CVE-2026-28978

CVE-2026-28978 is a macOS sandbox-permissions issue addressed by Apple in security content updates. The vulnerability allows a malicious app to break out of its sandbox, with fixed versions listed as macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5. Public documents (NVD, RH, EUVD,...

CVE-2024-44303

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1. A malicious application may be able to modify protected parts of the file system...

CVE-2024-44303

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1. A malicious application may be able to modify protected parts of the file system...

CVE-2024-44303

CVE-2024-44303 affects macOS Sequoia, with the issue fixed in Sequoia 15.1. The vulnerability allows a malicious application to modify protected parts of the file system due to insufficient checks; Apple’s description notes the fix involved improved checks. Connected sources corroborate that the ...

CVE-2026-28826

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. A malicious app may be able to break out of its sandbox...

CVE-2026-28826

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26.4. A malicious app may be able to break out of its sandbox...

CVE-2026-28826

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. A malicious app may be able to break out of its sandbox...

PT-2026-27562

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.4 Description A logic issue existed due to insufficient restrictions, allowing a malicious application to potentially escape its sandbox. The issue was resolved by implementing improved restrictions. Recommendations...

Microsoft Authenticator could leak login codes—update your app now

A vulnerability in Microsoft Authenticator for both iOS and Android CVE-2026-26123 could leak your one-time sign-in codes or authentication deep links to a malicious app on the same device. Deep links are predefined URIs Uniform Resource Identifiers that allow direct access to an activity in a we...

CVE-2026-20648

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to access notifications from other iCloud devices...

CVE-2026-20648

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to access notifications from other iCloud devices...

CVE-2026-20626

This issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Tahoe 26.3, visionOS 26.3. A malicious app may be able to gain root privileges...

CVE-2026-20648

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to access notifications from other iCloud devices...

CVE-2026-20648

CVE-2026-20648 is a macOS privacy vulnerability fixed in macOS Tahoe 26.3. Multiple sources (NVD, Red Hat, OSV, NCSC advisories) describe a scenario where sensitive data had been stored in a location with insufficient protection, allowing a malicious app to potentially access notifications from o...

CVE-2026-20646

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to read sensitive location information...

CVE-2026-20626

CVE-2026-20626 affects Apple platforms including iOS, iPadOS, macOS Sequoia 15.7.4, macOS Tahoe 26.3, and visionOS 26.3. The issue is a local-privilege-elevation vulnerability where a malicious app may gain root privileges; CVSS indicates local access, low privileges, no user interaction, and hig...

CVE-2026-20626

This issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Tahoe 26.3, visionOS 26.3. A malicious app may be able to gain root privileges...

CVE-2026-20626

This issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Tahoe 26.3, visionOS 26.3. A malicious app may be able to gain root privileges...

PT-2026-7763

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.7.4 iOS versions prior to 26.3 iPadOS versions prior to 26.3 macOS Tahoe versions prior to 26.3 visionOS versions prior to 26.3 Description A malicious application may be able to gain root privileges due to...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the Split function. An attacker can cause excessive CPU consumption and resource exhaustion by supplying a malicious APK stream that triggers unbounded gzip inflation. Remediation...