GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

GCVE-1988-2026-0263

Vulnerability from gna-1988 – Published: 2026-09-08 08:13 – Updated: 2026-09-09 10:08
VLAI
Title
APPLE-SA-03-24-2026-3 macOS Tahoe 26.4
Summary
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-03-24-2026-3 macOS Tahoe 26.4 macOS Tahoe 26.4 addresses the following issues. Information about the security content is also available at https://support.apple.com/126794. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. 802.1X Available for: macOS Tahoe Impact: An attacker in a privileged network position may be able to intercept network traffic Description: An authentication issue was addressed with improved state management. CVE-2026-28865: Héloïse Gollier and Mathy Vanhoef (KU Leuven) Accounts Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-28877: Rosyna Keller of Totally Not Malicious Software Admin Framework Available for: macOS Tahoe Impact: An app with root privileges may be able to delete protected system files Description: A path handling issue was addressed with improved validation. CVE-2026-28823: Ryan Dowd (@_rdowd) apache Available for: macOS Tahoe Impact: Multiple issues in Apache Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. CVE-2025-55753 CVE-2025-58098 CVE-2025-59775 CVE-2025-65082 CVE-2025-66200 AppleMobileFileIntegrity Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-28824: Mickey Jin (@patch1t) AppleMobileFileIntegrity Available for: macOS Tahoe Impact: An app may be able to access user-sensitive data Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. CVE-2026-20699: Mickey Jin (@patch1t) AppleScript Available for: macOS Tahoe Impact: An app may bypass Gatekeeper checks Description: A permissions issue was addressed with additional restrictions. CVE-2026-20684: Koh M. Nakagawa (@tsunek0h) of FFRI Security, Inc. Archive Utility Available for: macOS Tahoe Impact: An app may be able to access user-sensitive data Description: This issue was addressed with improved handling of symlinks. CVE-2026-20633: Mickey Jin (@patch1t) Audio Available for: macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: A use-after-free issue was addressed with improved memory management. CVE-2026-28879: Justin Cohen of Google Audio Available for: macOS Tahoe Impact: An attacker may be able to cause unexpected app termination Description: A type confusion issue was addressed with improved memory handling. CVE-2026-28822: Jex Amro Calling Framework Available for: macOS Tahoe Impact: A remote attacker may be able to cause a denial-of-service Description: A denial-of-service issue was addressed with improved input validation. CVE-2026-28894: an anonymous researcher Clipboard Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: This issue was addressed with improved validation of symlinks. CVE-2026-28866: Cristian Dinca (icmd.tech) CoreMedia Available for: macOS Tahoe Impact: Processing an audio stream in a maliciously crafted media file may terminate the process Description: An out-of-bounds access issue was addressed with improved bounds checking. CVE-2026-20690: Hossein Lotfi (@hosselot) of Trend Micro Zero Day Initiative CoreServices Available for: macOS Tahoe Impact: An app may be able to gain elevated privileges Description: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. CVE-2026-28821: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab CoreServices Available for: macOS Tahoe Impact: An app may be able to break out of its sandbox Description: A permissions issue was addressed with additional sandbox restrictions. CVE-2026-28838: an anonymous researcher CoreUtils Available for: macOS Tahoe Impact: A user in a privileged network position may be able to cause a denial-of-service Description: A null pointer dereference was addressed with improved input validation. CVE-2026-28886: Etienne Charron (Renault) and Victoria Martini (Renault) Crash Reporter Available for: macOS Tahoe Impact: An app may be able to enumerate a user's installed apps Description: A privacy issue was addressed by removing sensitive data. CVE-2026-28878: Zhongcheng Li from IES Red Team CUPS Available for: macOS Tahoe Impact: An app may be able to gain root privileges Description: A race condition was addressed with improved state handling. CVE-2026-28888: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs CUPS Available for: macOS Tahoe Impact: A document may be written to a temporary file when using print preview Description: A privacy issue was addressed with improved handling of temporary files. CVE-2026-28893: Asaf Cohen curl Available for: macOS Tahoe Impact: An issue existed in curl which may result in unintentionally sending sensitive information via an incorrect connection Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. CVE-2025-14524 DeviceLink Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-28876: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs Diagnostics Available for: macOS Tahoe Impact: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed by removing the vulnerable code. CVE-2026-28892: 风沐云烟 (@binary_fmyy) and Minghao Lin (@Y1nKoc) File System Available for: macOS Tahoe Impact: An app may be able to disclose kernel memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-28832: DARKNAVY (@DarkNavyOrg) GeoServices Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: An information leakage was addressed with additional validation. CVE-2026-28870: XiguaSec GPU Drivers Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination Description: A race condition was addressed with improved state handling. CVE-2026-28834: an anonymous researcher iCloud Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed by moving sensitive data. CVE-2026-28881: Ye Zhang of Baidu Security, Ryan Dowd (@_rdowd), Csaba Fitzl (@theevilbit) of Iru iCloud Available for: macOS Tahoe Impact: An app may be able to enumerate a user's installed apps Description: A permissions issue was addressed with additional restrictions. CVE-2026-28880: Zhongcheng Li from IES Red Team CVE-2026-28833: Zhongcheng Li from IES Red Team ImageIO Available for: macOS Tahoe Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. CVE-2025-64505 IOGraphics Available for: macOS Tahoe Impact: A buffer overflow may result in memory corruption and unexpected app termination Description: The issue was addressed with improved bounds checks. CVE-2026-28842: Joseph Ravichandran (@0xjprx) of MIT CSAIL IOGraphics Available for: macOS Tahoe Impact: A buffer overflow may result in memory corruption and unexpected app termination Description: A buffer overflow was addressed with improved size validation. CVE-2026-28841: Joseph Ravichandran (@0xjprx) of MIT CSAIL Kernel Available for: macOS Tahoe Impact: An app may be able to disclose kernel memory Description: A logging issue was addressed with improved data redaction. CVE-2026-28868: 이동하 (Lee Dong Ha of BoB 0xB6) Kernel Available for: macOS Tahoe Impact: An app may be able to leak sensitive kernel state Description: This issue was addressed with improved authentication. CVE-2026-28867: Jian Lee (@speedyfriend433) Kernel Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: The issue was addressed with improved memory handling. CVE-2026-20698: DARKNAVY (@DarkNavyOrg) Kernel Available for: macOS Tahoe Impact: An app may be able to determine kernel memory layout Description: An information disclosure issue was addressed with improved memory management. CVE-2026-20695: 이동하 (Lee Dong Ha of BoB 0xB6) working with TrendAI Zero Day Initiative, hari shanmugam Kernel Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or write kernel memory Description: A use after free issue was addressed with improved memory management. CVE-2026-20687: Johnny Franks (@zeroxjf) LaunchServices Available for: macOS Tahoe Impact: An app may be able to access protected user data Description: An authorization issue was addressed with improved state management. CVE-2026-28845: Yuebin Sun (@yuebinsun2020), an anonymous researcher, Nathaniel Oh (@calysteon), Kirin (@Pwnrin), Wojciech Regula of SecuRing (wojciechregula.blog), Joshua Jewett (@JoshJewett33), an anonymous researcher libxpc Available for: macOS Tahoe Impact: An app may be able to enumerate a user's installed apps Description: This issue was addressed with improved checks. CVE-2026-28882: Ilias Morad (A2nkF) of Voynich Group, Duy Trần (@khanhduytran0), @hugeBlack libxpc Available for: macOS Tahoe Impact: An app may be able to access protected user data Description: A permissions issue was addressed with additional restrictions. CVE-2026-20607: an anonymous researcher Mail Available for: macOS Tahoe Impact: "Hide IP Address" and "Block All Remote Content" may not apply to all mail content Description: A privacy issue was addressed with improved handling of user preferences. CVE-2026-20692: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs MigrationKit Available for: macOS Tahoe Impact: An app may be able to access user-sensitive data Description: This issue was addressed with improved handling of symlinks. CVE-2026-20694: Rodolphe Brunetti (@eisw0lf) of Lupus Nova Music Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-20632: Rodolphe Brunetti (@eisw0lf) of Lupus Nova NetAuth Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: The issue was addressed with improved checks. CVE-2026-28839: Mickey Jin (@patch1t) NetAuth Available for: macOS Tahoe Impact: An app may be able to connect to a network share without user consent Description: An access issue was addressed with additional sandbox restrictions. CVE-2026-20701: Matej Moravec (@MacejkoMoravec) NetAuth Available for: macOS Tahoe Impact: An app may be able to break out of its sandbox Description: A race condition was addressed with additional validation. CVE-2026-28891: an anonymous researcher NetFSFramework Available for: macOS Tahoe Impact: An app may be able to break out of its sandbox Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-28827: Csaba Fitzl (@theevilbit) of Iru, an anonymous researcher Notes Available for: macOS Tahoe Impact: An app may be able to delete files for which it does not have permission Description: A path handling issue was addressed with improved validation. CVE-2026-28816: Dawuge of Shuffl
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version CPE status
Apple APPLE-SA-03-24-2026-3 macOS Tahoe Affected: unknown
guessed Create a notification for this product.
Credits
Apple Product Security via Fulldisclosure
Relationships
reference GCVE-1988-2026-0263 (this record)
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "APPLE-SA-03-24-2026-3 macOS Tahoe",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-03-24-2026-3 macOS Tahoe 26.4\n\nmacOS Tahoe 26.4 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/126794.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\n802.1X\nAvailable for: macOS Tahoe\nImpact: An attacker in a privileged network position may be able to\nintercept network traffic\nDescription: An authentication issue was addressed with improved state\nmanagement.\nCVE-2026-28865: H\u00e9lo\u00efse Gollier and Mathy Vanhoef (KU Leuven)\n\nAccounts\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-28877: Rosyna Keller of Totally Not Malicious Software\n\nAdmin Framework\nAvailable for: macOS Tahoe\nImpact: An app with root privileges may be able to delete protected\nsystem files\nDescription: A path handling issue was addressed with improved\nvalidation.\nCVE-2026-28823: Ryan Dowd (@_rdowd)\n\napache\nAvailable for: macOS Tahoe\nImpact: Multiple issues in Apache\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-55753\nCVE-2025-58098\nCVE-2025-59775\nCVE-2025-65082\nCVE-2025-66200\n\nAppleMobileFileIntegrity\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-28824: Mickey Jin (@patch1t)\n\nAppleMobileFileIntegrity\nAvailable for: macOS Tahoe\nImpact: An app may be able to access user-sensitive data\nDescription: A downgrade issue affecting Intel-based Mac computers was\naddressed with additional code-signing restrictions.\nCVE-2026-20699: Mickey Jin (@patch1t)\n\nAppleScript\nAvailable for: macOS Tahoe\nImpact: An app may bypass Gatekeeper checks\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-20684: Koh M. Nakagawa (@tsunek0h) of FFRI Security, Inc.\n\nArchive Utility\nAvailable for: macOS Tahoe\nImpact: An app may be able to access user-sensitive data\nDescription: This issue was addressed with improved handling of\nsymlinks.\nCVE-2026-20633: Mickey Jin (@patch1t)\n\nAudio\nAvailable for: macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process crash\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nCVE-2026-28879: Justin Cohen of Google\n\nAudio\nAvailable for: macOS Tahoe\nImpact: An attacker may be able to cause unexpected app termination\nDescription: A type confusion issue was addressed with improved memory\nhandling.\nCVE-2026-28822: Jex Amro\n\nCalling Framework\nAvailable for: macOS Tahoe\nImpact: A remote attacker may be able to cause a denial-of-service\nDescription: A denial-of-service issue was addressed with improved input\nvalidation.\nCVE-2026-28894: an anonymous researcher\n\nClipboard\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with improved validation of\nsymlinks.\nCVE-2026-28866: Cristian Dinca (icmd.tech)\n\nCoreMedia\nAvailable for: macOS Tahoe\nImpact: Processing an audio stream in a maliciously crafted media file\nmay terminate the process\nDescription: An out-of-bounds access issue was addressed with improved\nbounds checking.\nCVE-2026-20690: Hossein Lotfi (@hosselot) of Trend Micro Zero Day\nInitiative\n\nCoreServices\nAvailable for: macOS Tahoe\nImpact: An app may be able to gain elevated privileges\nDescription: A validation issue existed in the entitlement verification.\nThis issue was addressed with improved validation of the process\nentitlement.\nCVE-2026-28821: YingQi Shi (@Mas0nShi) of DBAppSecurity\u0027s WeBin lab\n\nCoreServices\nAvailable for: macOS Tahoe\nImpact: An app may be able to break out of its sandbox\nDescription: A permissions issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-28838: an anonymous researcher\n\nCoreUtils\nAvailable for: macOS Tahoe\nImpact: A user in a privileged network position may be able to cause a\ndenial-of-service\nDescription: A null pointer dereference was addressed with improved\ninput validation.\nCVE-2026-28886: Etienne Charron (Renault) and Victoria Martini (Renault)\n\nCrash Reporter\nAvailable for: macOS Tahoe\nImpact: An app may be able to enumerate a user\u0027s installed apps\nDescription: A privacy issue was addressed by removing sensitive data.\nCVE-2026-28878: Zhongcheng Li from IES Red Team\n\nCUPS\nAvailable for: macOS Tahoe\nImpact: An app may be able to gain root privileges\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-28888: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nCUPS\nAvailable for: macOS Tahoe\nImpact: A document may be written to a temporary file when using print\npreview\nDescription: A privacy issue was addressed with improved handling of\ntemporary files.\nCVE-2026-28893: Asaf Cohen\n\ncurl\nAvailable for: macOS Tahoe\nImpact: An issue existed in curl which may result in unintentionally\nsending sensitive information via an incorrect connection\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-14524\n\nDeviceLink\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-28876: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nDiagnostics\nAvailable for: macOS Tahoe\nImpact: An app may be able to modify protected parts of the file system\nDescription: A permissions issue was addressed by removing the\nvulnerable code.\nCVE-2026-28892: \u98ce\u6c90\u4e91\u70df (@binary_fmyy) and Minghao Lin (@Y1nKoc)\n\nFile System\nAvailable for: macOS Tahoe\nImpact: An app may be able to disclose kernel memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-28832: DARKNAVY (@DarkNavyOrg)\n\nGeoServices\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: An information leakage was addressed with additional\nvalidation.\nCVE-2026-28870: XiguaSec\n\nGPU Drivers\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-28834: an anonymous researcher\n\niCloud\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: A privacy issue was addressed by moving sensitive data.\nCVE-2026-28881: Ye Zhang of Baidu Security, Ryan Dowd (@_rdowd), Csaba\nFitzl (@theevilbit) of Iru\n\niCloud\nAvailable for: macOS Tahoe\nImpact: An app may be able to enumerate a user\u0027s installed apps\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-28880: Zhongcheng Li from IES Red Team\nCVE-2026-28833: Zhongcheng Li from IES Red Team\n\nImageIO\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-64505\n\nIOGraphics\nAvailable for: macOS Tahoe\nImpact: A buffer overflow may result in memory corruption and unexpected\napp termination\nDescription: The issue was addressed with improved bounds checks.\nCVE-2026-28842: Joseph Ravichandran (@0xjprx) of MIT CSAIL\n\nIOGraphics\nAvailable for: macOS Tahoe\nImpact: A buffer overflow may result in memory corruption and unexpected\napp termination\nDescription: A buffer overflow was addressed with improved size\nvalidation.\nCVE-2026-28841: Joseph Ravichandran (@0xjprx) of MIT CSAIL\n\nKernel\nAvailable for: macOS Tahoe\nImpact: An app may be able to disclose kernel memory\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-28868: \uc774\ub3d9\ud558 (Lee Dong Ha of BoB 0xB6)\n\nKernel\nAvailable for: macOS Tahoe\nImpact: An app may be able to leak sensitive kernel state\nDescription: This issue was addressed with improved authentication.\nCVE-2026-28867: Jian Lee (@speedyfriend433)\n\nKernel\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-20698: DARKNAVY (@DarkNavyOrg)\n\nKernel\nAvailable for: macOS Tahoe\nImpact: An app may be able to determine kernel memory layout\nDescription: An information disclosure issue was addressed with improved\nmemory management.\nCVE-2026-20695: \uc774\ub3d9\ud558 (Lee Dong Ha of BoB 0xB6) working with TrendAI Zero\nDay Initiative, hari shanmugam\n\nKernel\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-20687: Johnny Franks (@zeroxjf)\n\nLaunchServices\nAvailable for: macOS Tahoe\nImpact: An app may be able to access protected user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-28845: Yuebin Sun (@yuebinsun2020), an anonymous researcher,\nNathaniel Oh (@calysteon), Kirin (@Pwnrin), Wojciech Regula of SecuRing\n(wojciechregula.blog), Joshua Jewett (@JoshJewett33), an anonymous\nresearcher\n\nlibxpc\nAvailable for: macOS Tahoe\nImpact: An app may be able to enumerate a user\u0027s installed apps\nDescription: This issue was addressed with improved checks.\nCVE-2026-28882: Ilias Morad (A2nkF) of Voynich Group, Duy Tr\u1ea7n\n(@khanhduytran0), @hugeBlack\n\nlibxpc\nAvailable for: macOS Tahoe\nImpact: An app may be able to access protected user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-20607: an anonymous researcher\n\nMail\nAvailable for: macOS Tahoe\nImpact: \"Hide IP Address\" and \"Block All Remote Content\" may not apply\nto all mail content\nDescription: A privacy issue was addressed with improved handling of\nuser preferences.\nCVE-2026-20692: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nMigrationKit\nAvailable for: macOS Tahoe\nImpact: An app may be able to access user-sensitive data\nDescription: This issue was addressed with improved handling of\nsymlinks.\nCVE-2026-20694: Rodolphe Brunetti (@eisw0lf) of Lupus Nova\n\nMusic\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-20632: Rodolphe Brunetti (@eisw0lf) of Lupus Nova\n\nNetAuth\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: The issue was addressed with improved checks.\nCVE-2026-28839: Mickey Jin (@patch1t)\n\nNetAuth\nAvailable for: macOS Tahoe\nImpact: An app may be able to connect to a network share without user\nconsent\nDescription: An access issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-20701: Matej Moravec (@MacejkoMoravec)\n\nNetAuth\nAvailable for: macOS Tahoe\nImpact: An app may be able to break out of its sandbox\nDescription: A race condition was addressed with additional validation.\nCVE-2026-28891: an anonymous researcher\n\nNetFSFramework\nAvailable for: macOS Tahoe\nImpact: An app may be able to break out of its sandbox\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-28827: Csaba Fitzl (@theevilbit) of Iru, an anonymous\nresearcher\n\nNotes\nAvailable for: macOS Tahoe\nImpact: An app may be able to delete files for which it does not have\npermission\nDescription: A path handling issue was addressed with improved\nvalidation.\nCVE-2026-28816: Dawuge of Shuffl"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T10:08:24Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Mar/18"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Mar/18"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/126794"
        },
        {
          "url": "https://support.apple.com/downloads/"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Mar/18"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-03-24-2026-3 macOS Tahoe 26.4",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2025-14524",
              "type": "related"
            },
            {
              "destId": "CVE-2025-55753",
              "type": "related"
            },
            {
              "destId": "CVE-2025-58098",
              "type": "related"
            },
            {
              "destId": "CVE-2025-59775",
              "type": "related"
            },
            {
              "destId": "CVE-2025-64505",
              "type": "related"
            },
            {
              "destId": "CVE-2025-65082",
              "type": "related"
            },
            {
              "destId": "CVE-2025-66200",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20607",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20631",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20632",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20633",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20643",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20664",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20665",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20684",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20687",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20688",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20690",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20691",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20692",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20693",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20694",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20695",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20697",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20698",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20699",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20701",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28816",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28817",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28818",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28820",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28821",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28822",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28823",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28824",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28825",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28826",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28827",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28828",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28829",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28831",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28832",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28833",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28834",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28835",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28837",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28838",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28839",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28841",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28842",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28844",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28845",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28852",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28857",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28859",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28861",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28862",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28864",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28865",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28866",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28867",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28868",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28870",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28871",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28876",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28877",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28878",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28879",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28880",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28881",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28882",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28886",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28888",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28891",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28892",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28893",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28894",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0263",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Mar/18",
            "automated": true,
            "contentSha256": "5ec5e92e1937263fbb1fb6cbadb95f55c866730942b6bfbda704435f0abb614e",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Mar/18",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-03-25T00:01:47Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0263"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-09-08T08:13:42Z",
    "dateUpdated": "2026-09-09T10:08:24Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0263"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.