CVE-2026-20672

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to access sensitive user data...

CVE-2026-64691

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to cause unexpected system termination...

CVE-2026-64691

CVE-2026-64691 is a macOS Tahoe 26.6 fix for a buffer overflow resolved by improved size validation. The issue could cause an unexpected system termination if triggered. Affected product: macOS Tahoe (and related Apple OS updates). Remediation: update to macOS Tahoe 26.6 or later; description and...

EUVD-2026-49451

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash...

EUVD-2026-49445

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-43672

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious application may be able to bypass Privacy preferences...

CVE-2026-43672

CVE-2026-43672 describes an authorization issue in macOS where improved state management fixes a vulnerability that could allow a malicious application to bypass Privacy preferences. The issue is resolved in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The connected sources co...

CVE-2026-64716

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted image may corrupt process...

EUVD-2026-49442

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read a persistent device identifier...

CVE-2026-64757

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash...

EUVD-2026-49429

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination...

CVE-2026-43730

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to fingerprint the user...

EUVD-2026-49427

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to fingerprint the user...

CVE-2026-28911

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process...

CVE-2026-28911

CVE-2026-28911 describes a memory-corruption issue that could allow a malicious app to corrupt memory of a system process. Multiple connected sources confirm the vulnerability is addressed by memory-management fixes and are fixed in macOS Sonoma 14.8.8 and macOS Tahoe 26.6. The NVD/NCSC/CIRCL ref...

EUVD-2026-49425

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.6. An app may be able to access sensitive user data...

CVE-2026-64731

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox...

CVE-2026-43803

CVE-2026-43803 is an out-of-bounds write vulnerability in CoreAudio that Apple fixed in watchOS 26.6 (also addressed in iOS/iPadOS/macOS/tvOS/visionOS 26.6 and later). The watchOS entry notes an issue could allow a remote attacker to cause unexpected system termination; remediation is applying th...

CVE-2026-39874

CVE-2026-39874 describes a permissions issue that could allow a malicious app to gain root privileges. Affected software includes macOS Sequoia (15.7.8), macOS Sonoma (14.8.8), and macOS Tahoe (26.6). The root cause and exact vulnerable component are not detailed in the provided documents, but th...

EUVD-2026-49549

The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website that frames malicious content may lead to UI spoofing...