CVE-2026-28961

This vulnerability affects macOS versions Sequoia 15.7.8 , Sonoma 14.8.8 , and Tahoe 26.5 . The flaw was addressed with improved checks to prevent an attacker with physical access to a locked device from viewing sensitive user information . Remediation is available via the specified updates for t...

CVE-2026-28977

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted file may lead to unexpected app...

CVE-2026-28920

An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Visiting a maliciously crafted website may leak...

CVE-2026-28985

This vulnerability involves a null pointer dereference caused by inadequate input validation across multiple Apple operating systems. The flaw affects versions prior to iOS 26.5 , iPadOS 26.5 , macOS Tahoe 26.5 , and tvOS 26.5 . An attacker located on the local network may exploit this issue to t...

CVE-2026-28985

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5. An attacker on the local network may be able to cause a denial-of-service...

CVE-2026-43659

A race condition vulnerability was addressed in several Apple products, including iOS 18.7.9 , iPadOS 18.7.9 , iOS 26.5 , iPadOS 26.5 , macOS Sequoia 15.7.7 , macOS Sonoma 14.8.7 , macOS Tahoe 26.5 , and visionOS 26.5 . The issue was resolved by implementing additional validation to prevent unaut...

CVE-2026-28946

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-28946

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-28946

A use-after-free vulnerability exists in the WebKit engine, specifically affecting Safari 26.5 and macOS Tahoe 26.5 . The root cause is related to insufficient memory management, which can be triggered by processing maliciously crafted web content . Successful exploitation may result in an unexpe...

CVE-2026-43655

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination or read kernel memory...

CVE-2026-28819

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to execute arbitrary code with kernel privileges...

CVE-2026-28930

A permissions issue in macOS Tahoe 26.5 allows an application to potentially access protected user data . This vulnerability was addressed by implementing additional restrictions . The issue is resolved in macOS Tahoe 26.5 . Exploitation details are not provided in the available documents.

CVE-2026-28971

The issue was addressed with improved UI handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. A malicious iframe may use another website’s download settings...

CVE-2026-28971

The issue was addressed with improved UI handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. A malicious iframe may use another website’s download settings...

CVE-2026-20696

An authorization issue in macOS was identified due to improper state management, which could allow an application to access sensitive user data . This vulnerability affects macOS Tahoe versions prior to 26.4. The issue has been addressed in the following releases: macOS Sequoia 15.7.4 , macOS Son...

CVE-2026-20696

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.4. An app may be able to access sensitive user data...

CVE-2026-20696

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.4. An app may be able to access sensitive user data...

CVE-2026-28910

This issue was addressed with improved permissions checking. This issue is fixed in macOS Tahoe 26.4. A malicious app may be able to access arbitrary files...

CVE-2026-28910

A vulnerability in the Archive Utility on macOS Tahoe (versions prior to 26.4 ) allows a malicious application to access arbitrary files . The root cause is an issue with permissions checking that can be exploited to break App Sandbox Data Containers and Transparency, Consent, and Control (TCC) ....

CVE-2026-28910

This issue was addressed with improved permissions checking. This issue is fixed in macOS Tahoe 26.4. A malicious app may be able to access arbitrary files...