Back to search

Apple

macOS

Apple operating system for Mac computers.

Tahoe 26 Current train Sequoia 15 Switch to this train Sonoma 14 Switch to this train Ventura 13 EOL Switch to this train Monterey 12 EOL Switch to this train
Current version
Last checked: 2026-09-05

26.6.2

Release date
August 17, 2026
Security status
100 high-severity CVEs tracked in the last 90 days. Current version not affected.

Source

SOFA Apple Feed

Public release notes are linked for the latest stored release.

View release notes Subscribe to updates

Release history

See the latest published releases stored for this product.

Version Published Notes
26.6.2 2026-08-17 Release Notes
26.6.1 2026-08-06 Release Notes
26.6 2026-07-27 Release Notes
26.5.2 2026-06-29 Release Notes
26.5.1 2026-06-01 Release Notes
26.5 2026-05-11 Release Notes
26.4.1 2026-04-09 Release Notes
26.4 2026-03-24 Release Notes
26.3.2 2026-03-10 Release Notes
26.3.1 2026-03-04 Release Notes

Vulnerability tracking

versionPing monitors CVEs for this product. Matching CVEs are listed below. We only display CVEs with a CVSS score of 7.0 or higher that were published within the last 90 days.

Affected status is inferred from published affected version ranges where available. Always verify against the vendor advisory before making production decisions.

CVE Severity Published Status Summary
CVE-2026-43670 HIGH (8.8) 2026-08-25 Current versionnot affected

A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy.

Affected versions
  • From (including) 0 - Up to (excluding) 26.5
CVE-2026-43794 HIGH (8.8) 2026-08-17 Current versionnot affected

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6.2
CVE-2026-65346 HIGH (8.8) 2026-08-17 Current versionnot affected

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to arbitrary code execution.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6.2
CVE-2026-65343 HIGH (7.5) 2026-08-17 Current versionnot affected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. A remote attacker may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6.2
CVE-2026-65400 CRITICAL (9.8) 2026-08-06 Current versionnot affected

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.9
  • From (including) 0 - Up to (excluding) 15.7.9
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6.1
CVE-2026-43757 CRITICAL (9.8) 2026-07-27 Current versionnot affected

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64737 HIGH (8.2) 2026-07-27 Current versionnot affected

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43805 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-39873 CRITICAL (9.8) 2026-07-27 Current versionnot affected

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious SMB server may lead to unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43813 HIGH (7.1) 2026-07-27 Current versionnot affected

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A maliciously crafted app may be able to bypass code signing enforcement.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64740 CRITICAL (9.3) 2026-07-27 Current versionnot affected

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to break out of its sandbox.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64691 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43673 HIGH (7.8) 2026-07-27 Current versionnot affected

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted audio file may corrupt process memory.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64783 HIGH (8.8) 2026-07-27 Current versionnot affected

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43809 CRITICAL (9.8) 2026-07-27 Current versionnot affected

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43777 HIGH (7.5) 2026-07-27 Current versionnot affected

This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote attacker may be able to cause a denial of service.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43799 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43776 HIGH (7.8) 2026-07-27 Current versionnot affected

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Affected versions
  • From (including) 0 - Up to (excluding) 15.7.8
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43672 HIGH (7.1) 2026-07-27 Current versionnot affected

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious application may be able to bypass Privacy preferences.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43760 HIGH (8.6) 2026-07-27 Current versionnot affected

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access user-sensitive data.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64716 HIGH (7.8) 2026-07-27 Current versionnot affected

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted image may corrupt process memory.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-28982 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64700 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64757 HIGH (8.8) 2026-07-27 Current versionnot affected

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64720 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43812 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 15.7.8
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64746 CRITICAL (9.8) 2026-07-27 Current versionnot affected

An authorization issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. An app may be able to add contacts without user authorization.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64697 CRITICAL (9.8) 2026-07-27 Current versionnot affected

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43730 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to fingerprint the user.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-28911 CRITICAL (9.8) 2026-07-27 Current versionnot affected

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43771 HIGH (7.1) 2026-07-27 Current versionnot affected

A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43747 HIGH (7.1) 2026-07-27 Current versionnot affected

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Parsing a maliciously crafted file may lead to an unexpected app termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-28931 HIGH (8.8) 2026-07-27 Current versionnot affected

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. Connecting to a malicious NFS server may lead to kernel memory corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43710 CRITICAL (9.8) 2026-07-27 Current versionnot affected

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker may be able to cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64731 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.

Affected versions
  • From (including) 0 - Up to (excluding) 15.7.8
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64766 HIGH (7.8) 2026-07-27 Current versionnot affected

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43803 CRITICAL (9.8) 2026-07-27 Current versionnot affected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote attacker may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-39875 HIGH (7.8) 2026-07-27 Current versionnot affected

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64770 CRITICAL (9.8) 2026-07-27 Current versionnot affected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64727 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.6, tvOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43793 CRITICAL (9.8) 2026-07-27 Current versionnot affected

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64726 CRITICAL (9.8) 2026-07-27 Current versionnot affected

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker in physical proximity may be able to corrupt process memory.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43681 HIGH (7.1) 2026-07-27 Current versionnot affected

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A local user may be able to read kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64771 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 15.7.8
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43814 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-39874 HIGH (7.8) 2026-07-27 Current versionnot affected

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64767 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43802 CRITICAL (9.8) 2026-07-27 Current versionnot affected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43711 HIGH (7.8) 2026-07-27 Current versionnot affected

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43750 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-28926 HIGH (7.0) 2026-07-27 Current versionnot affected

A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.4. An app may be able to elevate privileges.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.4
CVE-2026-43818 HIGH (8.8) 2026-07-27 Current versionnot affected

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to arbitrary code execution.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64696 CRITICAL (9.8) 2026-07-27 Current versionnot affected

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-28896 HIGH (7.7) 2026-07-27 Current versionnot affected

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An attacker may be able to cause unexpected system termination or read kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.4
CVE-2026-43822 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64747 HIGH (7.8) 2026-07-27 Current versionnot affected

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to execute arbitrary code with kernel privileges.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64751 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64729 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43773 CRITICAL (9.8) 2026-07-27 Current versionnot affected

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64768 HIGH (8.1) 2026-07-27 Current versionnot affected

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may cause an unexpected app termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43698 HIGH (7.8) 2026-07-27 Current versionnot affected

An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to gain root privileges.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
CVE-2026-64695 CRITICAL (9.8) 2026-07-27 Current versionnot affected

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64713 HIGH (8.1) 2026-07-27 Current versionnot affected

This issue was addressed with improved checks. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Websites may know if the user has visited a given link.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43749 HIGH (7.8) 2026-07-27 Current versionnot affected

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64725 HIGH (7.1) 2026-07-27 Current versionnot affected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause a denial-of-service.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43728 HIGH (7.5) 2026-07-27 Current versionnot affected

This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26.6. An attacker may be able to modify the state of the Keychain.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43682 CRITICAL (9.8) 2026-07-27 Current versionnot affected

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64772 CRITICAL (9.8) 2026-07-27 Current versionnot affected

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 15.7.8
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43694 CRITICAL (9.8) 2026-07-27 Current versionnot affected

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or write kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-39877 HIGH (7.8) 2026-07-27 Current versionnot affected

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to disclose kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.5
CVE-2026-64764 HIGH (7.8) 2026-07-27 Current versionnot affected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43769 CRITICAL (9.8) 2026-07-27 Current versionnot affected

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64733 CRITICAL (9.8) 2026-07-27 Current versionnot affected

This issue was addressed with improved data protection. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to fingerprint the user.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-28973 HIGH (8.6) 2026-07-27 Current versionnot affected

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. A malicious app may be able to break out of its sandbox.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64749 HIGH (7.8) 2026-07-27 Current versionnot affected

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, visionOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 15.7.8
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64698 CRITICAL (9.8) 2026-07-27 Current versionnot affected

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or read kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64765 HIGH (7.8) 2026-07-27 Current versionnot affected

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43729 HIGH (7.8) 2026-07-27 Current versionnot affected

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. Processing a maliciously crafted image may corrupt process memory.

Affected versions
  • From (including) 0 - Up to (excluding) 15.7.8
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-28928 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64704 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43748 CRITICAL (9.8) 2026-07-27 Current versionnot affected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 15.7.8
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43764 CRITICAL (9.8) 2026-07-27 Current versionnot affected

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-28945 HIGH (7.1) 2026-07-27 Current versionnot affected

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to bypass network restrictions.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64694 CRITICAL (9.8) 2026-07-27 Current versionnot affected

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43733 HIGH (7.8) 2026-07-27 Current versionnot affected

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a maliciously crafted image may corrupt process memory.

Affected versions
  • From (including) 0 - Up to (excluding) 15.7.8
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-28912 HIGH (7.8) 2026-07-27 Current versionnot affected

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.7, macOS Tahoe 26.6. A user may be able to elevate privileges.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.7
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64769 CRITICAL (9.8) 2026-07-27 Current versionnot affected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43772 HIGH (8.2) 2026-07-27 Current versionnot affected

A path traversal issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to break out of its sandbox.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43779 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to intercept network connections intended for another process.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64774 CRITICAL (9.8) 2026-07-27 Current versionnot affected

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43807 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious accessory may be able to cause unexpected app termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.5.2
CVE-2026-64762 CRITICAL (9.8) 2026-07-27 Current versionnot affected

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43780 HIGH (7.8) 2026-07-27 Current versionnot affected

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted texture may lead to unexpected app termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64719 HIGH (8.1) 2026-07-27 Current versionnot affected

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43755 HIGH (7.0) 2026-07-27 Current versionnot affected

A race condition was addressed with improved state management. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64758 HIGH (7.8) 2026-07-27 Current versionnot affected

The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64739 HIGH (8.8) 2026-07-27 Current versionnot affected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker may be able to cause unexpected app termination.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-28981 HIGH (7.8) 2026-07-27 Current versionnot affected

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to arbitrary code execution.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64703 CRITICAL (9.8) 2026-07-27 Current versionnot affected

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64702 CRITICAL (9.8) 2026-07-27 Current versionnot affected

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to break out of its sandbox.

Affected versions
  • From (including) 0 - Up to (excluding) 14.8.8
  • From (including) 0 - Up to (excluding) 15.7.8
Show 1 more
  • From (including) 0 - Up to (excluding) 26.6

20 further matching CVEs are not displayed. The table shows the 100 most relevant of 120, recently published first.