About the security content of macOS Sequoia 15.7.8

This document describes the security content of macOS Sequoia 15.7.8.

About Apple security updates

For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.

Apple security documents reference vulnerabilities by CVE-ID when possible.

For more information about security, see the Apple Product Security page.

macOS Sequoia 15.7.8

Accounts

Available for: macOS Sequoia

Impact: An app may be able to gain root privileges

Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-43749: Adam Franke, Trung Nguyen (@everping) of CyStack, Ashish Kunwar

Accounts

Available for: macOS Sequoia

Impact: A malicious application may be able to bypass Privacy preferences

Description: An authorization issue was addressed with improved state management.

CVE-2026-65404: 이재영, Vinay Kumar Rasala (Xplo8E) from Appknox, Stuart Wallace, Arni Hardarson (Neonix Security)

afpfs

Available for: macOS Sequoia

Impact: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-64767: Dave G.

afpfs

Available for: macOS Sequoia

Impact: Connecting to a malicious afpfs server may lead to kernel memory corruption

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-43815: Dave G.

apache

Available for: macOS Sequoia

Impact: A remote attacker may be able to cause a denial-of-service

Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.

CVE-2026-23918: Bartlomiej Dmitruk of striga.ai, Stanislaw Strzalkowski of isec.pl

APFS

Available for: macOS Sequoia

Impact: A remote user may be able to cause unexpected system termination or corrupt kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-64695: Narendra Singh (@_3P1C), Peter Malone

App Store

Available for: macOS Sequoia

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with improved checks.

CVE-2026-43801: Rahul Raj

Apple Account

Available for: macOS Sequoia

Impact: An app may be able to access sensitive user data

Description: A race condition was addressed with improved state handling.

CVE-2026-43781: Pinak Oza

Apple Account

Available for: macOS Sequoia

Impact: A malicious app may be able to break out of its sandbox

Description: An authorization issue was addressed with improved state management.

CVE-2026-64737: Robert Mindo

Apple Neural Engine

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-43748: Vladislav Shevchenko (Positive Technologies), an anonymous researcher, tamdao, Franco Belman at Blackwing Intelligence

AppleDouble

Available for: macOS Sequoia

Impact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-43776: Peter Malone, Nicolas Rabrenovic, Irvin Wang, Rishabh Jain (rjcyber) of cyberplanet

AppleRAID

Available for: macOS Sequoia

Impact: A local user may be able to read kernel memory

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-43681: impost0r (ret2plt), David Ige - Beryllium Security

AppleRAID

Available for: macOS Sequoia

Impact: Mounting a malicious disk image may cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-43761: lokerxx, Narendra Singh (@_3P1C), Lyutoon, Jordy Zomer (@pwningsystems), Richard Zana, George Stergiopoulos, InfoSec lab, Athens University of Economics and Business, Greece, Aswin Kumar Gokulakannan

Assets

Available for: macOS Sequoia

Impact: A malicious application may be able to bypass Privacy preferences

Description: An authorization issue was addressed with improved state management.

CVE-2026-43672: 이재영

ATS

Available for: macOS Sequoia

Impact: An app may be able to read files outside of its sandbox

Description: A permissions issue was addressed by removing the vulnerable code.

CVE-2026-43763: Pavan Nallamothu, Jared Reyes

Audio

Available for: macOS Sequoia

Impact: An app may be able to break out of its sandbox

Description: An access issue was addressed with additional sandbox restrictions.

CVE-2026-64702: John Lussier

Audio

Available for: macOS Sequoia

Impact: An app may be able to cause a denial-of-service

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)

AVEVideoEncoder

Available for: macOS Sequoia

Impact: An app may be able to execute arbitrary code with kernel privileges

Description: A buffer overflow was addressed with improved size validation.

CVE-2026-64747: Franco Belman at Blackwing Intelligence

AVEVideoEncoder

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-64762: Franco Belman at Blackwing Intelligence, Dun

BackgroundAssets

Available for: macOS Sequoia

Impact: An app may be able to delete files for which it does not have permission

Description: A permissions issue was addressed with improved validation.

CVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab

BOM

Available for: macOS Sequoia

Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks

Description: The issue was addressed with improved checks.

CVE-2026-28849: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

cd9660

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-64698: Richard Zana, Peter Malone, Nathaniel Oh (@calysteon), an anonymous researcher

Contacts

Available for: macOS Sequoia

Impact: Processing a maliciously crafted contact may leak sensitive data

Description: The issue was addressed with improved checks.

CVE-2026-64734: Daniel Williams

Control Center

Available for: macOS Sequoia

Impact: An app may be able to access user-sensitive data

Description: A logic issue was addressed with improved validation.

CVE-2026-43756: 이재영

Core Services

Available for: macOS Sequoia

Impact: An app may be able to gain root privileges

Description: A race condition was addressed with improved state handling.

CVE-2026-43693: Gergely Kalman (@gergely_kalman)

CoreAudio

Available for: macOS Sequoia

Impact: Processing a maliciously crafted audio file may corrupt process memory

Description: The issue was addressed with improved memory handling.

CVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative

CoreAudio

Available for: macOS Sequoia

Impact: Processing an audio stream in a maliciously crafted media file may terminate the process

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-43744: ret2happy, Mathis Mansière, an anonymous researcher

CoreAudio

Available for: macOS Sequoia

Impact: A remote attacker may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-43803: Rahul Raj

CoreMedia

Available for: macOS Sequoia

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-43775: Csaba Fitzl (@theevilbit) of Iru

CoreMedia

Available for: macOS Sequoia

Impact: Processing a maliciously crafted video file may lead to unexpected app termination

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2026-43711: James Duffy (@0x4A616D657344)

CoreServices

Available for: macOS Sequoia

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: The issue was addressed with improved checks.

CVE-2026-28936: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

CoreUI

Available for: macOS Sequoia

Impact: Processing a maliciously crafted asset catalog may result in disclosure of process memory

Description: The issue was addressed with improved memory handling.

CVE-2026-43738: Peter Malone

CoreUI

Available for: macOS Sequoia

Impact: An app may be able to cause a denial of service

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-84489: stratan (@5tratan), Peter Malone

CoreVideo

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-43802: an anonymous researcher

Crash Reporter

Available for: macOS Sequoia

Impact: An app may be able to leak sensitive user information

Description: A privacy issue was addressed by removing sensitive data.

CVE-2026-64710: Matthew Schneider

CUPS

Available for: macOS Sequoia

Impact: A malicious app may be able to gain root privileges

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-39875: Dallas Dubs, Aaron Grattafiori - NVIDIA AI Red Team, XBreach.ai, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

CVE-2026-64701: Yongyue WANG AKA Brian.W of OKX security, Roman Zabicki, Katika Mohaseen, Aaron Grattafiori - NVIDIA AI Red Team, an anonymous researcher, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, an anonymous researcher

CUPS

Available for: macOS Sequoia

Impact: An app may be able to gain root privileges

Description: An injection issue was addressed with improved validation.

CVE-2026-43698: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

curl

Available for: macOS Sequoia

Impact: Authentication credentials may be sent to a server on another origin

Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.

CVE-2026-3784

CVE-2026-3783

curl

Available for: macOS Sequoia

Impact: Multiple issues in curl

Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.

CVE-2025-14017

CVE-2025-14819

Data Detectors UI

Available for: macOS Sequoia

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-43758: HvxyZLF

DesktopServices

Available for: macOS Sequoia

Impact: An app may bypass Gatekeeper checks

Description: A file quarantine bypass was addressed with additional checks.

CVE-2026-64708: Lance Cain - Offensive Security Engineer, SpecterOps Inc.

Disk Images

Available for: macOS Sequoia

Impact: An app may be able to elevate privileges

Description: A race condition was addressed with improved state handling.

CVE-2026-28926: Jonathan Bar Or (@yo_yo_yo_jbo)

Disk Images

Available for: macOS Sequoia

Impact: Parsing a maliciously crafted file may lead to an unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-43747: Anthony Laou Hine Tsuei (@anarcheuz)

Disk Images

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination

Description: An integer overflow was addressed with improved input validation.

CVE-2026-64694: Gil Portnoy & Henry

Disk Images

Available for: macOS Sequoia

Impact: An app may be able to bypass network restrictions

Description: A permissions issue was addressed with additional sandbox restrictions.

CVE-2026-28945: Ayaan Ahmad

Disk Images

Available for: macOS Sequoia

Impact: An app may be able to disclose kernel memory

Description: The issue was addressed with improved bounds checks.

CVE-2026-64776: Hyunwoo Kim (@v4bel)

DriverKit

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination

Description: An issue existed in the handling of environment variables. This issue was addressed with improved validation.

CVE-2026-43793: erdene-och Byambabayar

DriverKit

Available for: macOS Sequoia

Impact: An attacker with physical access to a locked device may be able to view sensitive user information

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-43753: Niels Hofmans

Foundation

Available for: macOS Sequoia

Impact: A malicious app may be able to access protected user data

Description: The issue was addressed with improved input sanitization.

CVE-2026-43714: an anonymous researcher

Game Center

Available for: macOS Sequoia

Impact: A malicious app may be able to break out of its sandbox

Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-64740: Manuel Fernandez (Stackhopper Security)

Game Center

Available for: macOS Sequoia

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with improved data protection.

CVE-2026-43796: Stanislav Jelezoglo, Ilya Andr (andrd3v) of Positive Technologies

Heimdal

Available for: macOS Sequoia

Impact: An app may be able to cause a denial-of-service

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-64692: Redon Gashi

HFS

Available for: macOS Sequoia

Impact: A remote user may be able to cause unexpected system termination or corrupt kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-43682: Trung Nguyen (@everping) of CyStack, Peter Malone, Nicolas Rabrenovic, Dave G., Atul R V & Ashmit Sharma

HFS

Available for: macOS Sequoia

Impact: Processing a maliciously crafted image may lead to arbitrary code execution

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-28981: Hcamael and 章鱼哥@aipy （aipyaipy.com）, Aswin Kumar Gokulakannan, Surya Narayan Kushwaha, Dun

HFS

Available for: macOS Sequoia

Impact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-43773: Surya Narayan Kushwaha, Richard Zana, Peter Malone, Hyunwoo Kim (@v4bel), Cem Onat Karagun

HFS

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination

Description: The issue was addressed with improved memory handling.

CVE-2026-43767: Alfredo Pesoli (@__rev) of Bynar.io, Hyunwoo Kim (@v4bel)

HFS

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-64697: Peter Malone

HFS

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination

Description: An integer overflow was addressed with improved input validation.

CVE-2026-43764: Tristan Madani (@TristanInSec) from Talence Security

HFS

Available for: macOS Sequoia

Impact: An attacker may be able to cause unexpected system termination or corrupt kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-43710: Peter Malone

Icons

Available for: macOS Sequoia

Impact: An app may be able to access sensitive user data

Description: An access issue was addressed with additional sandbox restrictions.

CVE-2025-43325: an anonymous researcher

ImageIO

Available for: macOS Sequoia

Impact: Processing a maliciously crafted image may corrupt process memory

Description: The issue was addressed with improved memory handling.

CVE-2026-64716: Peter Malone, Jonathan Alush-Aben, Arni Hardarson

ImageIO

Available for: macOS Sequoia

Impact: Processing a maliciously crafted texture may lead to unexpected app termination

Description: An integer overflow was addressed with improved input validation.

CVE-2026-43780: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative

ImageIO

Available for: macOS Sequoia

Impact: Processing a maliciously crafted image may lead to arbitrary code execution

Description: An integer overflow was addressed with improved input validation.

CVE-2026-43818: an anonymous researcher

ImageIO

Available for: macOS Sequoia

Impact: Processing a maliciously crafted image may corrupt process memory

Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2026-43661: Gandalf4a of PKU-ICODE, Anton Pakhunov, an anonymous researcher

ImageIO

Available for: macOS Sequoia

Impact: Processing a maliciously crafted file may lead to a denial-of-service

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-64754: Rahul Raj, PETOWORKS의 Bugeun Choi (@Bugeun)

ImageIO

Available for: macOS Sequoia

Impact: Processing a maliciously crafted image may lead to a denial-of-service

Description: A type confusion issue was addressed with improved checks.

CVE-2026-64693: Geonha Lee (@leegn4a)

ImageIO

Available for: macOS Sequoia

Impact: Processing a maliciously crafted image may lead to a denial-of-service

Description: A memory corruption issue was addressed with improved bounds checking.

CVE-2026-64714: an anonymous researcher

IOKit

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination or write kernel memory

Description: A race condition was addressed with improved state handling.

CVE-2026-43805: 이재영

IOSkywalkFamily

Available for: macOS Sequoia

Impact: An app may be able to disclose kernel memory

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2026-39877: Richard Zana, Dhiyanesh Selvaraj (@redroot97)

Kernel

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-64749: hxr1, Hiroki Imai (LAC Co., Ltd.), Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Ashish Kunwar

Kernel

Available for: macOS Sequoia

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with improved checks.

CVE-2026-43782: Igor Ushakov

Kernel

Available for: macOS Sequoia

Impact: An app may be able to disclose kernel memory

Description: An information leakage was addressed with additional validation.

CVE-2026-64744: Ryan Hileman via Xint Code (xint.io)

Kernel

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination

Description: A memory initialization issue was addressed with improved memory handling.

CVE-2026-64775: Ryan Hileman via Xint Code (xint.io)

Kernel

Available for: macOS Sequoia

Impact: A remote user may be able to cause unexpected system termination or corrupt kernel memory

Description: A race condition was addressed with improved locking.

CVE-2026-28982: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Adam Doupé of ASU SEFCOM

Kernel

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A use after free issue was addressed with improved memory management.

CVE-2026-43778: Ashish Kunwar, f0r of MurphySec, Mahmoud Abdelmoniem, Feng Xue and XGPT of ThreatBook, Wang Yu, Nicolas Rabrenovic, Lyutoon, Hiroki Imai (LAC Co., Ltd.), Fábio Luís @scanpt, DARKNAVY (@DarkNavyOrg), an anonymous researcher

Kernel

Available for: macOS Sequoia

Impact: A remote attacker may be able to bypass network filters

Description: An inconsistent user interface issue was addressed with improved state management.

CVE-2026-64735: Gor Aleksanyan

Kernel

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination

Description: A use after free issue was addressed with improved memory management.

CVE-2026-43822: Michal Kosiorek, Eddy Tsalolikhin

CVE-2026-64700: Asjid Kalam (@odinshell)

CVE-2026-43799: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Kernel

Available for: macOS Sequoia

Impact: A remote user may be able to cause unexpected system termination or corrupt kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-43810: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Kernel

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination or write kernel memory

Description: The issue was addressed with improved input sanitization.

CVE-2026-43724: impost0r (ret2plt), Hyunwoo Kim (@v4bel)

Kernel

Available for: macOS Sequoia

Impact: An app may be able to leak sensitive kernel state

Description: The issue was addressed with improved input sanitization.

CVE-2026-43722: Hyunwoo Kim (@v4bel), Feng Xue and XGPT of ThreatBook

Kernel

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-43809: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

CVE-2026-43757: Wang Yu, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Kernel

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination

Description: An integer overflow was addressed with improved input validation.

CVE-2026-43769: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Kernel

Available for: macOS Sequoia

Impact: An app may be able to leak sensitive kernel state

Description: This issue was addressed with improved redaction of sensitive information.

CVE-2026-43754: Ernesto Martínez García, Calif Research

Kernel

Available for: macOS Sequoia

Impact: An app may be able to access sensitive user data

Description: A logic issue was addressed with improved checks.

CVE-2026-64723: Ji'an Zhou, Mingxuan Yang, Ye Zhang

Kernel

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: This issue was addressed with improved input validation.

CVE-2026-39868: Ye Zhang (@VAR10CK) of Baidu Security, Vladislav Shevchenko (Positive Technologies), Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Kernel

Available for: macOS Sequoia

Impact: An app may be able to disclose kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-64709: Pasquale Scola, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Kernel

Available for: macOS Sequoia

Impact: An app may be able to access sensitive user data

Description: This issue was addressed through improved state management.

CVE-2026-64721: Lukas Gerlach

Kernel

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A race condition was addressed with improved state handling.

CVE-2026-64717: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

LaunchServices

Available for: macOS Sequoia

Impact: An app may be able to access sensitive user data

Description: An information disclosure issue was addressed with improved privacy controls.

CVE-2026-20672: Kirin (@Pwnrin) and LFY (@secsys) from Fudan University

LaunchServices

Available for: macOS Sequoia

Impact: A remote attacker may be able to cause a denial of service

Description: A type confusion issue was addressed with improved checks.

CVE-2026-28983: Ruslan Dautov

libarchive

Available for: macOS Sequoia

Impact: Processing a maliciously crafted file may result in disclosure of process memory

Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.

CVE-2026-4424

libarchive

Available for: macOS Sequoia

Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks

Description: A file quarantine bypass was addressed with additional checks.

CVE-2026-28900: Prathamesh Walunj (@attahasa)

libc

Available for: macOS Sequoia

Impact: A malicious app may be able to break out of its sandbox

Description: An integer overflow was addressed with improved input validation.

CVE-2026-28973: an anonymous researcher

Libnotify

Available for: macOS Sequoia

Impact: An attacker may be able to cause unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-64739: Feng Xue and XGPT of ThreatBook, Dun

libxslt

Available for: macOS Sequoia

Impact: Processing maliciously crafted web content may lead to an unexpected process crash

Description: The issue was addressed with improved memory handling.

CVE-2026-43703: Tristan Madani (@TristanInSec) from Talence Security

libxslt

Available for: macOS Sequoia

Impact: Processing maliciously crafted web content may lead to an unexpected process crash

Description: A double free issue was addressed with improved memory management.

CVE-2026-43706: Tristan Madani (@TristanInSec) from Talence Security

LoginWindow

Available for: macOS Sequoia

Impact: An attacker with physical access to a locked device may be able to view sensitive user information

Description: An authorization issue was addressed with improved state management.

CVE-2026-43766: Amy (amys.website)

Maps

Available for: macOS Sequoia

Impact: A malicious app may be able to break out of its sandbox

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-64738: Robert Mindo, Nathaniel Oh (@calysteon)

mDNSResponder

Available for: macOS Sequoia

Impact: An attacker on the local network may be able to cause a denial-of-service

Description: The issue was addressed with improved memory handling.

CVE-2026-43653: Atul R V

CVE-2026-64724: Daisuke Hatakeyama (@SYZD Research)

MediaRemote

Available for: macOS Sequoia

Impact: An app may be able to gain root privileges

Description: A path handling issue was addressed with improved validation.

CVE-2026-43723: Richard Zana, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

MobileAccessoryUpdater

Available for: macOS Sequoia

Impact: A malicious accessory may be able to cause unexpected app termination

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-43807: Tristan Madani (@TristanInSec) from Talence Security

Model I/O

Available for: macOS Sequoia

Impact: Processing a maliciously crafted image may corrupt process memory

Description: The issue was addressed with improved memory handling.

CVE-2026-43733: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative

CVE-2026-43729: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative

Model I/O

Available for: macOS Sequoia

Impact: A remote attacker may be able to cause unexpected application termination or heap corruption

Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2026-64772: wh0am1i, stratan (@5tratan)

Model I/O

Available for: macOS Sequoia

Impact: A remote attacker may be able to cause unexpected application termination or heap corruption

Description: An integer overflow was addressed with improved input validation.

CVE-2026-64774: stratan (@5tratan)

Model I/O

Available for: macOS Sequoia

Impact: A remote attacker may be able to cause unexpected application termination or heap corruption

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-64770: stratan (@5tratan)

CVE-2026-64769: stratan (@5tratan)

Model I/O

Available for: macOS Sequoia

Impact: Processing a 3D model may result in disclosure of process memory

Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2026-64722: wh0am1i

Model I/O

Available for: macOS Sequoia

Impact: A remote attacker may cause an unexpected app termination

Description: An out-of-bounds read issue was addressed with improved input validation.

CVE-2026-64768: stratan (@5tratan)

Model I/O

Available for: macOS Sequoia

Impact: A remote attacker may be able to cause unexpected application termination or heap corruption

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-64771: wh0am1i

Net-SNMP

Available for: macOS Sequoia

Impact: An app may be able to cause a denial-of-service

Description: A stack overflow was addressed with improved input validation.

CVE-2026-43771: Robert Tran

NetFSFramework

Available for: macOS Sequoia

Impact: An app may be able to break out of its sandbox

Description: A path traversal issue was addressed with improved input validation.

CVE-2026-43772: Mickey Jin (@patch1t)

Network Extensions

Available for: macOS Sequoia

Impact: An attacker with physical access to a locked device may be able to view sensitive user information

Description: This issue was addressed with improved checks.

CVE-2026-28961: Dan Raviv

NSColorPanel

Available for: macOS Sequoia

Impact: An app may be able to leak sensitive user information

Description: This issue was addressed with additional entitlement checks.

CVE-2026-64711: Koh M. Nakagawa (@tsunek0h) of FFRI Security, Inc.

PackageKit

Available for: macOS Sequoia

Impact: A user may be able to elevate privileges

Description: A logic issue was addressed with improved restrictions.

CVE-2026-28912: Matej Moravec (@MacejkoMoravec)

PackageKit

Available for: macOS Sequoia

Impact: An app may be able to modify protected parts of the file system

Description: This issue was addressed with improved handling of symlinks.

CVE-2026-43765: Mickey Jin (@patch1t)

ppp

Available for: macOS Sequoia

Impact: An attacker may be able to cause unexpected system termination or read kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-28896: Dave G.

ppp

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-28933: 九宫格 of Chongqing Telecom, Chanwit Muenprakoddee (ChemIndy), Aethel-Systems

Printing

Available for: macOS Sequoia

Impact: A malicious app may be able to break out of its sandbox

Description: A path handling issue was addressed with improved validation.

CVE-2026-64731: Narcis Oliveras Fontàs, Sindre Sorhus, Richard Zana

Pro Res

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination

Description: A use after free issue was addressed with improved memory management.

CVE-2026-43812: Francisco Knabe

quarantine

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination or write kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-43694: Zachary Neal, Hcamael and 章鱼哥@aipy (aipyaipy.com), JC Alvarado of Stripe, Jacob Hazak

Remote Management

Available for: macOS Sequoia

Impact: A malicious app may be able to gain root privileges

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-39874: @pixiepointsec

SceneKit

Available for: macOS Sequoia

Impact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-64764: stratan (@5tratan)

SceneKit

Available for: macOS Sequoia

Impact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Description: An out-of-bounds write issue was addressed by removing the vulnerable code.

CVE-2026-64763: stratan (@5tratan)

SceneKit

Available for: macOS Sequoia

Impact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Description: An integer overflow was addressed with improved input validation.

CVE-2026-64766: stratan (@5tratan)

CVE-2026-64765: Nik Tsytsarkin, stratan (@5tratan)

Screen Sharing Server

Available for: macOS Sequoia

Impact: An app may be able to intercept network connections intended for another process

Description: A logic issue was addressed with improved restrictions.

CVE-2026-43779: Dave G., Asaf Cohen

Screen Sharing Server

Available for: macOS Sequoia

Impact: A remote attacker may be able to cause a denial of service

Description: This issue was addressed with improved input validation.

CVE-2026-43777: Junming C.(Chapoly1305)

Screen Sharing Server

Available for: macOS Sequoia

Impact: A local attacker may be able to determine the legacy VNC password configured for Screen Sharing

Description: This issue was addressed with additional entitlement checks.

CVE-2026-43665: Ayaan Ahmad

Siri

Available for: macOS Sequoia

Impact: A person with physical access to a locked device may be able to access contacts and photos

Description: This issue was addressed with additional restrictions on the lock screen.

CVE-2026-64745: Vivek Dhar, ASI (RM) in Border Security Force, FTR HQ BSF Kashmir

SMB

Available for: macOS Tahoe

Impact: Connecting to a malicious SMB server may lead to unexpected system termination

Description: The issue was addressed with improved memory handling.

CVE-2026-39873: Feng Xue and XGPT of ThreatBook, Peter Malone

CVE-2026-64696: Feng Xue and XGPT of ThreatBook, Peter Malone

SMB

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination

Description: A type confusion issue was addressed with improved memory handling.

CVE-2026-64704: He Wei (ギカク), Claudio Bozzato and Francesco Benvenuto of Cisco Talos, Aswin Kumar Gokulakannan, Kitten Food, Peter Malone, Calif.io in collaboration with Claude and Anthropic Research

Spotlight

Available for: macOS Sequoia

Impact: An app may be able to access sensitive user data

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-43774: Csaba Fitzl (@theevilbit) of Iru

StorageKit

Available for: macOS Sequoia

Impact: An app may be able to access sensitive user data

Description: A race condition was addressed with additional validation.

CVE-2026-43770: Tien-Chih Lin of CyCraft Technology

udf

Available for: macOS Sequoia

Impact: An app may be able to cause unexpected system termination

Description: The issue was addressed with improved memory handling.

CVE-2026-43768: Hyunwoo Kim (@v4bel)

WebDAV

Available for: macOS Sequoia

Impact: An app may be able to cause a denial-of-service

Description: A use after free issue was addressed with improved memory management.

CVE-2026-64703: Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research

WebDAV

Available for: macOS Sequoia

Impact: An app may be able to disclose kernel memory

Description: A memory initialization issue was addressed with improved memory handling.

CVE-2026-64699: Bruce Dang of Calif.io

Wi‑Fi

Available for: macOS Sequoia

Impact: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-43750: an anonymous researcher

xar

Available for: macOS Sequoia

Impact: An app may be able to cause a denial of service

Description: A logic issue existed resulting in memory corruption. This was addressed with improved state management.

CVE-2026-28932: Mathis Mansière

zip

Available for: macOS Sequoia

Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks

Description: A logic issue was addressed with improved file handling.

CVE-2026-28914: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs (nosebeard.co)

Additional recognition

Audio

We would like to acknowledge Niels Hofmans for their assistance.

copyfile

We would like to acknowledge Keisuke Hosoda for their assistance.

CoreMedia

We would like to acknowledge yaohway for their assistance.

Disk Images

We would like to acknowledge Jordy Zomer (@pwningsystems), Phillip Groves, Richard Zana for their assistance.

Kerberos v5 PAM module

We would like to acknowledge Hiroki Imai, Ricerca Security, Inc. for their assistance.

Kernel

We would like to acknowledge Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Cem Onat Karagun, Chris Betz, James Duffy (@0x4A616D657344), Lyutoon, Mathis Mansière, Tristan Rousseau, Yeojin Kim, YingMuo (@YingMuo) of DEVCORE Research Team for their assistance.

libxslt

We would like to acknowledge Kubilay Berk Alkan for their assistance.

mDNSResponder

We would like to acknowledge Cem Onat Karagun, He Wei (ギカク), Jex Amro, 章鱼哥 (@aipy) of aipyaipy.com for their assistance.

PluginKit

We would like to acknowledge Asaf Cohen, Ashish Kunwar for their assistance.

Printing UIKit

We would like to acknowledge Jacolon Walker ( @call_eax ) for their assistance.

ReplayKit

We would like to acknowledge an anonymous researcher for their assistance.

Spotlight

We would like to acknowledge Ilya Andr (andrd3v) and nkhmelni for their assistance.

System Settings

We would like to acknowledge Masaki Moriguchi for their assistance.

Time Machine

We would like to acknowledge Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs for their assistance.