CVE-2026-64707

CVE-2026-64707 : A permissions issue in the BackgroundAssets component allowed an app to delete files for which it had no permission. Root cause cited as insufficient validation in deletion/permission checks. Fixed in macOS Sonoma 14.8.8, macOS Sequoia 15.7.8, macOS Tahoe 26.6, iOS/iPadOS 26.6, a...

CVE-2026-64711

CVE-2026-64711 affects Apple platforms where improper entitlement checks could allow an app to leak sensitive user information. Concrete details in the initial record specify the affected software versions and fixes: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Taho...

CVE-2026-64746

CVE-2026-64746 involves an authorization flaw in Apple platforms where an app could add contacts without user consent. The issue is caused by inadequate validation of authorization checks and has been fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, and watchOS 26.6. Connected ...

CVE-2026-43767

CVE-2026-43767 is a macOS memory-handling issue that can cause an app to trigger an unexpected system termination. The available sources indicate the vulnerability affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6, with patches delivered in those versions. The root cause is ...

CVE-2026-64697

CVE-2026-64697 affects macOS components with memory handling issues that could let an app cause an unexpected system termination or corrupt kernel memory. Apple has fixed this in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The description notes a memory-management remediation...

CVE-2026-43730

The CVE-2026-43730 issue is a permissions-related flaw in Apple platforms that could allow an app to fingerprint the user. It affects iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6, with Apple outlining the fix as part of these updates. The ROOT CAUSE is de...

CVE-2026-28911

CVE-2026-28911 describes a memory-corruption issue that could allow a malicious app to corrupt memory of a system process. Multiple connected sources confirm the vulnerability is addressed by memory-management fixes and are fixed in macOS Sonoma 14.8.8 and macOS Tahoe 26.6. The NVD/NCSC/CIRCL ref...

CVE-2026-43819

CVE-2026-43819 is an access issue addressed by stricter sandbox restrictions and fixed in macOS Tahoe 26.6. The vulnerability could have allowed an app to access sensitive user data via local access (attack vector: LOCAL, UI required). The public documentation attributes a MEDIUM base score (CVSS...

CVE-2026-43771

CVE-2026-43771 involves a stack overflow that was fixed by improved input validation. Affected macOS versions are Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6, where an app may crash the system (DoS) via this issue. Remediation is to apply the fixed updates (Sequoia 15.7.8, Sonoma 14.8.8, Tahoe ...

CVE-2026-43747

Affected software: macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Root cause: an out-of-bounds read mitigated by improved bounds checking when parsing a maliciously crafted file. Impact: may cause unexpected application termination. Exploitation details: not provided beyond the CVSS...

CVE-2026-28931

CVE-2026-28931 involves a buffer overflow that was addressed through improved bounds checking. The vulnerability is fixed in Apple OS updates: iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6. The public description notes that connecting to a malicious NFS server may lead to k...

CVE-2026-43710

CVE-2026-43710 is associated with macOS memory-management issues fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The description across sources indicates that an attacker could trigger unexpected system termination or corrupt kernel memory due to improved memory handling...

CVE-2026-64731

CVE-2026-64731 is a path handling issue mitigated by improved validation in macOS Sequoia 15.7.8 and macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox. Remediation in the provided docs is to update to the fixed macOS versions (Sequoia 15.7.8, Tahoe 26.6). No exploit detail...

CVE-2026-64766

According to connected advisories, CVE-2026-64766 involves an integer overflow in Apple device software that is mitigated by input validation fixes. The issue affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.x, and related iOS/iPadOS/watchOS/tvOS/visionOS versions, with the impac...

CVE-2026-43803

CVE-2026-43803 is an out-of-bounds write vulnerability in CoreAudio that Apple fixed in watchOS 26.6 (also addressed in iOS/iPadOS/macOS/tvOS/visionOS 26.6 and later). The watchOS entry notes an issue could allow a remote attacker to cause unexpected system termination; remediation is applying th...

CVE-2026-39875

CVE-2026-39875 describes a permissions issue in macOS that could allow a malicious app to gain root privileges via a CUPS logic flaw. Affected products/versions and fixes are documented across multiple sources: Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The underlyi...

CVE-2026-64770

CVE-2026-64770 describes an out-of-bounds write vulnerability fixed in multiple Apple OS releases. Affected: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. Root cause: memory safety issue (out-of-bounds write) leading to possible heap...

CVE-2026-64727

CVE-2026-64727 is a type-confusion vulnerability addressed by Apple with improved memory handling. It affects macOS Tahoe 26.6 and tvOS 26.6, where an app may cause an unexpected system termination. The CVSS score is 9.8 (CRITICAL), with attack vector NETWORK and no user interaction required. Rem...

CVE-2026-43792

CVE-2026-43792 is an authorization issue addressed by updates in Safari 26.6 and macOS Tahoe 26.6 . The description from the CVE notes that an app may be able to access sensitive user data, with the fix achieved via improved state management. Apple’s security content confirms the Safari 26.6 upda...

CVE-2026-64726

CVE-2026-64726 relates to memory handling issues in Apple OS components that may allow an attacker in physical proximity to corrupt process memory. Public sources consolidate this as a set of memory-management defects across macOS, iOS/iPadOS, tvOS, visionOS, and watchOS. The NVD/NCSC entries ind...

CVE-2026-43793

CVE-2026-43793 affects macOS environments where improper handling of environment variables could lead to unexpected system termination. Connected sources confirm concrete remediation: Apple has fixed the issue in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The root cause is n...

CVE-2026-43681

CVE-2026-43681 is a local, kernel-memory-access buffer overflow in macOS components fixed by improved bounds checking. Affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The vulnerability enables a local user to read kernel memory. The CVE entry confirms the root cause as a ...

CVE-2026-64771

CVE-2026-64771 involves a buffer overflow resolved by improved bounds checking. Affected software includes iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6. The issue could enable remote-induced app termination or heap corruption. Remediation is to updat...

CVE-2026-43814

CVE-2026-43814 is a use-after-free vulnerability reported by multiple sources and scored CVSS v3.1 = 9.8 (CRITICAL) . It involves memory-management weaknesses that could allow an app to trigger an unexpected system termination. Affected platforms include Apple's iOS, iPadOS, macOS Tahoe, tvOS, an...

CVE-2026-39874

CVE-2026-39874 describes a permissions issue that could allow a malicious app to gain root privileges. Affected software includes macOS Sequoia (15.7.8), macOS Sonoma (14.8.8), and macOS Tahoe (26.6). The root cause and exact vulnerable component are not detailed in the provided documents, but th...

CVE-2026-64767

CVE-2026-64767 describes a buffer overflow fixed by improved bounds checking in macOS components. Affected products/versions include macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The vulnerability could allow a remote attacker to terminate the system or corrupt kernel memory. T...

CVE-2026-43802

CVE-2026-43802 is an out-of-bounds write issue in macOS components that was fixed by improved bounds checking. The advisory indicates fixes are present in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6, and that an affected app may terminate the system as a consequence. NCSC’s advisory corro...

CVE-2026-64730

CVE-2026-64730 αφορά UI spoofing via websites that frame malicious content in WebKit/Safari. Leaks/impacts: an attacker could exploit UI spoofing when a site frames content; patched in Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Root cause: improv...

CVE-2026-43711

CVE-2026-43711 describes a memory corruption vulnerability in processing a maliciously crafted video file. Apple lists fixed versions across multiple platforms: iOS 26.6 and iPadOS 26.6; macOS Sequoia 15.7.8; macOS Sonoma 14.8.8; macOS Tahoe 26.6; tvOS 26.6; visionOS 26.6; and watchOS 26.6. The i...

CVE-2026-43750

CVE-2026-43750 describes a buffer overflow that was mitigated by improved bounds checking. The fixed products are macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The impact, as stated, is that an app may be able to execute arbitrary code out of its sandbox or with elevated privil...

CVE-2026-28926

CVE-2026-28926 is a race condition that was addressed with improved state handling in macOS, fixed in Sequoia 15.7.8 and Sonoma 14.8.8. The issue could allow an app to elevate privileges locally (LOCAL attack vector; HIGH impact in confidentiality, integrity, and availability per CVSS). The docum...

CVE-2026-43770

CVE-2026-43770 involves a race condition that was addressed with additional validation. The issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, and tvOS 26.6. According to the sources, an app may be able to access sensitive user data due to this race condition. The conn...

CVE-2026-43818

CVE-2026-43818 affects Apple OS components where processing a maliciously crafted image can trigger an integer overflow due to insufficient input validation. Apple has fixed this issue in iOS/iPadOS 26.6 and macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. The vulnerability’s root cause is an...

CVE-2026-43766

CVE-2026-43766 is an authorization issue in macOS where improper state management could allow viewing sensitive user data on a locked device with physical access. The vulnerability is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Public sources in the connected documen...

CVE-2026-64696

CVE-2026-64696 concerns macOS memory handling issues that may allow a remote attacker to trigger unexpected system termination or kernel memory corruption. Public descriptions indicate fixes were applied in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The incident is tied to i...

CVE-2026-28896

CVE-2026-28896 affects macOS memory handling and is addressed in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8. The issue could allow an attacker to cause an unexpected system termination or read kernel memory. Based on provided data, the vulnerability is local with no user interaction and require...

CVE-2026-43822

CVE-2026-43822 describes a use-after-free issue that Apple fixed across multiple OS versions. Affected components involve memory management in the Apple stack, with the impact described as potential unexpected termination of apps or system components. The fixed versions reported are iOS 26.6 and ...

CVE-2026-64747

CVE-2026-64747 is a buffer overflow vulnerability fixed by improved size validation. It affects Apple platforms including iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue may allow an app to execute arbitrary code ...

CVE-2026-64710

CVE-2026-64710 describes a privacy issue in macOS where an app may leak sensitive user information. The vulnerability is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The CVSS 3.1 vector is LOCAL, with LOW attack complexity and NONE privileges required, but USER INTERA...

CVE-2026-64751

The CVE-2026-64751 entry describes a use-after-free vulnerability that affected Apple platforms and was mitigated in iOS/iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue can lead to unexpected system termination or kernel memory writes. The associated CVSSv3.1 ...

CVE-2026-64729

Technical details for CVE-2026-64729 are not publicly provided in the connected documents. Monitor for updates; the initial description lists a use-after-free issue fixed in 26.6 across Apple OSes.

CVE-2026-43773

CVE-2026-43773 is an out-of-bounds read issue that Apple fixed by improved bounds checking. Public advisories indicate the vulnerability affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.x, with mounting a maliciously crafted disk image potentially causing unexpected system te...

CVE-2026-64768

The CVE-2026-64768 issue is an out-of-bounds read vulnerability in Apple software addressed by input-validation improvements. It affects multiple Apple platforms (iOS/iPadOS, macOS, tvOS, visionOS) and is fixed in iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS ...

CVE-2026-43698

CVE-2026-43698 describes an injection issue that could allow an app to gain root privileges due to insufficient input validation. The connected sources specify a fix in macOS updates: macOS Sequoia 15.7.8 , macOS Sonoma 14.8.8 , and macOS Tahoe 26.6 . The CVE entry confirms the issue is addressed...

CVE-2026-64695

CVE-2026-64695 affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The issue relates to improved memory handling that could allow a remote attacker to cause unexpected system termination or corrupt kernel memory. Apple has released fixes in the listed macOS versions, addressi...

CVE-2026-43765

CVE-2026-43765 concerns macOS where an app could modify protected parts of the filesystem due to inadequate handling of symlinks. Public advisories indicate the issue is resolved by fixes in macOS updates: Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. The root cause, as described in the CVE reco...

CVE-2026-64744

CVE-2026-64744 affects macOS kernel memory disclosure via an information leak that was mitigated by additional validation. Public sources confirm fixes in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6, addressing the vulnerability by strengthening validation and sandboxing to prevent unauth...

CVE-2026-43821

CVE-2026-43821 pertains to an access issue in Apple Safari/WebKit where an app may read files outside its sandbox. The vulnerability is addressed in Safari 26.6 and corresponding OS updates (iOS/iPadOS/macOS Tahoe 26.6, tvOS, visionOS, watchOS 26.6). The NVD/NCSC entries describe improved access ...

CVE-2026-64713

CVE-2026-64713 affects WebKit in Apple platforms (Safari/WebKit stack on macOS Sonoma/Sequoia and related OS versions). The issue allowed websites to determine if a user had visited a specific link. Apple fixed this in Safari 26.6 and OS updates (iOS/iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visi...

CVE-2026-43749

CVE-2026-43749 describes a parsing issue in the handling of directory paths that could allow a local attacker to gain root privileges. Apple fixed the flaw by improving path validation in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The issue is addressed in the security conte...