86966: Jihwan Yoon
Core Image
Available for: macOS Tahoe
Impact: Processing a maliciously crafted image may lead to unexpected process termination
Description: A buffer overflow was addressed with improved bounds checking.
CVE-2026-112471: Meta Red Team X - Nik Tsytsarkin
CoreAudio
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or corrupt process memory
Description: A race condition was addressed with improved locking.
CVE-2026-112708: Nathaniel Oh (@calysteon)
CoreAudio
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory
Description: An out-of-bounds write was addressed with improved input validation.
CVE-2026-86969: Meta Red Team X - Nik Tsytsarkin
CoreAudio
Available for: macOS Tahoe
Impact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory
Description: An out-of-bounds access issue was addressed with improved bounds checking.
CVE-2026-113912: an anonymous researcher, 章鱼哥@aipy (aipyaipy.com), Roman Zabicki, Anna Groza (@pwnlambda) of Calif.io
CoreAudio
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or corrupt process memory
Description: A buffer overflow issue was addressed with improved memory handling.
CVE-2026-113907: Meta Red Team X - Nik Tsytsarkin
CoreAudio
Available for: macOS Tahoe
Impact: An attacker in radio range may be able to cause unexpected system termination
Description: A heap buffer overflow was addressed with improved bounds checking.
CVE-2026-112638: Altin Gashi, Përparim Mjeku, Altin Gashi
CoreAudio
Available for: macOS Tahoe
Impact: Processing a maliciously crafted audio file may lead to memory corruption
Description: A buffer overflow was addressed with improved size validation.
CVE-2026-86972: an anonymous researcher, Meta Product Security
CoreGraphics
Available for: macOS Tahoe
Impact: Processing a maliciously crafted PDF file may lead to memory corruption
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112611: f4&Zhiniang Peng with HUST, Aobo Wang (@M4x_1997), Xiang Chen, Jakob Pammer, Anna Groza (@pwnlambda) of Calif.io, Piotr Jerzy Duszynski, an anonymous researcher
CVE-2026-112610: Meta Red Team X - Nik Tsytsarkin
CoreMedia
Available for: macOS Tahoe
Impact: Processing a maliciously crafted video file may lead to unexpected app termination
Description: The issue was addressed with improved memory handling.
CVE-2026-86992: Niels Hofmans
CoreMedia
Available for: macOS Tahoe
Impact: Parsing a file may lead to an unexpected app termination or arbitrary code execution
Description: A memory corruption issue was addressed with improved memory handling.
CVE-2026-112688: 정우 하 (@0xfa11babe), Chris Bailey - Short Circuit
CoreMedia
Available for: macOS Tahoe
Impact: A malicious app may be able to access the camera without user permission
Description: An access issue was addressed with improved access restrictions.
CVE-2026-86990: Mustafa Calap (@ordinal0, dbg.re)
CoreServicesUIAgent
Available for: macOS Tahoe
Impact: A maliciously crafted disk image may bypass Gatekeeper checks
Description: A logic issue was addressed with improved validation.
CVE-2026-65368: an anonymous researcher
CoreSymbolication
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to unexpected app termination
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112604: Nathaniel Oh (@calysteon)
CoreText
Available for: macOS Tahoe
Impact: Processing a maliciously crafted font may result in the disclosure of process memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112656: Nurihan Kim (HanTul) working with TrendAI Zero Day Initiative
Crash Reporter
Available for: macOS Tahoe
Impact: An app may be able to gain root privileges
Description: A race condition was addressed with improved state handling.
CVE-2026-113900: Frederick Kaludis (Coiffeur0x90), YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab, Lakshay Sharma (MrW0r57)/WorstCase Labs., Ashish Kavishwar, Csaba Fitzl (@theevilbit) of Iru and Gergely Kalman (@gergely_kalman)
CUPS
Available for: macOS Tahoe
Impact: An app with App Sandbox restrictions may be able to escape the sandbox and execute code with root privileges
Description: A use after free issue was addressed with improved memory management.
CVE-2026-84545: Jurre van Bergen - Threatnotify, Mathis Mansière, 章鱼哥@aipy (aipyaipy.com）, Redon Gashi (Sentry)
CUPS
Available for: macOS Tahoe
Impact: A local attacker may be able to elevate their privileges
Description: A logic issue was addressed with improved checks.
CVE-2026-65327: Sanny Mitra
CVMS
Available for: macOS Tahoe
Impact: An app may be able to gain root privileges
Description: A logic issue was addressed with improved checks.
CVE-2026-112530: Alfredo Pesoli (@__rev) of Bynar.io, Claudio Bozzato and Francesco Benvenuto of Cisco Talos
DesktopServices
Available for: macOS Tahoe
Impact: An app may be able to bypass Gatekeeper checks
Description: This issue was addressed with improved checks.
CVE-2026-112444: Paul Montgomery (@nullevent)
DesktopServices
Available for: macOS Tahoe
Impact: An app may bypass Gatekeeper checks
Description: A logic issue was addressed with improved checks.
CVE-2026-112428: Koh M. Nakagawa (@tsunek0h) of FFRI Security, Inc., Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs
Directory Utility
Available for: macOS Tahoe
Impact: An app may be able to modify protected parts of the file system
Description: A path handling issue was addressed with improved validation.
CVE-2026-112483: Csaba Fitzl (@theevilbit) of Iru, Lyutoon
Disk Images
Available for: macOS Tahoe
Impact: An app may be able to cause a denial-of-service
Description: A buffer overflow was addressed with improved bounds checking.
CVE-2026-112502: Narendra Singh (@_3P1C)
DiskArbitration
Available for: macOS Tahoe
Impact: An app may be able to break out of its sandbox
Description: An access issue was addressed with additional sandbox restrictions.
CVE-2026-112570: Andrey Chernykh (BypassLabs.ai), Keisuke Hosoda
dyld
Available for: macOS Tahoe
Impact: An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code
Description: The issue was addressed with improved memory handling.
CVE-2026-86958: oxsignal
dyld
Available for: macOS Tahoe
Impact: An app may be able to bypass sandbox restrictions
Description: This issue was addressed with improved access restrictions.
CVE-2026-112534: an anonymous researcher
FileProvider
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: A race condition was addressed with additional validation.
CVE-2026-113896: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, R4mbb
FontParser
Available for: macOS Tahoe
Impact: Processing a maliciously crafted font may result in the disclosure of process memory
Description: An out-of-bounds read was addressed with improved input validation.
CVE-2026-86970: Hcamael and 章鱼哥@aipy (aipyaipy.com)
FontParser
Available for: macOS Tahoe
Impact: Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112683: Hcamael and 章鱼哥@aipy (aipyaipy.com)
FontParser
Available for: macOS Tahoe
Impact: Processing a maliciously crafted font may result in the disclosure of process memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112642: Meta Red Team X - Nik Tsytsarkin
GPU Drivers
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-84539: Ye Zhang (@VAR10CK) of Baidu Security
GPU Drivers
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or write kernel memory
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112593: f00l (@PPPF00L) and 3ndy1(@_3ndy1)
Grapher
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to arbitrary code execution
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-86929: Anand (anandsreekumar.com)
Heimdal
Available for: macOS Tahoe
Impact: A remote attacker may cause an unexpected process termination
Description: A double free issue was addressed with improved memory management.
CVE-2026-112410: Piotr Jerzy Duszynski
Heimdal
Available for: macOS Tahoe
Impact: An app may be able to cause a denial-of-service
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-86942: He Wei (ギカク)
Help Viewer
Available for: macOS Tahoe
Impact: An app may be able to access user-sensitive data
Description: This issue was addressed with improved handling of symlinks.
CVE-2026-112523: powerprove, Michael Benich, Niels Hofmans, Christian Niel Angel of Protectiv IT Security Inc. (protectiv.ph), Lyutoon, Seung Je Seong, R4mbb, Wojciech Regula of SecuRing (wojciechregula.blog)
HFS
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or read kernel memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112424: Peter Malone
HFS
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112475: Aswin Kumar Gokulakannan, Minseok Kim, Dave G., Thanatos Tian (HKPolyU) & wgg & xmr, Marco Schmitt
HFS
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to heap corruption
Description: An out-of-bounds write issue was addressed with improved input validation.
CVE-2026-112456: Jihwan Yoon, Yash Pandya, Parth Raval
iCloud
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: An access issue was addressed with additional sandbox restrictions.
CVE-2026-112647: Sattyam Yadav, onetwo, Christian Niel Angel of Protectiv IT Security Inc. (protectiv.ph), Robert Tran, Merrick Hare
ImageIO
Available for: macOS Tahoe
Impact: Processing a maliciously crafted image may lead to heap corruption
Description: A buffer overflow was addressed with improved bounds checking.
CVE-2026-84627: ธนกฤต ทัฬหะ, Rahul Raj, Piotr Jerzy Duszynski, PETOWORKS의 Bugeun Choi (@Bugeun), Mateusz Jurczyk of Google Project Zero, f0r of MurphySec
ImageIO
Available for: macOS Tahoe
Impact: Processing a maliciously crafted image may result in memory corruption
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-64750: Mateusz Jurczyk of Google Project Zero, Eddy Tsalolikhin, Johann Rehberger
ImageIO
Available for: macOS Tahoe
Impact: Processing a maliciously crafted image may corrupt process memory
Description: A buffer overflow issue was addressed with improved memory handling.
CVE-2026-112488: an anonymous researcher, Mateusz Jurczyk of Google Project Zero, Nik Tsytsarkin
ImageIO
Available for: macOS Tahoe
Impact: Processing a maliciously crafted image may result in disclosure of process memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112560: Wout van der Ploeg (woutvanderploeg.nl)
CVE-2026-112561: Meta Red Team X - Nik Tsytsarkin
CVE-2026-112627: Mateusz Jurczyk of Google Project Zero
ImageIO
Available for: macOS Tahoe
Impact: Processing a maliciously crafted image may result in disclosure of process memory
Description: A memory initialization issue was addressed with improved memory handling.
CVE-2026-112571: sh3rlock (김보겸)
ImageIO
Available for: macOS Tahoe
Impact: Processing a maliciously crafted image may lead to unexpected app termination
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-86954: Mateusz Jurczyk of Google Project Zero
CVE-2026-112634: Mateusz Jurczyk of Google Project Zero
CVE-2026-112629: Mateusz Jurczyk of Google Project Zero
ImageIO
Available for: macOS Tahoe
Impact: Processing a maliciously crafted image may lead to unexpected app termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112633: Mateusz Jurczyk of Google Project Zero
CVE-2026-112614: Mateusz Jurczyk of Google Project Zero, PETOWORKS의 Bugeun Choi (@Bugeun), Rahul Raj, Piotr Jerzy Duszynski
ImageIO
Available for: macOS Tahoe
Impact: Processing a maliciously crafted image may result in memory corruption
Description: An integer underflow was addressed with improved input validation.
CVE-2026-112625: Mateusz Jurczyk of Google Project Zero
ImageIO
Available for: macOS Tahoe
Impact: Processing a maliciously crafted image may result in disclosure of process memory
Description: An uninitialized memory issue was addressed with improved memory handling.
CVE-2026-112630: Mateusz Jurczyk of Google Project Zero
CVE-2026-112632: Mateusz Jurczyk of Google Project Zero
IOGPUFamily
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state management.
CVE-2026-112533: Andrey Chernykh, Sihyun Roh (Compsec, SNU)
IOHIDFamily
Available for: macOS Tahoe
Impact: An attacker may be able to cause unexpected system termination or read kernel memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112515: Charles Stevenson, Mathis Mansière, Seung Je Seong
IOKit
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or read kernel memory
Description: An out-of-bounds read issue was addressed by removing the vulnerable code.
CVE-2026-112478: Nord0x, Narendra Singh (@_3P1C), Marco Schmitt, an anonymous researcher
IOStorageFamily
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or read kernel memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112554: Bhuwan Bhetwal, Kwak Kiyong (@Pwnkai23), Song Nuri, Nicolas Seriot, Tommy DeVoss from Braze Security Team (@thedawgyg), Tucker Willenborg, Navapon Premkasem, Aswin Kumar Gokulakannan, Peter Malone, Richard Zana
IOSurface
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory
Description: A race condition was addressed with improved locking.
CVE-2026-112477: an anonymous researcher
Kernel
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected changes to copy-on-write memory
Description: A memory integrity issue was addressed with improved handling of copy-on-write pages.
CVE-2026-112576: Pedro Pinho
Kernel
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: A type confusion issue was addressed with improved memory handling.
CVE-2026-112606: Wang Yu
Kernel
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory
Description: The issue was addressed with improved memory handling.
CVE-2026-112532: Peter Malone
Kernel
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory
Description: A use after free issue was addressed with improved memory management.
CVE-2026-112517: Pasquale Scola, Cem Onat Karagun, Wout van der Ploeg (woutvanderploeg.nl), John Lussier, an anonymous researcher
Kernel
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: A use-after-free issue was addressed with improved memory management.
CVE-2026-112516: an anonymous researcher, greenbynox
Kernel
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: The issue was addressed with improved memory handling.
CVE-2026-112698: OpenAI, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
Kernel
Available for: macOS Tahoe
Impact: An attacker may be able to cause unexpected system termination or corrupt kernel memory
Description: A use-after-free issue was addressed with improved memory management.
CVE-2026-112514: Marc Newlin of SkySafe, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., greenbynox
Kernel
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or write kernel memory
Description: A use-after-free issue was addressed with improved memory management.
CVE-2026-84495: Wang Yu
Kernel
Available for: macOS Tahoe
Impact: An app may be able to execute arbitrary code with kernel privileges
Description: A use after free issue was addressed with improved memory management.
CVE-2026-86916: Wang Yu
Kernel
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory
Description: A use-after-free issue was addressed with improved memory management.
CVE-2026-65350: Xinru Chi of Pangu Lab, Tim Michaud (@TimGMichaud) of Aginor.ai, Nebula Security (@nebusecurity)
Kernel
Available for: macOS Tahoe
Impact: A malicious app may be able to break out of its sandbox
Description: A race condition was addressed with additional validation.
CVE-2026-112543: f0r of MurphySec
Kernel
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112476: Arnold Cartagena, Matt Suiche (@msuiche) of Tolmo
Kernel
Available for: macOS Tahoe
Impact: An unprivileged attacker may be able to execute arbitrary code as root
Description: A logic issue was addressed with improved state management.
CVE-2026-112438: Jakob Pammer
Kernel
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: A null pointer dereference was addressed with improved input validation.
CVE-2026-86964: Ryan Hileman via Xint Code (xint.io)
Kernel
Available for: macOS Tahoe
Impact: An app may be able to determine kernel memory layout
Description: An information disclosure issue was addressed with improved state management.
CVE-2026-112665: Will Estes
Kernel
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: A race condition was addressed with improved state handling.
CVE-2026-112501: Cem Onat Karagun
Kernel
Available for: macOS Tahoe
Impact: An app may be able to bypass Privacy preferences
Description: This issue was addressed with improved checks.
CVE-2026-112624: Jerry L. Knot
LaunchServices
Available for: macOS Tahoe
Impact: An app may bypass Gatekeeper checks
Description: A file quarantine bypass was addressed with additional checks.
CVE-2026-112494: Yiğit Can YILMAZ (@yilmazcanyigit)
libarchive
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to unexpected app termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112522: Eliya M., Viacheslav Radiukov, Tristan Madani (Talence Security), Robert Tran
libcryptex
Available for: macOS Tahoe
Impact: An malicious app may be able to create files in protected directories
Description: This issue was addressed with improved checks.
CVE-2026-86945: an anonymous researcher, Andrey Chernykh
libxpc
Available for: macOS Tahoe
Impact: An app may be able to break out of its sandbox
Description: This issue was addressed with improved permissions checking.
CVE-2026-112497: Claudio Bozzato and Francesco Benvenuto of Cisco Talos
Available for: macOS Tahoe
Impact: Processing a maliciously crafted message may lead to a denial-of-service
Description: A stack overflow was addressed with improved input validation.
CVE-2026-112414: Daniel Rodríguez, Nathaniel Oh (@calysteon)
Available for: macOS Tahoe
Impact: A remote attacker may be able to cause a denial-of-service
Description: A resource exhaustion issue was addressed with improved input validation.
CVE-2026-112671: Nathaniel Oh (@calysteon)
MediaAnalysis
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: A race condition was addressed with additional validation.
CVE-2026-113915: Abodi Dawoud, Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Ilya Andr (andrd3v) of Positive Technologies, Zhongquan Li (@Guluisacat)
Messages
Available for: macOS Tahoe
Impact: A remote attacker may be able to cause unexpected app termination
Description: An input validation issue was addressed with improved input validation.
CVE-2026-112682: Mahmoud Abdelmoniem
Metal
Available for: macOS Tahoe
Impact: An app may be able to read files outside of its sandbox
Description: An access issue was addressed with improved access restrictions.
CVE-2026-84542: Mustafa Ahmed, an anonymous researcher
Model I/O
Available for: macOS Tahoe
Impact: Processing a maliciously crafted 3D model may lead to memory corruption
Description: An integer overflow was addressed with improved input validation.
CVE-2026-112565: Musaab Khan (@bxff), Hcamael and 章鱼哥@aipy (aipyaipy.com), Saoud Khalifah, stratan (@5tratan), Niels Hofmans
CVE-2026-112449: ret2happy (@ret2happy)
Model I/O
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to unexpected app termination
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112413: Nathaniel Oh (@calysteon)
Model I/O
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to unexpected app termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112553: stratan (@5tratan)
CVE-2026-112563: stratan (@5tratan)
Model I/O
Available for: macOS Tahoe
Impact: Processing a maliciously crafted 3D model may lead to memory corruption
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112461: 진규정 (Gyujeong Jin, @G1uN4sh), Lucas Parnell, Nathaniel Oh (@calysteon), Meta Red Team X - Nik Tsytsarkin, YingMuo (@YingMuo) of DEVCORE Research Team, ret2happy (@ret2happy)
Model I/O
Available for: macOS Tahoe
Impact: Processing a maliciously crafted 3D model may lead to memory corruption
Description: The issue was addressed with improved memory handling.
CVE-2026-112485: Nik Tsytsarkin
Model I/O
Available for: macOS Tahoe
Impact: Processing a 3D model may lead to unexpected app termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112486: Md Rasel Bhuyan (www.linkedin.com/in/rasel-bhuyan), Musaab Khan (@bxff)
ncurses
Available for: macOS Tahoe
Impact: An app may be able to cause a denial-of-service
Description: A type confusion issue was addressed with improved memory handling.
CVE-2026-112550: Jonathan Bar Or (@yo_yo_yo_jbo)
OpenBSM
Available for: macOS Tahoe
Impact: Processing a maliciously crafted audit file may corrupt process memory
Description: A stack buffer overflow was addressed through improved input validation.
CVE-2026-84604: Tristan Madani (Talence Security)
PackageKit
Available for: macOS Tahoe
Impact: An app may be able to modify protected parts of the file system
Description: A race condition was addressed with improved handling of symbolic links.
CVE-2026-112421: Csaba Fitzl (@theevilbit) of Iru and Gergely Kalman (@gergely_kalman)
PackageKit
Available for: macOS Tahoe
Impact: An app may be able to modify protected parts of the file system
Description: A race condition was addressed with additional validation.
CVE-2026-112442: Mickey Jin (@patch1t)
Photos Storage
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state management.
CVE-2026-65397: Varik Matevosyan (@D4RK7ET), an anonymous researcher
Photos Storage
Available for: macOS Tahoe
Impact: An app may be able to bypass certain Privacy preferences
Description: An authorization issue was addressed with improved state management.
CVE-2026-112660: Prafull Dhiman, Alto_00000
Photos Storage
Available for: macOS Tahoe
Impact: An app may be able to access a user's Photos Library
Description: This issue was addressed with additional entitlement checks.
CVE-2026-112676: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova
ppp
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: The issue was addressed with improved checks.
CVE-2026-113899: Siddharth Aeri
ppp
Available for: macOS Tahoe
Impact: A malicious app may be able to intercept network traffic
Description: A permissions issue was addressed with additional restrictions.
CVE-2026-112542: Gabriel '0xv1n' Cardona, Mrunal Chawda, Kujtim Kryeziu (Sentry), Tristan Madani (Talence Security)
Printing
Available for: macOS Tahoe
Impact: A malicious app may be able to break out of its sandbox
Description: A parsing issue in the handling of directory paths was addressed with improved path validation.
CVE-2026-112562: 도현 김, Ithrael, YEONGJAE SHIN, an anonymous researcher
quarantine
Available for: macOS Tahoe
Impact: A malicious application may bypass Gatekeeper checks
Description: This issue was addressed with improved validation of file attributes.
CVE-2026-64789: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs (nosebeard.co), an anonymous researcher
quarantine
Available for: macOS Tahoe
Impact: An app may be able to break out of its sandbox
Description: An access issue was addressed with additional sandbox restrictions.
CVE-2026-112569: Csaba Fitzl (@theevilbit) of Iru, an anonymous researcher
CVE-2026-112498: an anonymous researcher
RealityKit
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to unexpected app termination
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112491: Hongsik Kim (mnur)
Remote Management
Available for: macOS Tahoe
Impact: An attacker on the local network may be able to cause unexpected system termination or corrupt process memory
Description: A double free issue was addressed with improved memory management.
CVE-2026-112457: Efstratios Kaplanellis (@5tratan) of Almamater Technologies, Nathaniel Oh (@calysteon)
Remote Management
Available for: macOS Tahoe
Impact: A user with screen sharing access may be able to view another user's screen
Description: A permissions issue was addressed with additional restrictions.
CVE-2026-112480: Andrey Chernykh, ruitong (@abstract)
RemoteManagement
Available for: macOS Tahoe
Impact: An application may be able to execute arbitrary code with system privileges
Description: An authorization issue was addressed with improved access control.
CVE-2026-112677: an anonymous researcher, Niels Hofmans, 도현 김, Junyeong Lee (jylab.github.io), Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Jonghoon Han (Aegis)
SceneKit
Available for: macOS Tahoe
Impact: Processing a 3D model may result in disclosure of process memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112425: stratan (@5tratan)
SceneKit
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112423: Rahul Raj
SceneKit
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to unexpected app termination
Description: An integer overflow was addressed with improved input validation.
CVE-2026-112540: f4&Zhiniang Peng with HUST, Geonha Lee (@leegn4a), Kwak Kiyong (@Pwnkai23), Song Nuri, Wout van der Ploeg (woutvanderploeg.nl), Substrate, Piotr Jerzy Duszynski, Tristan Madani (Talence Security), Arni Hardarson (Neonix Security), an anonymous researcher
SceneKit
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to heap corruption
Description: An out-of-bounds write issue was addressed with improved input validation.
CVE-2026-112464: 정우 하 (@0xfa11babe), Narendra Singh (@_3P1C)
SceneKit
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to unexpected process termination
Description: A buffer overflow was addressed with improved bounds checking.
CVE-2026-86991: Cem Onat Karagun, Yujung Choi (@Dusker), Mathis Mansière, Rahul Raj
Screen Sharing
Available for: macOS Tahoe
Impact: Connecting to a malicious VNC server may cause a denial-of-service
Description: An integer overflow was addressed with improved input validation.
CVE-2026-112519: Piotr Jerzy Duszynski, Nathaniel Oh (@calysteon)
Screen Sharing Server
Available for: macOS Tahoe
Impact: A malicious app may be able to gain root privileges
Description: A permissions issue was addressed with additional restrictions.
CVE-2026-65373: Stefan Esser (Calif), Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io), Anon Tuttu Venus, Nathaniel Oh (@calysteon)
Screen Sharing Server
Available for: macOS Tahoe
Impact: An attacker with the legacy VNC password for Screen Sharing may be able to copy files to the Mac
Description: An authorization issue was addressed with improved state management.
CVE-2026-112473: Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)
Screen Sharing Server
Available for: macOS Tahoe
Impact: An attacker on the local network may be able to corrupt process memory
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112482: Nathaniel Oh (@calysteon)
Screen Sharing Server
Available for: macOS Tahoe
Impact: A malicious Screen Sharing peer may be able to create arbitrary symlinks as root
Description: A path handling issue was addressed with improved logic.
CVE-2026-112511: Nathaniel Oh (@calysteon)
Screen Sharing Server
Available for: macOS Tahoe
Impact: A malicious application may be able to execute arbitrary code with system privileges
Description: This issue was addressed with improved file handling.
CVE-2026-112484: Mahmoud Abdelmoniem
Screen Sharing Server
Available for: macOS Tahoe
Impact: A remote attacker may be able to cause unexpected app termination or heap corruption
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-84590: Nathaniel Oh (@calysteon), Narendra Singh (@_3P1C), koocolb, Tristan Madani (Talence Security)
Screen Sharing Server
Available for: macOS Tahoe
Impact: An attacker on the local network may be able to cause unexpected process termination or disclose process memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112481: Nathaniel Oh (@calysteon)
Security
Available for: macOS Tahoe
Impact: Processing web content may disclose sensitive information
Description: An input validation issue was addressed with improved input validation.
CVE-2026-113913: Niels Hofmans, Stav Nir and Vladimir Tokarev
Security
Available for: macOS Tahoe
Impact: An app may be able to break out of its sandbox
Description: The issue was addressed with improved checks.
CVE-2026-65363: Arni Hardarson (Neonix Security), Csaba Fitzl (@theevilbit) of Iru and Gergely Kalman (@gergely_kalman)
Security
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: A privacy issue was addressed with improved memory management.
CVE-2026-86931: Pranav Gopalkrishnan, Alan Wang, Ailsa Sun, Hovav Shacham, Riccardo Paccagnella, Chris Fletcher, David Kohlbrenner
Security
Available for: macOS Tahoe
Impact: A sandboxed process may be able to circumvent sandbox restrictions
Description: A buffer overflow was addressed with improved bounds checking.
CVE-2026-112521: Richard Hyunho Im (@richeeta) at Route Zero Security, Efstratios Kaplanellis (@5tratan) of Almamater Technologies
Security
Available for: macOS Tahoe
Impact: A local attacker may gain access to user's Keychain items
Description: This issue was addressed with improved permissions checking.
CVE-2026-28864: Alex Radocea
Security
Available for: macOS Tahoe
Impact: An app may be able to gain root privileges
Description: A logic issue was addressed with improved checks.
CVE-2026-112668: cnitlrt (@abstract), Roman Belovitskiy, Lyutoon, Art Pllana, Redon Gashi of Sentry, ruitong (@abstract), Surej Sekhar, Teodor Sorescu (@teodorsorescu), Eddy Tsalolikhin, Franco Belman at Blackwing Intelligence, Phillip Groves, Sihyun Roh (Compsec, SNU), lokerxx
CVE-2026-86936: cnitlrt (@abstract), lokerxx
CVE-2026-112437: lokerxx
CVE-2026-112434: ruitong (@abstract), lokerxx
Security
Available for: macOS Tahoe
Impact: An malicious app may be able to bypass certificate validation
Description: A logic issue was addressed with improved state management.
CVE-2026-112652: Aditya Kumar
Security
Available for: macOS Tahoe
Impact: An app may be able to gain root privileges
Description: An authentication issue was addressed with improved validation of user attributes.
CVE-2026-112430: ruitong (@abstract)
SecurityAgent
Available for: macOS Tahoe
Impact: An app may be able to gain root privileges
Description: A downgrade issue was addressed with additional version checks.
CVE-2026-112493: Mickey Jin (@patch1t)
Shortcuts
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state management.
CVE-2026-112559: Lucas Lammer, Stuart Wallace
CVE-2026-112455: Rahul Raj, Chris Bailey - Short Circuit
Siri
Available for: macOS Tahoe
Impact: An app may be able to access information about a user's contacts
Description: A file access issue existed with certain home folder files. This was addressed with improved access restrictions.
CVE-2026-86984: Albin Haliti
Siri
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: An information disclosure issue was addressed with improved privacy controls.
CVE-2026-86923: Sindre Sorhus, Asaf Cohen
Siri
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state management.
CVE-2026-43736: Guilherme Rambo of Best Buddy Apps (rambo.codes), Abodi Dawoud
SMB
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory
Description: A use-after-free issue was addressed with improved memory management.
CVE-2026-86946: Jakob Pammer
SMB
Available for: macOS Tahoe
Impact: An attacker with control of a network file server may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112552: Bhuwan Bhetwal, Feng Xue and XGPT of ThreatBook, Claudio Bozzato and Francesco Benvenuto of Cisco Talos
smbx
Available for: macOS Tahoe
Impact: A remote attacker may be able to cause unexpected app termination
Description: A buffer overflow was addressed with improved bounds checking.
CVE-2026-112526: Nathaniel Oh (@calysteon), Narendra Singh (@_3P1C), Tristan Madani (@TristanInSec) from Talence Security, an anonymous researcher
smbx
Available for: macOS Tahoe
Impact: A remote attacker may be able to cause a denial-of-service or disclose process memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112451: Nathaniel Oh (@calysteon)
smbx
Available for: macOS Tahoe
Impact: A remote attacker may be able to cause a denial-of-service
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112510: Efstratios Kaplanellis (@5tratan) of Almamater Technologies, Andrey Chernykh
smbx
Available for: macOS Tahoe
Impact: A malicious Screen Sharing peer may be able to corrupt process memory
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112505: an anonymous researcher, Narendra Singh (@_3P1C), Andrey Chernykh
SoftRAID
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or read kernel memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112495: Lyutoon
Spotlight
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: A permissions issue was addressed with additional sandbox restrictions.
CVE-2026-112558: D4rthL
Spotlight
Available for: macOS Tahoe
Impact: A malicious application may be able to bypass Privacy preferences
Description: The issue was addressed with improved checks.
CVE-2026-112557: D4rthL
Spotlight
Available for: macOS Tahoe
Impact: A malicious application may be able to bypass Privacy preferences
Description: This issue was addressed with improved checks.
CVE-2026-112567: zenith
Spotlight
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with improved data access restriction.
CVE-2026-112628: Santiago Albertengo, Chris Bailey - Short Circuit
Spotlight
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: This issue was addressed by removing the vulnerable code.
CVE-2026-112441: Pan ZhenPeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
Storage
Available for: macOS Tahoe
Impact: An app may be able to gain root privileges
Description: A path handling issue was addressed with improved validation.
CVE-2026-112487: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab, Junyeong Lee (jylab.github.io), Gergely Kalman (@gergely_kalman), Lyutoon, Jaeyeong Lee, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs
StorageKit
Available for: macOS Tahoe
Impact: An app may be able to gain root privileges
Description: A parsing issue in the handling of directory paths was addressed with improved path validation.
CVE-2026-112541: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs (nosebeard.co), Maher Azzouzi, Sindre Sorhus, Paul Montgomery (@nullevent), Mickey Jin (@patch1t), Frederick Kaludis (Coiffeur0x90)
StorageKit
Available for: macOS Tahoe
Impact: An app may be able to modify protected parts of the file system
Description: A race condition was addressed with improved handling of symbolic links.
CVE-2026-112535: Sindre Sorhus
StorageKit
Available for: macOS Tahoe
Impact: An app may be able to modify protected parts of the file system
Description: A parsing issue in the handling of directory paths was addressed with improved path validation.
CVE-2026-112504: Mickey Jin (@patch1t)
StorageKit
Available for: macOS Tahoe
Impact: An app may be able to gain root privileges
Description: A race condition was addressed with additional validation.
CVE-2026-112492: Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)
StorageKit
Available for: macOS Tahoe
Impact: An app may be able to gain root privileges
Description: A use after free issue was addressed with improved memory management.
CVE-2026-112548: Surej Sekhar
System Settings
Available for: macOS Tahoe
Impact: An attacker may tamper with code-signed applications to execute arbitrary code in the application's context
Description: A race condition was addressed with additional validation.
CVE-2026-112556: Paul Montgomery (@nullevent), Mickey Jin (@patch1t)
System Settings
Available for: macOS Tahoe
Impact: An app may be able to break out of its sandbox
Description: A path handling issue was addressed with improved validation.
CVE-2026-112453: Sindre Sorhus
System Settings
Available for: macOS Tahoe
Impact: An app may be able to bypass Gatekeeper checks
Description: A path handling issue was addressed with improved validation.
CVE-2026-112512: Mufeed VH of Winfunc Research (winfunc.com), YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab, Mathis Mansière
Time Machine
Available for: macOS Tahoe
Impact: An app may be able to bypass Privacy preferences
Description: An authorization issue was addressed with improved state management.
CVE-2026-112447: 云开 江, Joshua Maina, Ithrael, Mahmoud Gamal (@Zombiehelp54)
udf
Available for: macOS Tahoe
Impact: An app may be able to disclose kernel memory
Description: The issue was addressed with improved memory handling.
CVE-2026-84498: Nathaniel Oh (@calysteon)
udf
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112529: Nathaniel Oh (@calysteon)
udf
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory
Description: A use-after-free issue was addressed with improved memory management.
CVE-2026-112524: Thanatos Tian (HKPolyU) & wgg & 2st with Diffract, Peter Malone, Tim Michaud (@TimGMichaud) of Aginor.ai
udf
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or read kernel memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112508: Aditya Kumar, Aswin Kumar Gokula Kannan, David Krehwinkel
USB
Available for: macOS Tahoe
Impact: A malicious USB device may be able to cause unexpected system termination or read kernel memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112479: Rotce, Sandeep Wawdane (thecybersandeep), Marc Newlin of SkySafe, Ankur Saini of Volexity, Kwak Kiyong (@Pwnkai23), Song nuri
Wi-Fi
Available for: macOS Tahoe
Impact: An app may be able to read sensitive location information
Description: This issue was addressed with improved data protection.
CVE-2026-112537: Sindre Sorhus
Wi-Fi
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or corrupt process memory
Description: The issue was addressed with improved memory handling.
CVE-2026-112443: Nathaniel Oh (@calysteon)
Wi-Fi
Available for: macOS Tahoe
Impact: An attacker in radio range may be able to cause unexpected system termination
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112622: Nathaniel Oh (@calysteon)
WindowServer
Available for: macOS Tahoe
Impact: An app may be able to monitor keystrokes without user permission
Description: The issue was addressed with improved handling of secure input state.
CVE-2026-112575: Ricardo Prado
zsh
Available for: macOS Tahoe
Impact: A malicious app may be able to break out of its sandbox
Description: A validation issue was addressed with improved input sanitization.
CVE-2026-112555: Phillip Groves
Additional recognition
AppleRAID
We would like to acknowledge Ashish Kunwar for their assistance.
Archive Utility
We would like to acknowledge Nathaniel Oh (@calysteon) for their assistance.
Audio
We would like to acknowledge Narendra Singh (@_3P1C), Nathaniel Oh (@calysteon) for their assistance.
AVEVideoEncoder
We would like to acknowledge Josh Maine of Calif.io for their assistance.
Bluetooth
We would like to acknowledge John De Armas, an anonymous researcher for their assistance.
Core Location
We would like to acknowledge 糖豆爸爸(@晴天组织), 이재영 for their assistance.
CoreAudio
We would like to acknowledge Meta Product Security for their assistance.
CoreCrypto
We would like to acknowledge Niels Hofmans for their assistance.
curl
We would like to acknowledge Muhamad Syaiful for their assistance.
mDNSResponder
We would like to acknowledge Aswin Kumar Gokula Kannan, Lucas Lammer, pixillated for their assistance.
ppp
We would like to acknowledge Siddharth Aeri for their assistance.
Screen Sharing
We would like to acknowledge Nathaniel Oh (@calysteon) for their assistance.
SMB
We would like to acknowledge Feng Xue and XGPT of ThreatBook for their assistance.
xar
We would like to acknowledge Meridian Miftari for their assistance.
zip
We would like to acknowledge Feng Xue and XGPT of ThreatBook for their assistance.
Information about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Contact the vendor for additional information.