Summary
Ein Angreifer kann mehrere Schwachstellen in Apple macOS Tahoe, Sonoma und Sequoia ausnutzen, um seine Privilegien zu erhöhen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.
Product
Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.
Vulnerabilities 198
-
Critical 9.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A …
-
Critical 9.8
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, …
-
Critical 9.8
A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8,…
-
Critical 9.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8…
-
Critical 9.8CVE-2026-43682 Public exploit
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8…
-
Critical 9.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8…
-
Critical 9.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8…
-
Critical 9.8
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS …
-
Critical 9.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26…
-
Critical 9.8
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonom…
-
Critical 9.8
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.1…
-
Critical 9.8
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS So…
-
Critical 9.8
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10…
-
Critical 9.8
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS S…
-
Critical 9.8
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.…
-
Critical 9.8
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.…
-
Critical 9.8
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issu…
-
Critical 9.8
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.…
-
Critical 9.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS…
-
Critical 9.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS…
-
Critical 9.8CVE-2026-43805 Public exploit
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Seq…
-
Critical 9.8
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, i…
-
Critical 9.8
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.1…
-
Critical 9.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 …
-
Critical 9.8
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.…
-
Critical 9.8
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, …
-
Critical 9.8
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.…
-
Critical 9.8
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.6. An app may be a…
-
Critical 9.8
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS So…
-
Critical 9.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Seq…
-
Critical 9.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8…
-
Critical 9.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8…
-
Critical 9.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8…
-
Critical 9.8
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.…
-
Critical 9.8
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS …
-
Critical 9.8
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.8, macO…
-
Critical 9.8
A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS …
-
Critical 9.8
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tah…
-
Critical 9.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 …
-
Critical 9.8
A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.6, tvOS 26.6.…
-
Critical 9.8
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, …
-
Critical 9.8
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe …
-
Critical 9.8
This issue was addressed with improved data protection. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26…
-
Critical 9.8
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, …
-
Critical 9.8
An authorization issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, i…
-
Critical 9.8
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, …
-
Critical 9.8
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.1…
-
Critical 9.8
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sequo…
-
Critical 9.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS…
-
Critical 9.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS…
-
Critical 9.8
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, i…
-
Critical 9.8
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadO…
-
Critical 9.8
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10…
-
Critical 9.8
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 2…
-
Critical 9.3
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in …
-
Critical 9.1
This issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.…
-
High 8.8
Apache HTTP Server: http2: double free and possible RCE on early reset
Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.
-
High 8.8
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS T…
-
High 8.8
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonom…
-
High 8.8
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10…
-
High 8.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS…
-
High 8.8
A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6, iOS 18.7.10…
-
High 8.8
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and …
-
High 8.6
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10…
-
High 8.6
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Taho…
-
High 8.2
A path traversal issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS…
-
High 8.2
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS…
-
High 8.1
This issue was addressed with improved checks. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Taho…
-
High 8.1
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6, iOS 18.7…
-
High 8.1
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS…
-
High 7.8CVE-2026-28912 Public exploit
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.…
-
High 7.8
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonom…
-
High 7.8
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sono…
-
High 7.8CVE-2026-39875 Public exploit
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sono…
-
High 7.8
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 …
-
High 7.8
An injection issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 1…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iP…
-
High 7.8
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18…
-
High 7.8
A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iO…
-
High 7.8CVE-2026-43724 Public exploit
The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 …
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 …
-
High 7.8
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in …
-
High 7.8
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, i…
-
High 7.8
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macO…
-
High 7.8CVE-2026-43783 Public exploit
A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be a…
-
High 7.8
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Taho…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 …
-
High 7.8CVE-2026-64747 Public exploit
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, i…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 …
-
High 7.8
The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPad…
-
High 7.8
An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.10 and iPad…
-
High 7.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS…
-
High 7.8
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10…
-
High 7.8
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.…
-
High 7.7
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 1…
-
High 7.5
The issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS …
-
High 7.5
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.…
-
High 7.5
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7…
-
High 7.5
This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26.6. An attacker may be…
-
High 7.5
This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8…
-
High 7.5
Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this …
-
High 7.5
The issue was addressed with improved authentication. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, …
-
High 7.1
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, ma…
-
High 7.1
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS…
-
High 7.1
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonom…
-
High 7.1
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS S…
-
High 7.1
A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonom…
-
High 7.1CVE-2026-43813 Public exploit
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, mac…
-
High 7.1
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.1…
-
High 7.1CVE-2026-64725 Public exploit
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS…
-
High 7.0
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma …
-
High 7.0
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma …
-
High 7.0
A race condition was addressed with improved state management. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe …
-
Medium 6.5
wrong proxy connection reuse with credentials
curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.
-
Medium 6.5
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequo…
-
Medium 6.5
A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2,…
-
Medium 6.5
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5…
-
Medium 6.5
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, …
-
Medium 6.5
An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.6, macOS Tahoe 26…
-
Medium 6.5
This issue was addressed through improved state management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.…
-
Medium 6.5
An access issue was addressed with improved access restrictions. This issue is fixed in Safari 26.6, iOS 18.7.10 and iP…
-
Medium 6.5
A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.…
-
Medium 6.5
The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.…
-
Medium 6.5
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 a…
-
Medium 6.5
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7…
-
Medium 6.3
A race condition was addressed with improved state handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS…
-
Medium 6.2
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 an…
-
Medium 6.1
A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.8. An attacker with ph…
-
Medium 5.5
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26. An app may b…
-
Medium 5.5
An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.7…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS T…
-
Medium 5.5
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macO…
-
Medium 5.5
A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonom…
-
Medium 5.5
A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8…
-
Medium 5.5
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is …
-
Medium 5.5
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.8, macO…
-
Medium 5.5
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma …
-
Medium 5.5
The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26…
-
Medium 5.5
The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26…
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 an…
-
Medium 5.5
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26…
-
Medium 5.5
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS…
-
Medium 5.5
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7.10 and iPadO…
-
Medium 5.5
A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8,…
-
Medium 5.5
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS…
-
Medium 5.5
An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.6, watchOS 2…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, vision…
-
Medium 5.5
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.8, macOS S…
-
Medium 5.5
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma …
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8…
-
Medium 5.5
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS S…
-
Medium 5.5
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS…
-
Medium 5.5
This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS …
-
Medium 5.5
This issue was addressed with improved data protection. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6…
-
Medium 5.5
This issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPad…
-
Medium 5.5
An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.10 and i…
-
Medium 5.5
This issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPad…
-
Medium 5.5
A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.6. A loc…
-
Medium 5.5
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, …
-
Medium 5.5
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26…
-
Medium 5.5
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, mac…
-
Medium 5.5
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.6. An app may…
-
Medium 5.5
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 2…
-
Medium 5.5
A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8,…
-
Medium 5.5CVE-2026-64705 Public exploit
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS S…
-
Medium 5.5
A permissions issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS …
-
Medium 5.5
A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonom…
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 …
-
Medium 5.5
A privacy issue was addressed by removing sensitive data. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.…
-
Medium 5.5
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Seq…
-
Medium 5.5
A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18…
-
Medium 5.5
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, Safari 27, iO…
-
Medium 5.5
This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS …
-
Medium 5.5
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7…
-
Medium 5.5
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia …
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 …
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadO…
-
Medium 5.5
An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10,…
-
Medium 5.5
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26…
-
Medium 5.5
The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, …
-
Medium 5.5
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, m…
-
Medium 5.5
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7…
-
Medium 5.5
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, …
-
Medium 5.5
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, i…
-
Medium 5.5
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in …
-
Medium 5.3
token leak with redirect and netrc
When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some circumstances. If the hostname that the first request is redirected to has informa…
-
Medium 5.0
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8…
-
Medium 4.7
A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14…
-
Medium 4.7
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma …
-
Medium 4.7
A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able …
-
Medium 4.6
This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS …
-
Medium 4.6
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, mac…
-
Medium 4.6
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS…
-
Low 3.3
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 26.6 and iPadOS 2…
-
Low 2.4
This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, …
Revision history
-
#4
Referenz(en) aufgenommen: CVE-2026-28899, CVE-2026-28933, CVE-2026-43702, CVE-2026-43761, CVE-2026-43762, CVE-2026-43783, CVE-2026-43808, CVE-2026-43815, CVE-2026-64701, CVE-2026-64705, CVE-2026-64717, CVE-2026-65353, CVE-2026-65357, CVE-2026-65371, CVE-2026-65375, CVE-2026-65407, CVE-2026-84562, CVE-2026-28836, CVE-2026-64714, CVE-2026-65404, CVE-2026-84489, CVE-2026-86902
-
#3
PoC aufgenommen CVE-2026-39868
-
#2
PoC aufgenommen CVE-2026-39875
-
#1
Initiale Fassung
References
-
Apple Security Advisory 128067 vom 2026-07-27
https://support.apple.com/en-us/128067
-
Apple Security Advisory 128071 vom 2026-07-27
https://support.apple.com/en-us/128071
-
Apple Security Advisory 128072 vom 2026-07-27
https://support.apple.com/en-us/128072
-
Apple Security Advisory vom 2026-07-27
https://lists.apple.com/archives/list/security-announce@lists.apple.com/thread/6UHEM4V3BFNU73GLKO4ZM3UYJMOZJE3D/
-
Apple Security Advisory vom 2026-07-27
https://lists.apple.com/archives/list/security-announce@lists.apple.com/thread/MISDQNJRC3W6IM64UCNJF27GGF2IKAYH/
-
Apple Security Advisory vom 2026-07-27
https://lists.apple.com/archives/list/security-announce@lists.apple.com/thread/S7TKZCT5AE7BTXFUIEIB6K6DOKAMLYX4/
-
PoC CVE-2026-39875
https://github.com/mac-123456789-lab/cve-2026-39875-macos-cups-lpe
-
PoC CVE-2026-39868
https://github.com/vschko/CaseStudies/tree/main/CVE-2026-39868