Search
Find a vulnerability
Search criteria
2 vulnerabilities found for APPLE-SA-07-27-2026-2 macOS Tahoe by Apple
GCVE-1988-2026-0288
Vulnerability from gna-1988 – Published: 2026-09-08 11:40 – Updated: 2026-09-11 11:47
VLAI
EPSS
VEX
Title
APPLE-SA-07-27-2026-2 macOS Tahoe 26.6
Summary
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
APPLE-SA-07-27-2026-2 macOS Tahoe 26.6
macOS Tahoe 26.6 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/en-us/128067.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Accounts
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: An access issue was addressed with additional sandbox
restrictions.
CVE-2026-43819: Omar Cerrito
Accounts
Available for: macOS Tahoe
Impact: An app may be able to gain root privileges
Description: A parsing issue in the handling of directory paths was
addressed with improved path validation.
CVE-2026-43749: Adam Franke, Ashish Kunwar, Trung Nguyen (@everping) of
CyStack
Accounts Framework
Available for: macOS Tahoe
Impact: An app may be able to fingerprint the user
Description: This issue was addressed with improved data protection.
CVE-2026-64733: Rosyna Keller of Totally Not Malicious Software
(paradisefacade.com)
afpfs
Available for: macOS Tahoe
Impact: A remote attacker may be able to cause unexpected system
termination or corrupt kernel memory
Description: A buffer overflow was addressed with improved bounds
checking.
CVE-2026-64767: Dave G.
apache
Available for: macOS Tahoe
Impact: A remote attacker may be able to cause a denial-of-service
Description: This is a vulnerability in open source code and Apple
Software is among the affected projects. The CVE-ID was assigned by a
third party. Learn more about the issue and CVE-ID at cve.org.
CVE-2026-23918: Юлия Мерцалова
APFS
Available for: macOS Tahoe
Impact: A remote user may be able to cause unexpected system termination
or corrupt kernel memory
Description: The issue was addressed with improved memory handling.
CVE-2026-64695: Peter Malone
App Store
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with improved checks.
CVE-2026-43801: Rahul Raj
Apple Account
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: A race condition was addressed with improved state
handling.
CVE-2026-43781: Pinak Oza
Apple Account
Available for: macOS Tahoe
Impact: A malicious app may be able to break out of its sandbox
Description: An authorization issue was addressed with improved state
management.
CVE-2026-64737: Robert Mindo
Apple Neural Engine
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-43748: an anonymous researcher, tamdao, Franco Belman at
Blackwing Intelligence
Apple Neural Engine
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: A use after free issue was addressed with improved memory
management.
CVE-2026-28928: Dun
AppleDouble
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to unexpected app
termination or arbitrary code execution
Description: A buffer overflow was addressed with improved bounds
checking.
CVE-2026-43776: Irvin Wang, Peter Malone, Nicolas Rabrenovic
AppleRAID
Available for: macOS Tahoe
Impact: A local user may be able to read kernel memory
Description: A buffer overflow was addressed with improved bounds
checking.
CVE-2026-43681: impost0r (ret2plt), David Ige - Beryllium Security
Assets
Available for: macOS Tahoe
Impact: A malicious application may be able to bypass Privacy
preferences
Description: An authorization issue was addressed with improved state
management.
CVE-2026-43672: 이재영
ATS
Available for: macOS Tahoe
Impact: An app may be able to read files outside of its sandbox
Description: A permissions issue was addressed by removing the
vulnerable code.
CVE-2026-43763: Pavan Nallamothu, Jared Reyes
Audio
Available for: macOS Tahoe
Impact: An app may be able to break out of its sandbox
Description: An access issue was addressed with additional sandbox
restrictions.
CVE-2026-64702: John Lussier
Audio
Available for: macOS Tahoe
Impact: An app may be able to cause a denial-of-service
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)
AuthKit
Available for: macOS Tahoe
Impact: An app may be able to fingerprint the user
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-43730: David Strnadel
AVEVideoEncoder
Available for: macOS Tahoe
Impact: An app may be able to execute arbitrary code with kernel
privileges
Description: A buffer overflow was addressed with improved size
validation.
CVE-2026-64747: Franco Belman at Blackwing Intelligence
AVEVideoEncoder
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-64762: Dun, Franco Belman at Blackwing Intelligence
BackgroundAssets
Available for: macOS Tahoe
Impact: An app may be able to delete files for which it does not have
permission
Description: A permissions issue was addressed with improved validation.
CVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab
cd9660
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or
read kernel memory
Description: The issue was addressed with improved memory handling.
CVE-2026-64698: an anonymous researcher, Richard Zana, Nathaniel Oh
(@calysteon), Peter Malone
CloudAttestation
Available for: macOS Tahoe
Impact: A maliciously crafted app may be able to bypass code signing
enforcement
Description: A validation issue was addressed with improved input
sanitization.
CVE-2026-43813: Anton Pakhunov
Contacts
Available for: macOS Tahoe
Impact: An app may be able to add contacts without user authorization
Description: An authorization issue was addressed with improved
validation.
CVE-2026-64746: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Daniel
Febrero
Contacts
Available for: macOS Tahoe
Impact: Processing a maliciously crafted contact may leak sensitive data
Description: The issue was addressed with improved checks.
CVE-2026-64734: Daniel Williams
Contacts
Available for: macOS Tahoe
Impact: An app may be able to access information about a user's contacts
Description: This issue was addressed with improved checks.
CVE-2026-43797: Arni Hardarson (Neonix Security)
Control Center
Available for: macOS Tahoe
Impact: An app may be able to access user-sensitive data
Description: A logic issue was addressed with improved validation.
CVE-2026-43756: 이재영
Core Services
Available for: macOS Tahoe
Impact: An app may be able to gain root privileges
Description: A race condition was addressed with improved state
handling.
CVE-2026-43693: Gergely Kalman (@gergely_kalman)
CoreAudio
Available for: macOS Tahoe
Impact: Processing a maliciously crafted audio file may corrupt process
memory
Description: The issue was addressed with improved memory handling.
CVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative
CoreAudio
Available for: macOS Tahoe
Impact: Processing an audio stream in a maliciously crafted media file
may terminate the process
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-43744: Mathis Mansière, an anonymous researcher
CoreAudio
Available for: macOS Tahoe
Impact: A remote attacker may be able to cause unexpected system
termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-43803: Rahul Raj
CoreMedia
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state
management.
CVE-2026-43775: Csaba Fitzl (@theevilbit) of Iru
CVE-2026-43759: 이재영, Rajdip Dey Sarkar, Arni Hardarson (Neonix Security)
CoreMedia
Available for: macOS Tahoe
Impact: Processing a maliciously crafted video file may lead to
unexpected app termination
Description: A memory corruption issue was addressed with improved
memory handling.
CVE-2026-43711: James Duffy (@0x4A616D657344)
CoreVideo
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-43802: an anonymous researcher
Crash Reporter
Available for: macOS Tahoe
Impact: An app may be able to leak sensitive user information
Description: A privacy issue was addressed by removing sensitive data.
CVE-2026-64710: Matthew Schneider
CUPS
Available for: macOS Tahoe
Impact: A malicious app may be able to gain root privileges
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-39875: Dallas Dubs, Aaron Grattafiori - NVIDIA AI Red Team,
XBreach.ai, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs
CUPS
Available for: macOS Tahoe
Impact: An app may be able to gain root privileges
Description: An injection issue was addressed with improved validation.
CVE-2026-43698: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs
curl
Available for: macOS Tahoe
Impact: Authentication credentials may be sent to a server on another
origin
Description: This is a vulnerability in open source code and Apple
Software is among the affected projects. The CVE-ID was assigned by a
third party. Learn more about the issue and CVE-ID at cve.org.
CVE-2026-3784
CVE-2026-3783
Data Detectors UI
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state
management.
CVE-2026-43758: HvxyZLF
DesktopServices
Available for: macOS Tahoe
Impact: An app may bypass Gatekeeper checks
Description: A file quarantine bypass was addressed with additional
checks.
CVE-2026-64708: Lance Cain - Offensive Security Engineer, SpecterOps
Inc.
Disk Images
Available for: macOS Tahoe
Impact: An app may be able to disclose kernel memory
Description: The issue was addressed with improved bounds checks.
CVE-2026-64776: Hyunwoo Kim (@v4bel)
Disk Images
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An integer overflow was addressed with improved input
validation.
CVE-2026-64694: Gil Portnoy & Henry
Disk Images
Available for: macOS Tahoe
Impact: Parsing a maliciously crafted file may lead to an unexpected app
termination
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-43747: Anthony Laou Hine Tsuei (@anarcheuz)
Disk Images
Available for: macOS Tahoe
Impact: An app may be able to bypass network restrictions
Description: A permissions issue was addressed with additional sandbox
restrictions.
CVE-2026-28945: Ayaan Ahmad
DriverKit
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An issue existed in the handling of environment variables.
This issue was addressed with improved validation.
CVE-2026-43793: erdene-och Byambabayar
DriverKit
Available for: macOS Tahoe
Impact: An attacker with physical access to a locked device may be able
to view sensitive user information
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-43753: Niels Hofmans
Foundation
Available for: macOS Tahoe
Impact: A malicious app may be able to access protected user data
Description: The issue was addressed with improved input sanitization.
CVE-2026-43714: an anonymous researcher
Game Center
Available for: macOS Tahoe
Impact: A malicious app may be able to break out of its sandbox
Description: A parsing issue in the handling of directory paths was
addressed with improved path validation.
CVE-2026-64740: Manuel Fernandez (Stackhopper Security)
Game Center
Available for: macOS Tahoe
Impact: An app may be ab
Severity
No CVSS data available.
Assigner
References
8 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | Macos Tahoe |
Affected:
unknown
|
Relationships
reference
GCVE-1988-2026-0288 (this record)
- related CVE-2026-23918
- related CVE-2026-28911
- related CVE-2026-28912
- related CVE-2026-28928
- related CVE-2026-28931
- related CVE-2026-28932
- related CVE-2026-28945
- related CVE-2026-28973
- related CVE-2026-28981
- related CVE-2026-28982
- related CVE-2026-3783
- related CVE-2026-3784
- related CVE-2026-39873
- related CVE-2026-39874
- related CVE-2026-39875
- related CVE-2026-43672
- related CVE-2026-43673
- related CVE-2026-43681
- related CVE-2026-43682
- related CVE-2026-43693
- related CVE-2026-43694
- related CVE-2026-43698
- related CVE-2026-43710
- related CVE-2026-43711
- related CVE-2026-43714
- related CVE-2026-43723
- related CVE-2026-43728
- related CVE-2026-43729
- related CVE-2026-43730
- related CVE-2026-43733
- related CVE-2026-43739
- related CVE-2026-43740
- related CVE-2026-43744
- related CVE-2026-43747
- related CVE-2026-43748
- related CVE-2026-43749
- related CVE-2026-43750
- related CVE-2026-43753
- related CVE-2026-43754
- related CVE-2026-43755
- related CVE-2026-43756
- related CVE-2026-43757
- related CVE-2026-43758
- related CVE-2026-43759
- related CVE-2026-43760
- related CVE-2026-43763
- related CVE-2026-43764
- related CVE-2026-43765
- related CVE-2026-43766
- related CVE-2026-43767
- related CVE-2026-43768
- related CVE-2026-43769
- related CVE-2026-43770
- related CVE-2026-43771
- related CVE-2026-43772
- related CVE-2026-43773
- related CVE-2026-43774
- related CVE-2026-43775
- related CVE-2026-43776
- related CVE-2026-43777
- related CVE-2026-43778
- related CVE-2026-43779
- related CVE-2026-43780
- related CVE-2026-43781
- related CVE-2026-43782
- related CVE-2026-43792
- related CVE-2026-43793
- related CVE-2026-43796
- related CVE-2026-43797
- related CVE-2026-43799
- related CVE-2026-43800
- related CVE-2026-43801
- related CVE-2026-43802
- related CVE-2026-43803
- related CVE-2026-43804
- related CVE-2026-43805
- related CVE-2026-43806
- related CVE-2026-43809
- related CVE-2026-43810
- related CVE-2026-43812
- related CVE-2026-43813
- related CVE-2026-43814
- related CVE-2026-43816
- related CVE-2026-43817
- related CVE-2026-43818
- related CVE-2026-43819
- related CVE-2026-43821
- related CVE-2026-43822
- related CVE-2026-4424
- related CVE-2026-64691
- related CVE-2026-64692
- related CVE-2026-64693
- related CVE-2026-64694
- related CVE-2026-64695
- related CVE-2026-64696
- related CVE-2026-64697
- related CVE-2026-64698
- related CVE-2026-64699
- related CVE-2026-64700
- related CVE-2026-64702
- related CVE-2026-64703
- related CVE-2026-64704
- related CVE-2026-64707
- related CVE-2026-64708
- related CVE-2026-64709
- related CVE-2026-64710
- related CVE-2026-64711
- related CVE-2026-64713
- related CVE-2026-64716
- related CVE-2026-64718
- related CVE-2026-64719
- related CVE-2026-64720
- related CVE-2026-64721
- related CVE-2026-64722
- related CVE-2026-64723
- related CVE-2026-64724
- related CVE-2026-64725
- related CVE-2026-64726
- related CVE-2026-64727
- related CVE-2026-64728
- related CVE-2026-64729
- related CVE-2026-64730
- related CVE-2026-64731
- related CVE-2026-64733
- related CVE-2026-64734
- related CVE-2026-64735
- related CVE-2026-64737
- related CVE-2026-64738
- related CVE-2026-64739
- related CVE-2026-64740
- related CVE-2026-64743
- related CVE-2026-64744
- related CVE-2026-64745
- related CVE-2026-64746
- related CVE-2026-64747
- related CVE-2026-64749
- related CVE-2026-64751
- related CVE-2026-64754
- related CVE-2026-64757
- related CVE-2026-64758
- related CVE-2026-64762
- related CVE-2026-64763
- related CVE-2026-64764
- related CVE-2026-64765
- related CVE-2026-64766
- related CVE-2026-64767
- related CVE-2026-64768
- related CVE-2026-64769
- related CVE-2026-64770
- related CVE-2026-64771
- related CVE-2026-64772
- related CVE-2026-64774
- related CVE-2026-64775
- related CVE-2026-64776
- related CVE-2026-64783
{
"containers": {
"cna": {
"affected": [
{
"product": "Macos Tahoe",
"vendor": "Apple",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Apple Product Security via Fulldisclosure"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-07-27-2026-2 macOS Tahoe 26.6\n\nmacOS Tahoe 26.6 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/en-us/128067.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccounts\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: An access issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-43819: Omar Cerrito\n\nAccounts\nAvailable for: macOS Tahoe\nImpact: An app may be able to gain root privileges\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-43749: Adam Franke, Ashish Kunwar, Trung Nguyen (@everping) of\nCyStack\n\nAccounts Framework\nAvailable for: macOS Tahoe\nImpact: An app may be able to fingerprint the user\nDescription: This issue was addressed with improved data protection.\nCVE-2026-64733: Rosyna Keller of Totally Not Malicious Software\n(paradisefacade.com)\n\nafpfs\nAvailable for: macOS Tahoe\nImpact: A remote attacker may be able to cause unexpected system\ntermination or corrupt kernel memory\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-64767: Dave G.\n\napache\nAvailable for: macOS Tahoe\nImpact: A remote attacker may be able to cause a denial-of-service\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2026-23918: \u042e\u043b\u0438\u044f \u041c\u0435\u0440\u0446\u0430\u043b\u043e\u0432\u0430\n\nAPFS\nAvailable for: macOS Tahoe\nImpact: A remote user may be able to cause unexpected system termination\nor corrupt kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-64695: Peter Malone\n\nApp Store\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with improved checks.\nCVE-2026-43801: Rahul Raj\n\nApple Account\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-43781: Pinak Oza\n\nApple Account\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to break out of its sandbox\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-64737: Robert Mindo\n\nApple Neural Engine\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43748: an anonymous researcher, tamdao, Franco Belman at\nBlackwing Intelligence\n\nApple Neural Engine\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-28928: Dun\n\nAppleDouble\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination or arbitrary code execution\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-43776: Irvin Wang, Peter Malone, Nicolas Rabrenovic\n\nAppleRAID\nAvailable for: macOS Tahoe\nImpact: A local user may be able to read kernel memory\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-43681: impost0r (ret2plt), David Ige - Beryllium Security\n\nAssets\nAvailable for: macOS Tahoe\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-43672: \uc774\uc7ac\uc601\n\nATS\nAvailable for: macOS Tahoe\nImpact: An app may be able to read files outside of its sandbox\nDescription: A permissions issue was addressed by removing the\nvulnerable code.\nCVE-2026-43763: Pavan Nallamothu, Jared Reyes\n\nAudio\nAvailable for: macOS Tahoe\nImpact: An app may be able to break out of its sandbox\nDescription: An access issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-64702: John Lussier\n\nAudio\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause a denial-of-service\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)\n\nAuthKit\nAvailable for: macOS Tahoe\nImpact: An app may be able to fingerprint the user\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-43730: David Strnadel\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to execute arbitrary code with kernel\nprivileges\nDescription: A buffer overflow was addressed with improved size\nvalidation.\nCVE-2026-64747: Franco Belman at Blackwing Intelligence\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-64762: Dun, Franco Belman at Blackwing Intelligence\n\nBackgroundAssets\nAvailable for: macOS Tahoe\nImpact: An app may be able to delete files for which it does not have\npermission\nDescription: A permissions issue was addressed with improved validation.\nCVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity\u0027s WeBin lab\n\ncd9660\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-64698: an anonymous researcher, Richard Zana, Nathaniel Oh\n(@calysteon), Peter Malone\n\nCloudAttestation\nAvailable for: macOS Tahoe\nImpact: A maliciously crafted app may be able to bypass code signing\nenforcement\nDescription: A validation issue was addressed with improved input\nsanitization.\nCVE-2026-43813: Anton Pakhunov\n\nContacts\nAvailable for: macOS Tahoe\nImpact: An app may be able to add contacts without user authorization\nDescription: An authorization issue was addressed with improved\nvalidation.\nCVE-2026-64746: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Daniel\nFebrero\n\nContacts\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted contact may leak sensitive data\nDescription: The issue was addressed with improved checks.\nCVE-2026-64734: Daniel Williams\n\nContacts\nAvailable for: macOS Tahoe\nImpact: An app may be able to access information about a user\u0027s contacts\nDescription: This issue was addressed with improved checks.\nCVE-2026-43797: Arni Hardarson (Neonix Security)\n\nControl Center\nAvailable for: macOS Tahoe\nImpact: An app may be able to access user-sensitive data\nDescription: A logic issue was addressed with improved validation.\nCVE-2026-43756: \uc774\uc7ac\uc601\n\nCore Services\nAvailable for: macOS Tahoe\nImpact: An app may be able to gain root privileges\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-43693: Gergely Kalman (@gergely_kalman)\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted audio file may corrupt process\nmemory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: Processing an audio stream in a maliciously crafted media file\nmay terminate the process\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43744: Mathis Mansi\u00e8re, an anonymous researcher\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: A remote attacker may be able to cause unexpected system\ntermination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43803: Rahul Raj\n\nCoreMedia\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-43775: Csaba Fitzl (@theevilbit) of Iru\nCVE-2026-43759: \uc774\uc7ac\uc601, Rajdip Dey Sarkar, Arni Hardarson (Neonix Security)\n\nCoreMedia\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: A memory corruption issue was addressed with improved\nmemory handling.\nCVE-2026-43711: James Duffy (@0x4A616D657344)\n\nCoreVideo\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43802: an anonymous researcher\n\nCrash Reporter\nAvailable for: macOS Tahoe\nImpact: An app may be able to leak sensitive user information\nDescription: A privacy issue was addressed by removing sensitive data.\nCVE-2026-64710: Matthew Schneider\n\nCUPS\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to gain root privileges\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-39875: Dallas Dubs, Aaron Grattafiori - NVIDIA AI Red Team,\nXBreach.ai, Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nCUPS\nAvailable for: macOS Tahoe\nImpact: An app may be able to gain root privileges\nDescription: An injection issue was addressed with improved validation.\nCVE-2026-43698: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\ncurl\nAvailable for: macOS Tahoe\nImpact: Authentication credentials may be sent to a server on another\norigin\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2026-3784\nCVE-2026-3783\n\nData Detectors UI\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-43758: HvxyZLF\n\nDesktopServices\nAvailable for: macOS Tahoe\nImpact: An app may bypass Gatekeeper checks\nDescription: A file quarantine bypass was addressed with additional\nchecks.\nCVE-2026-64708: Lance Cain - Offensive Security Engineer, SpecterOps\nInc.\n\nDisk Images\nAvailable for: macOS Tahoe\nImpact: An app may be able to disclose kernel memory\nDescription: The issue was addressed with improved bounds checks.\nCVE-2026-64776: Hyunwoo Kim (@v4bel)\n\nDisk Images\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: An integer overflow was addressed with improved input\nvalidation.\nCVE-2026-64694: Gil Portnoy \u0026 Henry\n\nDisk Images\nAvailable for: macOS Tahoe\nImpact: Parsing a maliciously crafted file may lead to an unexpected app\ntermination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-43747: Anthony Laou Hine Tsuei (@anarcheuz)\n\nDisk Images\nAvailable for: macOS Tahoe\nImpact: An app may be able to bypass network restrictions\nDescription: A permissions issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-28945: Ayaan Ahmad\n\nDriverKit\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: An issue existed in the handling of environment variables.\nThis issue was addressed with improved validation.\nCVE-2026-43793: erdene-och Byambabayar\n\nDriverKit\nAvailable for: macOS Tahoe\nImpact: An attacker with physical access to a locked device may be able\nto view sensitive user information\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-43753: Niels Hofmans\n\nFoundation\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to access protected user data\nDescription: The issue was addressed with improved input sanitization.\nCVE-2026-43714: an anonymous researcher\n\nGame Center\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to break out of its sandbox\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-64740: Manuel Fernandez (Stackhopper Security)\n\nGame Center\nAvailable for: macOS Tahoe\nImpact: An app may be ab"
}
],
"providerMetadata": {
"dateUpdated": "2026-09-11T11:47:08Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Aug/17"
},
{
"tags": [
"technical-description"
],
"url": "https://seclists.org/fulldisclosure/2026/Aug/17"
},
{
"url": "https://nmap.org/mailman/listinfo/fulldisclosure"
},
{
"url": "https://seclists.org/fulldisclosure/"
},
{
"url": "https://support.apple.com/100100"
},
{
"url": "https://support.apple.com/downloads/"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://www.apple.com/support/security/pgp/"
}
],
"source": {
"defect": [
"https://seclists.org/fulldisclosure/2026/Aug/17"
],
"discovery": "EXTERNAL"
},
"title": "APPLE-SA-07-27-2026-2 macOS Tahoe 26.6",
"x_gcve": [
{
"recordType": "reference",
"relationships": [
{
"destId": "CVE-2026-23918",
"type": "related"
},
{
"destId": "CVE-2026-28911",
"type": "related"
},
{
"destId": "CVE-2026-28912",
"type": "related"
},
{
"destId": "CVE-2026-28928",
"type": "related"
},
{
"destId": "CVE-2026-28931",
"type": "related"
},
{
"destId": "CVE-2026-28932",
"type": "related"
},
{
"destId": "CVE-2026-28945",
"type": "related"
},
{
"destId": "CVE-2026-28973",
"type": "related"
},
{
"destId": "CVE-2026-28981",
"type": "related"
},
{
"destId": "CVE-2026-28982",
"type": "related"
},
{
"destId": "CVE-2026-3783",
"type": "related"
},
{
"destId": "CVE-2026-3784",
"type": "related"
},
{
"destId": "CVE-2026-39873",
"type": "related"
},
{
"destId": "CVE-2026-39874",
"type": "related"
},
{
"destId": "CVE-2026-39875",
"type": "related"
},
{
"destId": "CVE-2026-43672",
"type": "related"
},
{
"destId": "CVE-2026-43673",
"type": "related"
},
{
"destId": "CVE-2026-43681",
"type": "related"
},
{
"destId": "CVE-2026-43682",
"type": "related"
},
{
"destId": "CVE-2026-43693",
"type": "related"
},
{
"destId": "CVE-2026-43694",
"type": "related"
},
{
"destId": "CVE-2026-43698",
"type": "related"
},
{
"destId": "CVE-2026-43710",
"type": "related"
},
{
"destId": "CVE-2026-43711",
"type": "related"
},
{
"destId": "CVE-2026-43714",
"type": "related"
},
{
"destId": "CVE-2026-43723",
"type": "related"
},
{
"destId": "CVE-2026-43728",
"type": "related"
},
{
"destId": "CVE-2026-43729",
"type": "related"
},
{
"destId": "CVE-2026-43730",
"type": "related"
},
{
"destId": "CVE-2026-43733",
"type": "related"
},
{
"destId": "CVE-2026-43739",
"type": "related"
},
{
"destId": "CVE-2026-43740",
"type": "related"
},
{
"destId": "CVE-2026-43744",
"type": "related"
},
{
"destId": "CVE-2026-43747",
"type": "related"
},
{
"destId": "CVE-2026-43748",
"type": "related"
},
{
"destId": "CVE-2026-43749",
"type": "related"
},
{
"destId": "CVE-2026-43750",
"type": "related"
},
{
"destId": "CVE-2026-43753",
"type": "related"
},
{
"destId": "CVE-2026-43754",
"type": "related"
},
{
"destId": "CVE-2026-43755",
"type": "related"
},
{
"destId": "CVE-2026-43756",
"type": "related"
},
{
"destId": "CVE-2026-43757",
"type": "related"
},
{
"destId": "CVE-2026-43758",
"type": "related"
},
{
"destId": "CVE-2026-43759",
"type": "related"
},
{
"destId": "CVE-2026-43760",
"type": "related"
},
{
"destId": "CVE-2026-43763",
"type": "related"
},
{
"destId": "CVE-2026-43764",
"type": "related"
},
{
"destId": "CVE-2026-43765",
"type": "related"
},
{
"destId": "CVE-2026-43766",
"type": "related"
},
{
"destId": "CVE-2026-43767",
"type": "related"
},
{
"destId": "CVE-2026-43768",
"type": "related"
},
{
"destId": "CVE-2026-43769",
"type": "related"
},
{
"destId": "CVE-2026-43770",
"type": "related"
},
{
"destId": "CVE-2026-43771",
"type": "related"
},
{
"destId": "CVE-2026-43772",
"type": "related"
},
{
"destId": "CVE-2026-43773",
"type": "related"
},
{
"destId": "CVE-2026-43774",
"type": "related"
},
{
"destId": "CVE-2026-43775",
"type": "related"
},
{
"destId": "CVE-2026-43776",
"type": "related"
},
{
"destId": "CVE-2026-43777",
"type": "related"
},
{
"destId": "CVE-2026-43778",
"type": "related"
},
{
"destId": "CVE-2026-43779",
"type": "related"
},
{
"destId": "CVE-2026-43780",
"type": "related"
},
{
"destId": "CVE-2026-43781",
"type": "related"
},
{
"destId": "CVE-2026-43782",
"type": "related"
},
{
"destId": "CVE-2026-43792",
"type": "related"
},
{
"destId": "CVE-2026-43793",
"type": "related"
},
{
"destId": "CVE-2026-43796",
"type": "related"
},
{
"destId": "CVE-2026-43797",
"type": "related"
},
{
"destId": "CVE-2026-43799",
"type": "related"
},
{
"destId": "CVE-2026-43800",
"type": "related"
},
{
"destId": "CVE-2026-43801",
"type": "related"
},
{
"destId": "CVE-2026-43802",
"type": "related"
},
{
"destId": "CVE-2026-43803",
"type": "related"
},
{
"destId": "CVE-2026-43804",
"type": "related"
},
{
"destId": "CVE-2026-43805",
"type": "related"
},
{
"destId": "CVE-2026-43806",
"type": "related"
},
{
"destId": "CVE-2026-43809",
"type": "related"
},
{
"destId": "CVE-2026-43810",
"type": "related"
},
{
"destId": "CVE-2026-43812",
"type": "related"
},
{
"destId": "CVE-2026-43813",
"type": "related"
},
{
"destId": "CVE-2026-43814",
"type": "related"
},
{
"destId": "CVE-2026-43816",
"type": "related"
},
{
"destId": "CVE-2026-43817",
"type": "related"
},
{
"destId": "CVE-2026-43818",
"type": "related"
},
{
"destId": "CVE-2026-43819",
"type": "related"
},
{
"destId": "CVE-2026-43821",
"type": "related"
},
{
"destId": "CVE-2026-43822",
"type": "related"
},
{
"destId": "CVE-2026-4424",
"type": "related"
},
{
"destId": "CVE-2026-64691",
"type": "related"
},
{
"destId": "CVE-2026-64692",
"type": "related"
},
{
"destId": "CVE-2026-64693",
"type": "related"
},
{
"destId": "CVE-2026-64694",
"type": "related"
},
{
"destId": "CVE-2026-64695",
"type": "related"
},
{
"destId": "CVE-2026-64696",
"type": "related"
},
{
"destId": "CVE-2026-64697",
"type": "related"
},
{
"destId": "CVE-2026-64698",
"type": "related"
},
{
"destId": "CVE-2026-64699",
"type": "related"
},
{
"destId": "CVE-2026-64700",
"type": "related"
},
{
"destId": "CVE-2026-64702",
"type": "related"
},
{
"destId": "CVE-2026-64703",
"type": "related"
},
{
"destId": "CVE-2026-64704",
"type": "related"
},
{
"destId": "CVE-2026-64707",
"type": "related"
},
{
"destId": "CVE-2026-64708",
"type": "related"
},
{
"destId": "CVE-2026-64709",
"type": "related"
},
{
"destId": "CVE-2026-64710",
"type": "related"
},
{
"destId": "CVE-2026-64711",
"type": "related"
},
{
"destId": "CVE-2026-64713",
"type": "related"
},
{
"destId": "CVE-2026-64716",
"type": "related"
},
{
"destId": "CVE-2026-64718",
"type": "related"
},
{
"destId": "CVE-2026-64719",
"type": "related"
},
{
"destId": "CVE-2026-64720",
"type": "related"
},
{
"destId": "CVE-2026-64721",
"type": "related"
},
{
"destId": "CVE-2026-64722",
"type": "related"
},
{
"destId": "CVE-2026-64723",
"type": "related"
},
{
"destId": "CVE-2026-64724",
"type": "related"
},
{
"destId": "CVE-2026-64725",
"type": "related"
},
{
"destId": "CVE-2026-64726",
"type": "related"
},
{
"destId": "CVE-2026-64727",
"type": "related"
},
{
"destId": "CVE-2026-64728",
"type": "related"
},
{
"destId": "CVE-2026-64729",
"type": "related"
},
{
"destId": "CVE-2026-64730",
"type": "related"
},
{
"destId": "CVE-2026-64731",
"type": "related"
},
{
"destId": "CVE-2026-64733",
"type": "related"
},
{
"destId": "CVE-2026-64734",
"type": "related"
},
{
"destId": "CVE-2026-64735",
"type": "related"
},
{
"destId": "CVE-2026-64737",
"type": "related"
},
{
"destId": "CVE-2026-64738",
"type": "related"
},
{
"destId": "CVE-2026-64739",
"type": "related"
},
{
"destId": "CVE-2026-64740",
"type": "related"
},
{
"destId": "CVE-2026-64743",
"type": "related"
},
{
"destId": "CVE-2026-64744",
"type": "related"
},
{
"destId": "CVE-2026-64745",
"type": "related"
},
{
"destId": "CVE-2026-64746",
"type": "related"
},
{
"destId": "CVE-2026-64747",
"type": "related"
},
{
"destId": "CVE-2026-64749",
"type": "related"
},
{
"destId": "CVE-2026-64751",
"type": "related"
},
{
"destId": "CVE-2026-64754",
"type": "related"
},
{
"destId": "CVE-2026-64757",
"type": "related"
},
{
"destId": "CVE-2026-64758",
"type": "related"
},
{
"destId": "CVE-2026-64762",
"type": "related"
},
{
"destId": "CVE-2026-64763",
"type": "related"
},
{
"destId": "CVE-2026-64764",
"type": "related"
},
{
"destId": "CVE-2026-64765",
"type": "related"
},
{
"destId": "CVE-2026-64766",
"type": "related"
},
{
"destId": "CVE-2026-64767",
"type": "related"
},
{
"destId": "CVE-2026-64768",
"type": "related"
},
{
"destId": "CVE-2026-64769",
"type": "related"
},
{
"destId": "CVE-2026-64770",
"type": "related"
},
{
"destId": "CVE-2026-64771",
"type": "related"
},
{
"destId": "CVE-2026-64772",
"type": "related"
},
{
"destId": "CVE-2026-64774",
"type": "related"
},
{
"destId": "CVE-2026-64775",
"type": "related"
},
{
"destId": "CVE-2026-64776",
"type": "related"
},
{
"destId": "CVE-2026-64783",
"type": "related"
}
],
"vulnId": "GCVE-1988-2026-0288",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Aug/17",
"automated": true,
"contentSha256": "b77e3bd23b7d5a05b59a0b0fb5b935fc5cdd5feabeb5315eef61d4ad5269540e",
"evidenceScore": 7,
"messageId": "",
"originalUrl": "https://seclists.org/fulldisclosure/2026/Aug/17",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-07-28T00:20:15Z"
}
},
{
"recordType": "advisory",
"vulnId": "gcve-1988-2026-0288"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-09-08T11:40:46Z",
"dateUpdated": "2026-09-11T11:47:08Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0288"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
GCVE-1988-2026-0040
Vulnerability from gna-1988 – Published: 2026-09-07 13:20 – Updated: 2026-09-11 11:47
VLAI
EPSS
VEX
Title
APPLE-SA-07-27-2026-2 macOS Tahoe 26.6
Summary
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
APPLE-SA-07-27-2026-2 macOS Tahoe 26.6
macOS Tahoe 26.6 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/en-us/128067.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Accounts
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: An access issue was addressed with additional sandbox
restrictions.
CVE-2026-43819: Omar Cerrito
Accounts
Available for: macOS Tahoe
Impact: An app may be able to gain root privileges
Description: A parsing issue in the handling of directory paths was
addressed with improved path validation.
CVE-2026-43749: Adam Franke, Ashish Kunwar, Trung Nguyen (@everping) of
CyStack
Accounts Framework
Available for: macOS Tahoe
Impact: An app may be able to fingerprint the user
Description: This issue was addressed with improved data protection.
CVE-2026-64733: Rosyna Keller of Totally Not Malicious Software
(paradisefacade.com)
afpfs
Available for: macOS Tahoe
Impact: A remote attacker may be able to cause unexpected system
termination or corrupt kernel memory
Description: A buffer overflow was addressed with improved bounds
checking.
CVE-2026-64767: Dave G.
apache
Available for: macOS Tahoe
Impact: A remote attacker may be able to cause a denial-of-service
Description: This is a vulnerability in open source code and Apple
Software is among the affected projects. The CVE-ID was assigned by a
third party. Learn more about the issue and CVE-ID at cve.org.
CVE-2026-23918: Юлия Мерцалова
APFS
Available for: macOS Tahoe
Impact: A remote user may be able to cause unexpected system termination
or corrupt kernel memory
Description: The issue was addressed with improved memory handling.
CVE-2026-64695: Peter Malone
App Store
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with improved checks.
CVE-2026-43801: Rahul Raj
Apple Account
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: A race condition was addressed with improved state
handling.
CVE-2026-43781: Pinak Oza
Apple Account
Available for: macOS Tahoe
Impact: A malicious app may be able to break out of its sandbox
Description: An authorization issue was addressed with improved state
management.
CVE-2026-64737: Robert Mindo
Apple Neural Engine
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-43748: an anonymous researcher, tamdao, Franco Belman at
Blackwing Intelligence
Apple Neural Engine
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: A use after free issue was addressed with improved memory
management.
CVE-2026-28928: Dun
AppleDouble
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to unexpected app
termination or arbitrary code execution
Description: A buffer overflow was addressed with improved bounds
checking.
CVE-2026-43776: Irvin Wang, Peter Malone, Nicolas Rabrenovic
AppleRAID
Available for: macOS Tahoe
Impact: A local user may be able to read kernel memory
Description: A buffer overflow was addressed with improved bounds
checking.
CVE-2026-43681: impost0r (ret2plt), David Ige - Beryllium Security
Assets
Available for: macOS Tahoe
Impact: A malicious application may be able to bypass Privacy
preferences
Description: An authorization issue was addressed with improved state
management.
CVE-2026-43672: 이재영
ATS
Available for: macOS Tahoe
Impact: An app may be able to read files outside of its sandbox
Description: A permissions issue was addressed by removing the
vulnerable code.
CVE-2026-43763: Pavan Nallamothu, Jared Reyes
Audio
Available for: macOS Tahoe
Impact: An app may be able to break out of its sandbox
Description: An access issue was addressed with additional sandbox
restrictions.
CVE-2026-64702: John Lussier
Audio
Available for: macOS Tahoe
Impact: An app may be able to cause a denial-of-service
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)
AuthKit
Available for: macOS Tahoe
Impact: An app may be able to fingerprint the user
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-43730: David Strnadel
AVEVideoEncoder
Available for: macOS Tahoe
Impact: An app may be able to execute arbitrary code with kernel
privileges
Description: A buffer overflow was addressed with improved size
validation.
CVE-2026-64747: Franco Belman at Blackwing Intelligence
AVEVideoEncoder
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-64762: Dun, Franco Belman at Blackwing Intelligence
BackgroundAssets
Available for: macOS Tahoe
Impact: An app may be able to delete files for which it does not have
permission
Description: A permissions issue was addressed with improved validation.
CVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab
cd9660
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or
read kernel memory
Description: The issue was addressed with improved memory handling.
CVE-2026-64698: an anonymous researcher, Richard Zana, Nathaniel Oh
(@calysteon), Peter Malone
CloudAttestation
Available for: macOS Tahoe
Impact: A maliciously crafted app may be able to bypass code signing
enforcement
Description: A validation issue was addressed with improved input
sanitization.
CVE-2026-43813: Anton Pakhunov
Contacts
Available for: macOS Tahoe
Impact: An app may be able to add contacts without user authorization
Description: An authorization issue was addressed with improved
validation.
CVE-2026-64746: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Daniel
Febrero
Contacts
Available for: macOS Tahoe
Impact: Processing a maliciously crafted contact may leak sensitive data
Description: The issue was addressed with improved checks.
CVE-2026-64734: Daniel Williams
Contacts
Available for: macOS Tahoe
Impact: An app may be able to access information about a user's contacts
Description: This issue was addressed with improved checks.
CVE-2026-43797: Arni Hardarson (Neonix Security)
Control Center
Available for: macOS Tahoe
Impact: An app may be able to access user-sensitive data
Description: A logic issue was addressed with improved validation.
CVE-2026-43756: 이재영
Core Services
Available for: macOS Tahoe
Impact: An app may be able to gain root privileges
Description: A race condition was addressed with improved state
handling.
CVE-2026-43693: Gergely Kalman (@gergely_kalman)
CoreAudio
Available for: macOS Tahoe
Impact: Processing a maliciously crafted audio file may corrupt process
memory
Description: The issue was addressed with improved memory handling.
CVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative
CoreAudio
Available for: macOS Tahoe
Impact: Processing an audio stream in a maliciously crafted media file
may terminate the process
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-43744: Mathis Mansière, an anonymous researcher
CoreAudio
Available for: macOS Tahoe
Impact: A remote attacker may be able to cause unexpected system
termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-43803: Rahul Raj
CoreMedia
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state
management.
CVE-2026-43775: Csaba Fitzl (@theevilbit) of Iru
CVE-2026-43759: 이재영, Rajdip Dey Sarkar, Arni Hardarson (Neonix Security)
CoreMedia
Available for: macOS Tahoe
Impact: Processing a maliciously crafted video file may lead to
unexpected app termination
Description: A memory corruption issue was addressed with improved
memory handling.
CVE-2026-43711: James Duffy (@0x4A616D657344)
CoreVideo
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-43802: an anonymous researcher
Crash Reporter
Available for: macOS Tahoe
Impact: An app may be able to leak sensitive user information
Description: A privacy issue was addressed by removing sensitive data.
CVE-2026-64710: Matthew Schneider
CUPS
Available for: macOS Tahoe
Impact: A malicious app may be able to gain root privileges
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-39875: Dallas Dubs, Aaron Grattafiori - NVIDIA AI Red Team,
XBreach.ai, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs
CUPS
Available for: macOS Tahoe
Impact: An app may be able to gain root privileges
Description: An injection issue was addressed with improved validation.
CVE-2026-43698: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs
curl
Available for: macOS Tahoe
Impact: Authentication credentials may be sent to a server on another
origin
Description: This is a vulnerability in open source code and Apple
Software is among the affected projects. The CVE-ID was assigned by a
third party. Learn more about the issue and CVE-ID at cve.org.
CVE-2026-3784
CVE-2026-3783
Data Detectors UI
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state
management.
CVE-2026-43758: HvxyZLF
DesktopServices
Available for: macOS Tahoe
Impact: An app may bypass Gatekeeper checks
Description: A file quarantine bypass was addressed with additional
checks.
CVE-2026-64708: Lance Cain - Offensive Security Engineer, SpecterOps
Inc.
Disk Images
Available for: macOS Tahoe
Impact: An app may be able to disclose kernel memory
Description: The issue was addressed with improved bounds checks.
CVE-2026-64776: Hyunwoo Kim (@v4bel)
Disk Images
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An integer overflow was addressed with improved input
validation.
CVE-2026-64694: Gil Portnoy & Henry
Disk Images
Available for: macOS Tahoe
Impact: Parsing a maliciously crafted file may lead to an unexpected app
termination
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-43747: Anthony Laou Hine Tsuei (@anarcheuz)
Disk Images
Available for: macOS Tahoe
Impact: An app may be able to bypass network restrictions
Description: A permissions issue was addressed with additional sandbox
restrictions.
CVE-2026-28945: Ayaan Ahmad
DriverKit
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An issue existed in the handling of environment variables.
This issue was addressed with improved validation.
CVE-2026-43793: erdene-och Byambabayar
DriverKit
Available for: macOS Tahoe
Impact: An attacker with physical access to a locked device may be able
to view sensitive user information
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-43753: Niels Hofmans
Foundation
Available for: macOS Tahoe
Impact: A malicious app may be able to access protected user data
Description: The issue was addressed with improved input sanitization.
CVE-2026-43714: an anonymous researcher
Game Center
Available for: macOS Tahoe
Impact: A malicious app may be able to break out of its sandbox
Description: A parsing issue in the handling of directory paths was
addressed with improved path validation.
CVE-2026-64740: Manuel Fernandez (Stackhopper Security)
Game Center
Available for: macOS Tahoe
Impact: An app may be ab
Severity
No CVSS data available.
Assigner
References
8 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | Macos Tahoe |
Affected:
unknown
|
{
"containers": {
"cna": {
"affected": [
{
"product": "Macos Tahoe",
"vendor": "Apple",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Apple Product Security via Fulldisclosure"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-07-27-2026-2 macOS Tahoe 26.6\n\nmacOS Tahoe 26.6 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/en-us/128067.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccounts\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: An access issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-43819: Omar Cerrito\n\nAccounts\nAvailable for: macOS Tahoe\nImpact: An app may be able to gain root privileges\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-43749: Adam Franke, Ashish Kunwar, Trung Nguyen (@everping) of\nCyStack\n\nAccounts Framework\nAvailable for: macOS Tahoe\nImpact: An app may be able to fingerprint the user\nDescription: This issue was addressed with improved data protection.\nCVE-2026-64733: Rosyna Keller of Totally Not Malicious Software\n(paradisefacade.com)\n\nafpfs\nAvailable for: macOS Tahoe\nImpact: A remote attacker may be able to cause unexpected system\ntermination or corrupt kernel memory\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-64767: Dave G.\n\napache\nAvailable for: macOS Tahoe\nImpact: A remote attacker may be able to cause a denial-of-service\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2026-23918: \u042e\u043b\u0438\u044f \u041c\u0435\u0440\u0446\u0430\u043b\u043e\u0432\u0430\n\nAPFS\nAvailable for: macOS Tahoe\nImpact: A remote user may be able to cause unexpected system termination\nor corrupt kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-64695: Peter Malone\n\nApp Store\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with improved checks.\nCVE-2026-43801: Rahul Raj\n\nApple Account\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-43781: Pinak Oza\n\nApple Account\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to break out of its sandbox\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-64737: Robert Mindo\n\nApple Neural Engine\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43748: an anonymous researcher, tamdao, Franco Belman at\nBlackwing Intelligence\n\nApple Neural Engine\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-28928: Dun\n\nAppleDouble\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination or arbitrary code execution\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-43776: Irvin Wang, Peter Malone, Nicolas Rabrenovic\n\nAppleRAID\nAvailable for: macOS Tahoe\nImpact: A local user may be able to read kernel memory\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-43681: impost0r (ret2plt), David Ige - Beryllium Security\n\nAssets\nAvailable for: macOS Tahoe\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-43672: \uc774\uc7ac\uc601\n\nATS\nAvailable for: macOS Tahoe\nImpact: An app may be able to read files outside of its sandbox\nDescription: A permissions issue was addressed by removing the\nvulnerable code.\nCVE-2026-43763: Pavan Nallamothu, Jared Reyes\n\nAudio\nAvailable for: macOS Tahoe\nImpact: An app may be able to break out of its sandbox\nDescription: An access issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-64702: John Lussier\n\nAudio\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause a denial-of-service\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)\n\nAuthKit\nAvailable for: macOS Tahoe\nImpact: An app may be able to fingerprint the user\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-43730: David Strnadel\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to execute arbitrary code with kernel\nprivileges\nDescription: A buffer overflow was addressed with improved size\nvalidation.\nCVE-2026-64747: Franco Belman at Blackwing Intelligence\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-64762: Dun, Franco Belman at Blackwing Intelligence\n\nBackgroundAssets\nAvailable for: macOS Tahoe\nImpact: An app may be able to delete files for which it does not have\npermission\nDescription: A permissions issue was addressed with improved validation.\nCVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity\u0027s WeBin lab\n\ncd9660\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-64698: an anonymous researcher, Richard Zana, Nathaniel Oh\n(@calysteon), Peter Malone\n\nCloudAttestation\nAvailable for: macOS Tahoe\nImpact: A maliciously crafted app may be able to bypass code signing\nenforcement\nDescription: A validation issue was addressed with improved input\nsanitization.\nCVE-2026-43813: Anton Pakhunov\n\nContacts\nAvailable for: macOS Tahoe\nImpact: An app may be able to add contacts without user authorization\nDescription: An authorization issue was addressed with improved\nvalidation.\nCVE-2026-64746: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Daniel\nFebrero\n\nContacts\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted contact may leak sensitive data\nDescription: The issue was addressed with improved checks.\nCVE-2026-64734: Daniel Williams\n\nContacts\nAvailable for: macOS Tahoe\nImpact: An app may be able to access information about a user\u0027s contacts\nDescription: This issue was addressed with improved checks.\nCVE-2026-43797: Arni Hardarson (Neonix Security)\n\nControl Center\nAvailable for: macOS Tahoe\nImpact: An app may be able to access user-sensitive data\nDescription: A logic issue was addressed with improved validation.\nCVE-2026-43756: \uc774\uc7ac\uc601\n\nCore Services\nAvailable for: macOS Tahoe\nImpact: An app may be able to gain root privileges\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-43693: Gergely Kalman (@gergely_kalman)\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted audio file may corrupt process\nmemory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: Processing an audio stream in a maliciously crafted media file\nmay terminate the process\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43744: Mathis Mansi\u00e8re, an anonymous researcher\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: A remote attacker may be able to cause unexpected system\ntermination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43803: Rahul Raj\n\nCoreMedia\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-43775: Csaba Fitzl (@theevilbit) of Iru\nCVE-2026-43759: \uc774\uc7ac\uc601, Rajdip Dey Sarkar, Arni Hardarson (Neonix Security)\n\nCoreMedia\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: A memory corruption issue was addressed with improved\nmemory handling.\nCVE-2026-43711: James Duffy (@0x4A616D657344)\n\nCoreVideo\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43802: an anonymous researcher\n\nCrash Reporter\nAvailable for: macOS Tahoe\nImpact: An app may be able to leak sensitive user information\nDescription: A privacy issue was addressed by removing sensitive data.\nCVE-2026-64710: Matthew Schneider\n\nCUPS\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to gain root privileges\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-39875: Dallas Dubs, Aaron Grattafiori - NVIDIA AI Red Team,\nXBreach.ai, Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nCUPS\nAvailable for: macOS Tahoe\nImpact: An app may be able to gain root privileges\nDescription: An injection issue was addressed with improved validation.\nCVE-2026-43698: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\ncurl\nAvailable for: macOS Tahoe\nImpact: Authentication credentials may be sent to a server on another\norigin\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2026-3784\nCVE-2026-3783\n\nData Detectors UI\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-43758: HvxyZLF\n\nDesktopServices\nAvailable for: macOS Tahoe\nImpact: An app may bypass Gatekeeper checks\nDescription: A file quarantine bypass was addressed with additional\nchecks.\nCVE-2026-64708: Lance Cain - Offensive Security Engineer, SpecterOps\nInc.\n\nDisk Images\nAvailable for: macOS Tahoe\nImpact: An app may be able to disclose kernel memory\nDescription: The issue was addressed with improved bounds checks.\nCVE-2026-64776: Hyunwoo Kim (@v4bel)\n\nDisk Images\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: An integer overflow was addressed with improved input\nvalidation.\nCVE-2026-64694: Gil Portnoy \u0026 Henry\n\nDisk Images\nAvailable for: macOS Tahoe\nImpact: Parsing a maliciously crafted file may lead to an unexpected app\ntermination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-43747: Anthony Laou Hine Tsuei (@anarcheuz)\n\nDisk Images\nAvailable for: macOS Tahoe\nImpact: An app may be able to bypass network restrictions\nDescription: A permissions issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-28945: Ayaan Ahmad\n\nDriverKit\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: An issue existed in the handling of environment variables.\nThis issue was addressed with improved validation.\nCVE-2026-43793: erdene-och Byambabayar\n\nDriverKit\nAvailable for: macOS Tahoe\nImpact: An attacker with physical access to a locked device may be able\nto view sensitive user information\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-43753: Niels Hofmans\n\nFoundation\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to access protected user data\nDescription: The issue was addressed with improved input sanitization.\nCVE-2026-43714: an anonymous researcher\n\nGame Center\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to break out of its sandbox\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-64740: Manuel Fernandez (Stackhopper Security)\n\nGame Center\nAvailable for: macOS Tahoe\nImpact: An app may be ab"
}
],
"providerMetadata": {
"dateUpdated": "2026-09-11T11:47:08Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Aug/17"
},
{
"tags": [
"technical-description"
],
"url": "https://seclists.org/fulldisclosure/2026/Aug/17"
},
{
"url": "https://nmap.org/mailman/listinfo/fulldisclosure"
},
{
"url": "https://seclists.org/fulldisclosure/"
},
{
"url": "https://support.apple.com/100100"
},
{
"url": "https://support.apple.com/downloads/"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://www.apple.com/support/security/pgp/"
}
],
"source": {
"defect": [
"https://seclists.org/fulldisclosure/2026/Aug/17"
],
"discovery": "EXTERNAL"
},
"title": "APPLE-SA-07-27-2026-2 macOS Tahoe 26.6",
"x_gcve": [
{
"recordType": "advisory",
"relationships": [],
"vulnId": "GCVE-1988-2026-0040",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Aug/17",
"automated": true,
"contentSha256": "b77e3bd23b7d5a05b59a0b0fb5b935fc5cdd5feabeb5315eef61d4ad5269540e",
"evidenceScore": 7,
"messageId": "",
"originalUrl": "https://seclists.org/fulldisclosure/2026/Aug/17",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-07-28T00:20:15Z"
}
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-09-07T13:20:21Z",
"dateUpdated": "2026-09-11T11:47:08Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0040"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}