Find a vulnerability

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "APPLE-SA-07-27-2026-4 macOS Sonoma",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-07-27-2026-4 macOS Sonoma 14.8.8\n\nmacOS Sonoma 14.8.8 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/en-us/128072.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccounts\nAvailable for: macOS Sonoma\nImpact: An app may be able to gain root privileges\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-43749: Adam Franke, Trung Nguyen (@everping) of CyStack, Ashish\nKunwar\n\nafpfs\nAvailable for: macOS Sonoma\nImpact: A remote attacker may be able to cause unexpected system\ntermination or corrupt kernel memory\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-64767: Dave G.\n\napache\nAvailable for: macOS Sonoma\nImpact: A remote attacker may be able to cause a denial-of-service\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2026-23918: \u042e\u043b\u0438\u044f \u041c\u0435\u0440\u0446\u0430\u043b\u043e\u0432\u0430\n\nAPFS\nAvailable for: macOS Sonoma\nImpact: A remote user may be able to cause unexpected system termination\nor corrupt kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-64695: Peter Malone\n\nApp Store\nAvailable for: macOS Sonoma\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with improved checks.\nCVE-2026-43801: Rahul Raj\n\nApple Account\nAvailable for: macOS Sonoma\nImpact: An app may be able to access sensitive user data\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-43781: Pinak Oza\n\nApple Account\nAvailable for: macOS Sonoma\nImpact: A malicious app may be able to break out of its sandbox\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-64737: Robert Mindo\n\nAppleRAID\nAvailable for: macOS Sonoma\nImpact: A local user may be able to read kernel memory\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-43681: impost0r (ret2plt), David Ige - Beryllium Security\n\nAssets\nAvailable for: macOS Sonoma\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-43672: \uc774\uc7ac\uc601\n\nATS\nAvailable for: macOS Sonoma\nImpact: An app may be able to read files outside of its sandbox\nDescription: A permissions issue was addressed by removing the\nvulnerable code.\nCVE-2026-43763: Pavan Nallamothu, Jared Reyes\n\nAudio\nAvailable for: macOS Sonoma\nImpact: An app may be able to break out of its sandbox\nDescription: An access issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-64702: John Lussier\n\nAudio\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause a denial-of-service\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)\n\nAVEVideoEncoder\nAvailable for: macOS Sonoma\nImpact: An app may be able to execute arbitrary code with kernel\nprivileges\nDescription: A buffer overflow was addressed with improved size\nvalidation.\nCVE-2026-64747: Franco Belman at Blackwing Intelligence\n\nAVEVideoEncoder\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-64762: Franco Belman at Blackwing Intelligence, Dun\n\nBackgroundAssets\nAvailable for: macOS Sonoma\nImpact: An app may be able to delete files for which it does not have\npermission\nDescription: A permissions issue was addressed with improved validation.\nCVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity\u0027s WeBin lab\n\nBOM\nAvailable for: macOS Sonoma\nImpact: A maliciously crafted ZIP archive may bypass Gatekeeper checks\nDescription: The issue was addressed with improved checks.\nCVE-2026-28849: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\ncd9660\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-64698: Richard Zana, Peter Malone, Nathaniel Oh (@calysteon),\nan anonymous researcher\n\nContacts\nAvailable for: macOS Sonoma\nImpact: Processing a maliciously crafted contact may leak sensitive data\nDescription: The issue was addressed with improved checks.\nCVE-2026-64734: Daniel Williams\n\nControl Center\nAvailable for: macOS Sonoma\nImpact: An app may be able to access user-sensitive data\nDescription: A logic issue was addressed with improved validation.\nCVE-2026-43756: \uc774\uc7ac\uc601\n\nCore Services\nAvailable for: macOS Sonoma\nImpact: An app may be able to gain root privileges\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-43693: Gergely Kalman (@gergely_kalman)\n\nCoreAudio\nAvailable for: macOS Sonoma\nImpact: Processing a maliciously crafted audio file may corrupt process\nmemory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative\n\nCoreAudio\nAvailable for: macOS Sonoma\nImpact: Processing an audio stream in a maliciously crafted media file\nmay terminate the process\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43744: Mathis Mansi\u00e8re, an anonymous researcher\n\nCoreAudio\nAvailable for: macOS Sonoma\nImpact: A remote attacker may be able to cause unexpected system\ntermination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43803: Rahul Raj\n\nCoreMedia\nAvailable for: macOS Sonoma\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: A memory corruption issue was addressed with improved\nmemory handling.\nCVE-2026-43711: James Duffy (@0x4A616D657344)\n\nCoreServices\nAvailable for: macOS Sonoma\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: The issue was addressed with improved checks.\nCVE-2026-28936: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nCoreUI\nAvailable for: macOS Sonoma\nImpact: Processing a maliciously crafted asset catalog may result in\ndisclosure of process memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-43738: Peter Malone\n\nCoreVideo\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43802: an anonymous researcher\n\nCrash Reporter\nAvailable for: macOS Sonoma\nImpact: An app may be able to leak sensitive user information\nDescription: A privacy issue was addressed by removing sensitive data.\nCVE-2026-64710: Matthew Schneider\n\nCUPS\nAvailable for: macOS Sonoma\nImpact: A malicious app may be able to gain root privileges\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-39875: XBreach.ai, Dallas Dubs, Andreas Jaegersberger \u0026 Ro\nAchterberg of Nosebeard Labs, Aaron Grattafiori - NVIDIA AI Red Team\n\nCUPS\nAvailable for: macOS Sonoma\nImpact: An app may be able to gain root privileges\nDescription: An injection issue was addressed with improved validation.\nCVE-2026-43698: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\ncurl\nAvailable for: macOS Sonoma\nImpact: Authentication credentials may be sent to a server on another\norigin\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2026-3784\nCVE-2026-3783\n\nData Detectors UI\nAvailable for: macOS Sonoma\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-43758: HvxyZLF\n\nDesktopServices\nAvailable for: macOS Sonoma\nImpact: An app may bypass Gatekeeper checks\nDescription: A file quarantine bypass was addressed with additional\nchecks.\nCVE-2026-64708: Lance Cain - Offensive Security Engineer, SpecterOps\nInc.\n\nDisk Images\nAvailable for: macOS Sonoma\nImpact: An app may be able to elevate privileges\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-28926: Jonathan Bar Or (@yo_yo_yo_jbo)\n\nDisk Images\nAvailable for: macOS Sonoma\nImpact: Parsing a maliciously crafted file may lead to an unexpected app\ntermination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-43747: Anthony Laou Hine Tsuei (@anarcheuz)\n\nDisk Images\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause unexpected system termination\nDescription: An integer overflow was addressed with improved input\nvalidation.\nCVE-2026-64694: Gil Portnoy \u0026 Henry\n\nDisk Images\nAvailable for: macOS Sonoma\nImpact: An app may be able to bypass network restrictions\nDescription: A permissions issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-28945: Ayaan Ahmad\n\nDisk Images\nAvailable for: macOS Sonoma\nImpact: An app may be able to disclose kernel memory\nDescription: The issue was addressed with improved bounds checks.\nCVE-2026-64776: Hyunwoo Kim (@v4bel)\n\nDriverKit\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause unexpected system termination\nDescription: An issue existed in the handling of environment variables.\nThis issue was addressed with improved validation.\nCVE-2026-43793: erdene-och Byambabayar\n\nDriverKit\nAvailable for: macOS Sonoma\nImpact: An attacker with physical access to a locked device may be able\nto view sensitive user information\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-43753: Niels Hofmans\n\nFoundation\nAvailable for: macOS Sonoma\nImpact: A malicious app may be able to access protected user data\nDescription: The issue was addressed with improved input sanitization.\nCVE-2026-43714: an anonymous researcher\n\nGame Center\nAvailable for: macOS Sonoma\nImpact: A malicious app may be able to break out of its sandbox\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-64740: Manuel Fernandez (Stackhopper Security)\n\nGame Center\nAvailable for: macOS Sonoma\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with improved data protection.\nCVE-2026-43796: Stanislav Jelezoglo, Ilya Andr (andrd3v) of Positive\nTechnologies\n\nHeimdal\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause a denial-of-service\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-64692: Redon Gashi\n\nHFS\nAvailable for: macOS Sonoma\nImpact: A remote user may be able to cause unexpected system termination\nor corrupt kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-43682: Trung Nguyen (@everping) of CyStack, Peter Malone,\nNicolas Rabrenovic, Dave G., Atul R V \u0026 Ashmit Sharma\n\nHFS\nAvailable for: macOS Sonoma\nImpact: Processing a maliciously crafted image may lead to arbitrary\ncode execution\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-28981: Hcamael and \u7ae0\u9c7c\u54e5@aipy \uff08aipyaipy.com\uff09, Aswin Kumar\nGokulakannan, Surya Narayan Kushwaha, Dun\n\nHFS\nAvailable for: macOS Sonoma\nImpact: Mounting a maliciously crafted disk image may cause unexpected\nsystem termination or corrupt kernel memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-43773: Surya Narayan Kushwaha, Richard Zana, Peter Malone,\nHyunwoo Kim (@v4bel), Cem Onat Karagun\n\nHFS\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause unexpected system termination\nDescription: The issue was addressed with"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T10:11:22Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Aug/19"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Aug/19"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/downloads/"
        },
        {
          "url": "https://support.apple.com/en-us/128072"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Aug/19"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-07-27-2026-4 macOS Sonoma 14.8.8",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2025-43325",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20672",
              "type": "related"
            },
            {
              "destId": "CVE-2026-23918",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28849",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28896",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28900",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28911",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28914",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28926",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28932",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28936",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28945",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28961",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28973",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28981",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28982",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28983",
              "type": "related"
            },
            {
              "destId": "CVE-2026-3783",
              "type": "related"
            },
            {
              "destId": "CVE-2026-3784",
              "type": "related"
            },
            {
              "destId": "CVE-2026-39868",
              "type": "related"
            },
            {
              "destId": "CVE-2026-39873",
              "type": "related"
            },
            {
              "destId": "CVE-2026-39874",
              "type": "related"
            },
            {
              "destId": "CVE-2026-39875",
              "type": "related"
            },
            {
              "destId": "CVE-2026-39877",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43661",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43665",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43672",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43673",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43681",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43682",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43693",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43694",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43698",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43703",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43706",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43710",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43711",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43714",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43722",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43723",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43724",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43738",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43744",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43747",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43749",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43750",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43753",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43754",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43755",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43756",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43757",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43758",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43760",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43763",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43764",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43765",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43766",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43767",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43768",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43769",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43770",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43771",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43772",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43773",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43774",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43777",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43778",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43779",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43780",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43781",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43782",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43793",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43796",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43799",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43801",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43802",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43803",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43805",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43807",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43809",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43810",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43818",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43822",
              "type": "related"
            },
            {
              "destId": "CVE-2026-4424",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64692",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64693",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64694",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64695",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64696",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64697",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64698",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64699",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64700",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64702",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64703",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64704",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64707",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64708",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64709",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64710",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64711",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64716",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64721",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64723",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64724",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64725",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64734",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64735",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64737",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64738",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64739",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64740",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64744",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64747",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64754",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64762",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64763",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64764",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64765",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64766",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64767",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64768",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64769",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64770",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64774",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64775",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64776",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0290",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Aug/19",
            "automated": true,
            "contentSha256": "ec03a2d218b69dc7ce06cd9f0bf5f6850a1964223cc1bef0f9466ca4f7384d34",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Aug/19",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-07-28T00:21:11Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0290"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-09-08T11:40:47Z",
    "dateUpdated": "2026-09-09T10:11:22Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0290"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "APPLE-SA-07-27-2026-4 macOS Sonoma",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-07-27-2026-4 macOS Sonoma 14.8.8\n\nmacOS Sonoma 14.8.8 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/en-us/128072.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccounts\nAvailable for: macOS Sonoma\nImpact: An app may be able to gain root privileges\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-43749: Adam Franke, Trung Nguyen (@everping) of CyStack, Ashish\nKunwar\n\nafpfs\nAvailable for: macOS Sonoma\nImpact: A remote attacker may be able to cause unexpected system\ntermination or corrupt kernel memory\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-64767: Dave G.\n\napache\nAvailable for: macOS Sonoma\nImpact: A remote attacker may be able to cause a denial-of-service\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2026-23918: \u042e\u043b\u0438\u044f \u041c\u0435\u0440\u0446\u0430\u043b\u043e\u0432\u0430\n\nAPFS\nAvailable for: macOS Sonoma\nImpact: A remote user may be able to cause unexpected system termination\nor corrupt kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-64695: Peter Malone\n\nApp Store\nAvailable for: macOS Sonoma\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with improved checks.\nCVE-2026-43801: Rahul Raj\n\nApple Account\nAvailable for: macOS Sonoma\nImpact: An app may be able to access sensitive user data\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-43781: Pinak Oza\n\nApple Account\nAvailable for: macOS Sonoma\nImpact: A malicious app may be able to break out of its sandbox\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-64737: Robert Mindo\n\nAppleRAID\nAvailable for: macOS Sonoma\nImpact: A local user may be able to read kernel memory\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-43681: impost0r (ret2plt), David Ige - Beryllium Security\n\nAssets\nAvailable for: macOS Sonoma\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-43672: \uc774\uc7ac\uc601\n\nATS\nAvailable for: macOS Sonoma\nImpact: An app may be able to read files outside of its sandbox\nDescription: A permissions issue was addressed by removing the\nvulnerable code.\nCVE-2026-43763: Pavan Nallamothu, Jared Reyes\n\nAudio\nAvailable for: macOS Sonoma\nImpact: An app may be able to break out of its sandbox\nDescription: An access issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-64702: John Lussier\n\nAudio\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause a denial-of-service\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)\n\nAVEVideoEncoder\nAvailable for: macOS Sonoma\nImpact: An app may be able to execute arbitrary code with kernel\nprivileges\nDescription: A buffer overflow was addressed with improved size\nvalidation.\nCVE-2026-64747: Franco Belman at Blackwing Intelligence\n\nAVEVideoEncoder\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-64762: Franco Belman at Blackwing Intelligence, Dun\n\nBackgroundAssets\nAvailable for: macOS Sonoma\nImpact: An app may be able to delete files for which it does not have\npermission\nDescription: A permissions issue was addressed with improved validation.\nCVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity\u0027s WeBin lab\n\nBOM\nAvailable for: macOS Sonoma\nImpact: A maliciously crafted ZIP archive may bypass Gatekeeper checks\nDescription: The issue was addressed with improved checks.\nCVE-2026-28849: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\ncd9660\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-64698: Richard Zana, Peter Malone, Nathaniel Oh (@calysteon),\nan anonymous researcher\n\nContacts\nAvailable for: macOS Sonoma\nImpact: Processing a maliciously crafted contact may leak sensitive data\nDescription: The issue was addressed with improved checks.\nCVE-2026-64734: Daniel Williams\n\nControl Center\nAvailable for: macOS Sonoma\nImpact: An app may be able to access user-sensitive data\nDescription: A logic issue was addressed with improved validation.\nCVE-2026-43756: \uc774\uc7ac\uc601\n\nCore Services\nAvailable for: macOS Sonoma\nImpact: An app may be able to gain root privileges\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-43693: Gergely Kalman (@gergely_kalman)\n\nCoreAudio\nAvailable for: macOS Sonoma\nImpact: Processing a maliciously crafted audio file may corrupt process\nmemory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative\n\nCoreAudio\nAvailable for: macOS Sonoma\nImpact: Processing an audio stream in a maliciously crafted media file\nmay terminate the process\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43744: Mathis Mansi\u00e8re, an anonymous researcher\n\nCoreAudio\nAvailable for: macOS Sonoma\nImpact: A remote attacker may be able to cause unexpected system\ntermination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43803: Rahul Raj\n\nCoreMedia\nAvailable for: macOS Sonoma\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: A memory corruption issue was addressed with improved\nmemory handling.\nCVE-2026-43711: James Duffy (@0x4A616D657344)\n\nCoreServices\nAvailable for: macOS Sonoma\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: The issue was addressed with improved checks.\nCVE-2026-28936: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nCoreUI\nAvailable for: macOS Sonoma\nImpact: Processing a maliciously crafted asset catalog may result in\ndisclosure of process memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-43738: Peter Malone\n\nCoreVideo\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43802: an anonymous researcher\n\nCrash Reporter\nAvailable for: macOS Sonoma\nImpact: An app may be able to leak sensitive user information\nDescription: A privacy issue was addressed by removing sensitive data.\nCVE-2026-64710: Matthew Schneider\n\nCUPS\nAvailable for: macOS Sonoma\nImpact: A malicious app may be able to gain root privileges\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-39875: XBreach.ai, Dallas Dubs, Andreas Jaegersberger \u0026 Ro\nAchterberg of Nosebeard Labs, Aaron Grattafiori - NVIDIA AI Red Team\n\nCUPS\nAvailable for: macOS Sonoma\nImpact: An app may be able to gain root privileges\nDescription: An injection issue was addressed with improved validation.\nCVE-2026-43698: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\ncurl\nAvailable for: macOS Sonoma\nImpact: Authentication credentials may be sent to a server on another\norigin\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2026-3784\nCVE-2026-3783\n\nData Detectors UI\nAvailable for: macOS Sonoma\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-43758: HvxyZLF\n\nDesktopServices\nAvailable for: macOS Sonoma\nImpact: An app may bypass Gatekeeper checks\nDescription: A file quarantine bypass was addressed with additional\nchecks.\nCVE-2026-64708: Lance Cain - Offensive Security Engineer, SpecterOps\nInc.\n\nDisk Images\nAvailable for: macOS Sonoma\nImpact: An app may be able to elevate privileges\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-28926: Jonathan Bar Or (@yo_yo_yo_jbo)\n\nDisk Images\nAvailable for: macOS Sonoma\nImpact: Parsing a maliciously crafted file may lead to an unexpected app\ntermination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-43747: Anthony Laou Hine Tsuei (@anarcheuz)\n\nDisk Images\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause unexpected system termination\nDescription: An integer overflow was addressed with improved input\nvalidation.\nCVE-2026-64694: Gil Portnoy \u0026 Henry\n\nDisk Images\nAvailable for: macOS Sonoma\nImpact: An app may be able to bypass network restrictions\nDescription: A permissions issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-28945: Ayaan Ahmad\n\nDisk Images\nAvailable for: macOS Sonoma\nImpact: An app may be able to disclose kernel memory\nDescription: The issue was addressed with improved bounds checks.\nCVE-2026-64776: Hyunwoo Kim (@v4bel)\n\nDriverKit\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause unexpected system termination\nDescription: An issue existed in the handling of environment variables.\nThis issue was addressed with improved validation.\nCVE-2026-43793: erdene-och Byambabayar\n\nDriverKit\nAvailable for: macOS Sonoma\nImpact: An attacker with physical access to a locked device may be able\nto view sensitive user information\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-43753: Niels Hofmans\n\nFoundation\nAvailable for: macOS Sonoma\nImpact: A malicious app may be able to access protected user data\nDescription: The issue was addressed with improved input sanitization.\nCVE-2026-43714: an anonymous researcher\n\nGame Center\nAvailable for: macOS Sonoma\nImpact: A malicious app may be able to break out of its sandbox\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-64740: Manuel Fernandez (Stackhopper Security)\n\nGame Center\nAvailable for: macOS Sonoma\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with improved data protection.\nCVE-2026-43796: Stanislav Jelezoglo, Ilya Andr (andrd3v) of Positive\nTechnologies\n\nHeimdal\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause a denial-of-service\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-64692: Redon Gashi\n\nHFS\nAvailable for: macOS Sonoma\nImpact: A remote user may be able to cause unexpected system termination\nor corrupt kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-43682: Trung Nguyen (@everping) of CyStack, Peter Malone,\nNicolas Rabrenovic, Dave G., Atul R V \u0026 Ashmit Sharma\n\nHFS\nAvailable for: macOS Sonoma\nImpact: Processing a maliciously crafted image may lead to arbitrary\ncode execution\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-28981: Hcamael and \u7ae0\u9c7c\u54e5@aipy \uff08aipyaipy.com\uff09, Aswin Kumar\nGokulakannan, Surya Narayan Kushwaha, Dun\n\nHFS\nAvailable for: macOS Sonoma\nImpact: Mounting a maliciously crafted disk image may cause unexpected\nsystem termination or corrupt kernel memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-43773: Surya Narayan Kushwaha, Richard Zana, Peter Malone,\nHyunwoo Kim (@v4bel), Cem Onat Karagun\n\nHFS\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause unexpected system termination\nDescription: The issue was addressed with"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T10:11:22Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Aug/19"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Aug/19"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/downloads/"
        },
        {
          "url": "https://support.apple.com/en-us/128072"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Aug/19"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-07-27-2026-4 macOS Sonoma 14.8.8",
      "x_gcve": [
        {
          "recordType": "advisory",
          "relationships": [],
          "vulnId": "GCVE-1988-2026-0042",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Aug/19",
            "automated": true,
            "contentSha256": "ec03a2d218b69dc7ce06cd9f0bf5f6850a1964223cc1bef0f9466ca4f7384d34",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Aug/19",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-07-28T00:21:11Z"
          }
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-09-07T13:20:21Z",
    "dateUpdated": "2026-09-09T10:11:22Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0042"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}