CVE-2026-28900

CVE-2026-28900 affects macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8, where a maliciously crafted ZIP archive could bypass Gatekeeper checks via insufficient file quarantine validation. The vulnerability’s remediation is the OS updates Sequoia 15.7.8 and Sonoma 14.8.8, which implement additional c...

CVE-2026-43776

CVE-2026-43776 is a buffer overflow vulnerability described by Apple and NVD as addressed with improved bounds checking. Affected platforms include iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6. The issue could allow processing of a maliciously crafted file to terminate an app...

CVE-2026-43672

CVE-2026-43672 describes an authorization issue in macOS where improved state management fixes a vulnerability that could allow a malicious application to bypass Privacy preferences. The issue is resolved in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The connected sources co...

CVE-2026-43760

CVE-2026-43760 is an access issue in macOS components that could allow an app to access user-sensitive data. The NVD/NVD-enriched entries and related advisories specify that the vulnerability affects macOS Sonoma 14.8.8 and macOS Tahoe 26.6 (and Sequoia/Sonoma/Tahoe family in some feeds), with an...

CVE-2026-64741

CVE-2026-64741 describes a permissions issue in Apple platforms where an app may read a persistent device identifier. Connected sources confirm the vulnerability affects iOS, iPadOS, tvOS, visionOS, and watchOS, with the root cause labeled as a permissions-related flaw that could grant access to ...

CVE-2026-64716

CVE-2026-64716 is a memory handling vulnerability in Apple platforms. Processing a maliciously crafted image may corrupt process memory. Affected products/versions include iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Roo...

CVE-2026-28982

This CVE affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. It centers on a race condition mitigated by improved locking, with the impact that a remote user could trigger an unexpected system termination or corrupt kernel memory. Remediation is provided by the fixed OS versi...

CVE-2026-64700

CVE-2026-64700 describes a use-after-free vulnerability that Apple addressed via improved memory management. The issue affects multiple Apple platforms and is fixed in: iOS 26.6 and iPadOS 26.6; macOS Sequoia 15.7.8; macOS Sonoma 14.8.8; macOS Tahoe 26.6; tvOS 26.6; visionOS 26.6; watchOS 26.6. T...

CVE-2026-64757

CVE-2026-64757 describes a memory corruption issue addressed by Apple through improved state management. The vulnerability affects multiple Apple platforms and applications, most notably Safari and WebKit components, with fixes in Safari 26.6 and OS updates for iOS 26.6, iPadOS 26.6, macOS Tahoe ...

CVE-2026-64720

CVE-2026-64720 is a race-condition vulnerability in Apple platforms addressed by updates. The NVD entry states a race condition with improved state handling that can cause an app to terminate the system. Affected products include iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS ...

CVE-2026-28849

CVE-2026-28849 affects macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8. It describes a vulnerability where a maliciously crafted ZIP archive may bypass Gatekeeper checks, enabling potential execution with local access and user interaction required. Apple fixes implemented include improved checks/val...

CVE-2026-43812

CVE-2026-43812 is described as a memory-management use-after-free issue fixed in Apple OS updates: iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6. The initial entry states exploitation could cause an unexpected system termination, with a CVSSv3.1 base score ...

CVE-2026-43804

CVE-2026-43804 affects Apple WebKit/Safari on macOS, iOS, iPadOS, visionOS, and macOS Tahoe. The issue is a state-management vulnerability that could allow visiting a malicious website to trigger an app denial-of-service. Apple patched this in Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6,...

CVE-2026-43756

CVE-2026-43756 is a logic issue addressed by Apple in macOS security updates. The flaw is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The description notes that an app may be able to access user-sensitive data due to improved validation. No exploit details or specifi...

CVE-2026-64707

CVE-2026-64707 : A permissions issue in the BackgroundAssets component allowed an app to delete files for which it had no permission. Root cause cited as insufficient validation in deletion/permission checks. Fixed in macOS Sonoma 14.8.8, macOS Sequoia 15.7.8, macOS Tahoe 26.6, iOS/iPadOS 26.6, a...

CVE-2026-64711

CVE-2026-64711 affects Apple platforms where improper entitlement checks could allow an app to leak sensitive user information. Concrete details in the initial record specify the affected software versions and fixes: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Taho...

CVE-2026-64746

CVE-2026-64746 involves an authorization flaw in Apple platforms where an app could add contacts without user consent. The issue is caused by inadequate validation of authorization checks and has been fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, and watchOS 26.6. Connected ...

CVE-2026-43767

CVE-2026-43767 is a macOS memory-handling issue that can cause an app to trigger an unexpected system termination. The available sources indicate the vulnerability affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6, with patches delivered in those versions. The root cause is ...

CVE-2026-64697

CVE-2026-64697 affects macOS components with memory handling issues that could let an app cause an unexpected system termination or corrupt kernel memory. Apple has fixed this in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The description notes a memory-management remediation...

CVE-2026-43730

The CVE-2026-43730 issue is a permissions-related flaw in Apple platforms that could allow an app to fingerprint the user. It affects iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6, with Apple outlining the fix as part of these updates. The ROOT CAUSE is de...

CVE-2026-28911

CVE-2026-28911 describes a memory-corruption issue that could allow a malicious app to corrupt memory of a system process. Multiple connected sources confirm the vulnerability is addressed by memory-management fixes and are fixed in macOS Sonoma 14.8.8 and macOS Tahoe 26.6. The NVD/NCSC/CIRCL ref...

CVE-2026-43819

CVE-2026-43819 is an access issue addressed by stricter sandbox restrictions and fixed in macOS Tahoe 26.6. The vulnerability could have allowed an app to access sensitive user data via local access (attack vector: LOCAL, UI required). The public documentation attributes a MEDIUM base score (CVSS...

CVE-2026-43771

CVE-2026-43771 involves a stack overflow that was fixed by improved input validation. Affected macOS versions are Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6, where an app may crash the system (DoS) via this issue. Remediation is to apply the fixed updates (Sequoia 15.7.8, Sonoma 14.8.8, Tahoe ...

CVE-2026-43747

Affected software: macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Root cause: an out-of-bounds read mitigated by improved bounds checking when parsing a maliciously crafted file. Impact: may cause unexpected application termination. Exploitation details: not provided beyond the CVSS...

CVE-2026-28931

CVE-2026-28931 involves a buffer overflow that was addressed through improved bounds checking. The vulnerability is fixed in Apple OS updates: iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6. The public description notes that connecting to a malicious NFS server may lead to k...

CVE-2026-43710

CVE-2026-43710 is associated with macOS memory-management issues fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The description across sources indicates that an attacker could trigger unexpected system termination or corrupt kernel memory due to improved memory handling...

CVE-2026-64731

CVE-2026-64731 is a path handling issue mitigated by improved validation in macOS Sequoia 15.7.8 and macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox. Remediation in the provided docs is to update to the fixed macOS versions (Sequoia 15.7.8, Tahoe 26.6). No exploit detail...

CVE-2026-64766

According to connected advisories, CVE-2026-64766 involves an integer overflow in Apple device software that is mitigated by input validation fixes. The issue affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.x, and related iOS/iPadOS/watchOS/tvOS/visionOS versions, with the impac...

CVE-2026-43803

CVE-2026-43803 is an out-of-bounds write vulnerability in CoreAudio that Apple fixed in watchOS 26.6 (also addressed in iOS/iPadOS/macOS/tvOS/visionOS 26.6 and later). The watchOS entry notes an issue could allow a remote attacker to cause unexpected system termination; remediation is applying th...

CVE-2026-39875

CVE-2026-39875 describes a permissions issue in macOS that could allow a malicious app to gain root privileges via a CUPS logic flaw. Affected products/versions and fixes are documented across multiple sources: Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The underlyi...

CVE-2026-64770

CVE-2026-64770 describes an out-of-bounds write vulnerability fixed in multiple Apple OS releases. Affected: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. Root cause: memory safety issue (out-of-bounds write) leading to possible heap...

CVE-2026-64727

CVE-2026-64727 is a type-confusion vulnerability addressed by Apple with improved memory handling. It affects macOS Tahoe 26.6 and tvOS 26.6, where an app may cause an unexpected system termination. The CVSS score is 9.8 (CRITICAL), with attack vector NETWORK and no user interaction required. Rem...

CVE-2026-43792

CVE-2026-43792 is an authorization issue addressed by updates in Safari 26.6 and macOS Tahoe 26.6 . The description from the CVE notes that an app may be able to access sensitive user data, with the fix achieved via improved state management. Apple’s security content confirms the Safari 26.6 upda...

CVE-2026-64726

CVE-2026-64726 relates to memory handling issues in Apple OS components that may allow an attacker in physical proximity to corrupt process memory. Public sources consolidate this as a set of memory-management defects across macOS, iOS/iPadOS, tvOS, visionOS, and watchOS. The NVD/NCSC entries ind...

CVE-2026-43793

CVE-2026-43793 affects macOS environments where improper handling of environment variables could lead to unexpected system termination. Connected sources confirm concrete remediation: Apple has fixed the issue in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The root cause is n...

CVE-2026-43681

CVE-2026-43681 is a local, kernel-memory-access buffer overflow in macOS components fixed by improved bounds checking. Affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The vulnerability enables a local user to read kernel memory. The CVE entry confirms the root cause as a ...

CVE-2026-64771

CVE-2026-64771 involves a buffer overflow resolved by improved bounds checking. Affected software includes iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6. The issue could enable remote-induced app termination or heap corruption. Remediation is to updat...

CVE-2026-43814

CVE-2026-43814 is a use-after-free vulnerability reported by multiple sources and scored CVSS v3.1 = 9.8 (CRITICAL) . It involves memory-management weaknesses that could allow an app to trigger an unexpected system termination. Affected platforms include Apple's iOS, iPadOS, macOS Tahoe, tvOS, an...

CVE-2026-39874

CVE-2026-39874 describes a permissions issue that could allow a malicious app to gain root privileges. Affected software includes macOS Sequoia (15.7.8), macOS Sonoma (14.8.8), and macOS Tahoe (26.6). The root cause and exact vulnerable component are not detailed in the provided documents, but th...

CVE-2026-43802

CVE-2026-43802 is an out-of-bounds write issue in macOS components that was fixed by improved bounds checking. The advisory indicates fixes are present in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6, and that an affected app may terminate the system as a consequence. NCSC’s advisory corro...

CVE-2026-64767

CVE-2026-64767 describes a buffer overflow fixed by improved bounds checking in macOS components. Affected products/versions include macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The vulnerability could allow a remote attacker to terminate the system or corrupt kernel memory. T...

CVE-2026-64730

CVE-2026-64730 αφορά UI spoofing via websites that frame malicious content in WebKit/Safari. Leaks/impacts: an attacker could exploit UI spoofing when a site frames content; patched in Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Root cause: improv...

CVE-2026-43711

CVE-2026-43711 describes a memory corruption vulnerability in processing a maliciously crafted video file. Apple lists fixed versions across multiple platforms: iOS 26.6 and iPadOS 26.6; macOS Sequoia 15.7.8; macOS Sonoma 14.8.8; macOS Tahoe 26.6; tvOS 26.6; visionOS 26.6; and watchOS 26.6. The i...

CVE-2026-43750

CVE-2026-43750 describes a buffer overflow that was mitigated by improved bounds checking. The fixed products are macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The impact, as stated, is that an app may be able to execute arbitrary code out of its sandbox or with elevated privil...

CVE-2026-28926

CVE-2026-28926 is a race condition that was addressed with improved state handling in macOS, fixed in Sequoia 15.7.8 and Sonoma 14.8.8. The issue could allow an app to elevate privileges locally (LOCAL attack vector; HIGH impact in confidentiality, integrity, and availability per CVSS). The docum...

CVE-2026-43770

CVE-2026-43770 involves a race condition that was addressed with additional validation. The issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, and tvOS 26.6. According to the sources, an app may be able to access sensitive user data due to this race condition. The conn...

CVE-2026-43818

CVE-2026-43818 affects Apple OS components where processing a maliciously crafted image can trigger an integer overflow due to insufficient input validation. Apple has fixed this issue in iOS/iPadOS 26.6 and macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. The vulnerability’s root cause is an...

CVE-2026-43766

CVE-2026-43766 is an authorization issue in macOS where improper state management could allow viewing sensitive user data on a locked device with physical access. The vulnerability is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Public sources in the connected documen...

CVE-2026-64696

CVE-2026-64696 concerns macOS memory handling issues that may allow a remote attacker to trigger unexpected system termination or kernel memory corruption. Public descriptions indicate fixes were applied in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The incident is tied to i...

CVE-2026-28896

CVE-2026-28896 affects macOS memory handling and is addressed in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8. The issue could allow an attacker to cause an unexpected system termination or read kernel memory. Based on provided data, the vulnerability is local with no user interaction and require...