EUVD-2026-49454

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to break out of its sandbox...

CVE-2026-43819

The CVE affects macOS Tahoe (fixed in version 26.6) where an access issue allowed an app to potentially reach sensitive user data. The underlying problem is an insufficient sandbox boundary that was addressed by adding sandbox restrictions. There are no public exploitation details provided in the...

EUVD-2026-49425

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.6. An app may be able to access sensitive user data...

CVE-2026-64731

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox...

CVE-2026-64731

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox...

CVE-2026-64731

CVE-2026-64731 describes a path handling issue where improved validation mitigations were added. The vulnerability could allow a malicious app to break out of its sandbox. It is fixed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6. Affected product: macOS (Sequoia/Tahoe branches). Underlying cause:...

EUVD-2026-49564

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox...

CVE-2026-43750

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges...

EUVD-2026-49547

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges...

CVE-2026-43750

CVE-2026-43750 describes a buffer overflow that was mitigated by improved bounds checking. The issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An affected app may be able to execute arbitrary code outside its sandbox or with elevated privileges. The provided doc...

CVE-2026-43821

CVE-2026-43821 describes an access-control issue in Apple platforms where an app may read files outside its sandbox. Affected software includes Safari, iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS, with the fix shipped in version 26.6 across these platforms (Safari 26.6, iOS 26.6, iPadOS...

EUVD-2026-49529

An access issue was addressed with improved access restrictions. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read files outside of its sandbox...

CVE-2026-28973

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. A malicious app may be able to break out of its sandbox...

CVE-2026-28973

CVE-2026-28973 describes an integer overflow that was mitigated by improved input validation. The issue is fixed in specific Apple OS updates: iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, and watchOS 26.6. A malicious app could potentially break out of it...

EUVD-2026-49511

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. A malicious app may be able to break out of its sandbox...

CVE-2026-43772

This CVE (CVE-2026-43772) describes a path-traversal issue addressed by improved input validation in macOS. The vulnerability is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The underlying problem is a path traversal condition that could allow an app to break out of i...

EUVD-2026-49489

A path traversal issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to break out of its sandbox...

CVE-2026-43763

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to read files outside of its sandbox...

EUVD-2026-49470

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to read files outside of its sandbox...

CVE-2026-43763

Summary: CVE-2026-43763 is a permissions issue in macOS components that could allow an app to read files outside its sandbox. The fix is to remove the vulnerable code. Affected/fixed versions: macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Status: patched in the listed releases; no ...