Critical · 9.8 CVE-2026-64731 EUVD-2026-49564GHSA-33vj-r832-vf96

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious ap…

Published Jul 27, 2026 · Updated Jul 28, 2026 · Assigned by apple

Vendor: Apple Product: macOS Platform: macOS

Description

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.

Affected products

Vendor	Product	Affected	Fixed
Apple	macOS	< 15.7.8, < 26.6	15.7.8

Advisories 2

WID-SEC-2026-2543 Apple macOS (Tahoe, Sonoma und Sequoia): Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 14, 2026
NCSC-2026-0267 Kwetsbaarheden verholpen in Apple MacOS NCSC-NL (Netherlands) · Jul 28, 2026

References

https://support.apple.com/en-us/128067
https://support.apple.com/en-us/128071

EUVD	v3.1	9.8
CISA-ADP	v3.1	9.8