GCVE-1988-2026-0458

Vulnerability from gna-1988 – Published: 2026-11-02 07:29 – Updated: 2026-11-02 07:29
VLAI
Title
APPLE-SA-10-26-2026-6 macOS Sequoia 15.8.2
Summary
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-10-26-2026-6 macOS Sequoia 15.8.2 macOS Sequoia 15.8.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/149523. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Accelerate Available for: macOS Sequoia Impact: An app may be able to cause a denial-of-service Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-28991: Seiji Sakurai (@HeapSmasher) Accelerate Framework Available for: macOS Sequoia Impact: Processing a maliciously crafted image may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-86971: an anonymous researcher Accounts Available for: macOS Sequoia Impact: A malicious application may be able to bypass Privacy preferences Description: A logging issue was addressed with improved data redaction. CVE-2026-113898: Bhaswanth Chigurupati afpfs Available for: macOS Sequoia Impact: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory Description: A buffer overflow was addressed with improved bounds checking. CVE-2026-64767: Dave G. APFS Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or read kernel memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan Dautov, Peter Malone APFS Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or write kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112536: Ruslan Dautov, Thomas Guillem, Narendra Singh (@_3P1C), Kwak Kiyong (@Pwnkai23), Song Nuri, Thanatos Tian (HKPolyU) & wgg with Diffract App Store Available for: macOS Sequoia Impact: A remote attacker may be able to break out of the WebContent sandbox Description: This issue was addressed with improved input validation. CVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos Apple Intelligence Available for: macOS Sequoia Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-86920: Johan Wahyudi Apple Neural Engine Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-84595: tamdao Apple Neural Engine Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112696: Jaeyeong Lee AppleAVD Available for: macOS Sequoia Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112416: an anonymous researcher, Meta Red Team X - Nik Tsytsarkin, Narendra Singh (@_3P1C), Hcamael and 章鱼哥@aipy (aipyaipy.com), Dohyeon An @PILAB Technology, Inc AppleAVD Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: An out-of-bounds write was addressed with improved input validation. CVE-2026-112415: Rahul Raj, Hcamael and 章鱼哥@aipy (aipyaipy.com) AppleAVD Available for: macOS Sequoia Impact: A malicious app may be able to break out of its sandbox Description: An information leakage was addressed with additional validation. CVE-2026-112704: Josh Maine of Calif.io AppleMobileFileIntegrity Available for: macOS Sequoia Impact: A malicious app may be able to read or write to protected files Description: A permissions issue was addressed with additional restrictions. CVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos AppleRAID Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination Description: A use after free issue was addressed with improved memory management. CVE-2026-112531: Chanwit Muenprakoddee (ChemIndy) ArchiveService Available for: macOS Sequoia Impact: An app may bypass Gatekeeper checks Description: A logic issue was addressed with improved state management. CVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul Montgomery (@nullevent) ArchiveService Available for: macOS Sequoia Impact: Processing a maliciously crafted file may bypass Gatekeeper checks Description: A logic issue was addressed with improved checks. CVE-2026-112568: an anonymous researcher Audio Available for: macOS Sequoia Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112546: lunar815, Nathaniel Oh (@calysteon), Piotr Jerzy Duszynski, an anonymous researcher, Surej Sekhar, r3pwnx (@r3pwnx), Lily Cohl (@GenericCoding) Audio Available for: macOS Sequoia Impact: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks. CVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud AVEVideoEncoder Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io AVEVideoEncoder Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved input validation. CVE-2026-112689: Franco Belman at Blackwing Intelligence AVEVideoEncoder Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112470: Hcamael and 章鱼哥@aipy (aipyaipy.com) CVE-2026-112468: Hcamael and 章鱼哥@aipy (aipyaipy.com) CVE-2026-112469: Hcamael and 章鱼哥@aipy (aipyaipy.com) AVEVideoEncoder Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or read kernel memory Description: An out-of-bounds read was addressed with improved input validation. CVE-2026-112466: Hcamael and 章鱼哥@aipy (aipyaipy.com) BOM Available for: macOS Sequoia Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks Description: A file quarantine bypass was addressed with additional checks. CVE-2026-84610: Murray Mike, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs BOM Available for: macOS Sequoia Impact: Processing a maliciously crafted file may lead to heap corruption Description: An out-of-bounds write issue was addressed with improved input validation. CVE-2026-112670: Bhaswanth Chigurupati BOM Available for: macOS Sequoia Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks Description: The issue was addressed with improved checks. CVE-2026-112672: 준우 이, Pasquale Scola Calendar Available for: macOS Sequoia Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions. CVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re) Carbon Core Available for: macOS Sequoia Impact: An app may be able to access sensitive user data Description: A logging issue was addressed with improved data redaction. CVE-2026-84528: zenith Carbon Core Available for: macOS Sequoia Impact: An app may bypass Gatekeeper checks Description: A file quarantine bypass was addressed with additional checks. CVE-2026-86941: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs CloudKit Available for: macOS Sequoia Impact: A malicious app may be able to gain root privileges Description: A permissions issue was addressed with additional restrictions. CVE-2026-86896: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs ColorSync Available for: macOS Sequoia Impact: Processing a maliciously crafted file may disclose process memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112429: Mateusz Jurczyk of Google Project Zero Compression Available for: macOS Sequoia Impact: An app may be able to disclose kernel memory Description: A memory initialization issue was addressed with improved memory handling. CVE-2026-113910: Tucker Willenborg configd Available for: macOS Sequoia Impact: An app may be able to gain root privileges Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-112545: Frederick Kaludis (Coiffeur0x90), Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs Control Center Available for: macOS Sequoia Impact: A malicious application may be able to bypass Privacy preferences Description: A permissions issue was addressed with additional restrictions. CVE-2026-112462: DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat Srisutham, Yejun Kim, an anonymous researcher, Zwei Tasse Kaffee, Lakshay Sharma (MrW0r57) copyfile Available for: macOS Sequoia Impact: An app may be able to modify protected parts of the file system Description: This issue was addressed with improved handling of symlinks. CVE-2026-86966: Jihwan Yoon Core Image Available for: macOS Sequoia Impact: Processing a maliciously crafted image may lead to unexpected process termination Description: A buffer overflow was addressed with improved bounds checking. CVE-2026-112471: Meta Red Team X - Nik Tsytsarkin CoreAudio Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: A race condition was addressed with improved locking. CVE-2026-112708: Nathaniel Oh (@calysteon) CoreAudio Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write was addressed with improved input validation. CVE-2026-86969: Meta Red Team X - Nik Tsytsarkin CoreAudio Available for: macOS Sequoia Impact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory Description: An out-of-bounds access issue was addressed with improved bounds checking. CVE-2026-113912: an anonymous researcher, 章鱼哥@aipy (aipyaipy.com), Roman Zabicki, Anna Groza (@pwnlambda) of Calif.io CoreAudio Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: A buffer overflow issue was addressed with improved memory handling. CVE-2026-113907: Meta Red Team X - Nik Tsytsarkin CoreAudio Available for: macOS Sequoia Impact: An attacker in radio range may be able to cause unexpected system termination Description: A heap buffer overflow was addressed with improved bounds checking. CVE-2026-112638: Altin Gashi, Përparim Mjeku, Altin Gashi CoreGraphics Available for: macOS Sequoia Impact: Processing a maliciously crafted PDF file may lead to memory corruption Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112610: Meta Red Team X - Nik Tsytsarkin CVE-2026-112611: f4&Zhiniang Peng with HUST, Aobo Wang (@M4x_1997), Xiang Chen, Jakob Pammer, Anna Groza (@pwnlambda) of Calif.io, Piotr Jerzy Duszynski, an anonymous researcher CoreMedia Available for: macOS Sequoia Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: The issue was addressed with improved memory handling. CVE-2026-86992: Niels Hofmans CoreMedia Available for: macOS Sequoia Impact: Parsing a file may lead to an unexpected app
Severity
No CVSS data available.
Assigner
VULNARCHIVE GNA GNA-1988
GNA scorecard E 38/100 over 552 records in the last 180 days details
References
Impacted products
Vendor Product Version CPE status
Apple Macos Sequoia Affected: unknown
guessed Create a notification for this product.
Credits
Apple Product Security via Fulldisclosure
Relationships
reference GCVE-1988-2026-0458 (this record)
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Macos Sequoia",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-10-26-2026-6 macOS Sequoia 15.8.2\n\nmacOS Sequoia 15.8.2 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149523.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccelerate\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause a denial-of-service\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-28991: Seiji Sakurai (@HeapSmasher)\n\nAccelerate Framework\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted image may lead to unexpected\napp termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-86971: an anonymous researcher\n\nAccounts\nAvailable for: macOS Sequoia\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-113898: Bhaswanth Chigurupati\n\nafpfs\nAvailable for: macOS Sequoia\nImpact: A remote attacker may be able to cause unexpected system\ntermination or corrupt kernel memory\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-64767: Dave G.\n\nAPFS\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan\nDautov, Peter Malone\n\nAPFS\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112536: Ruslan Dautov, Thomas Guillem, Narendra Singh (@_3P1C),\nKwak Kiyong (@Pwnkai23), Song Nuri, Thanatos Tian (HKPolyU) \u0026 wgg with\nDiffract\n\nApp Store\nAvailable for: macOS Sequoia\nImpact: A remote attacker may be able to break out of the WebContent\nsandbox\nDescription: This issue was addressed with improved input validation.\nCVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\nApple Intelligence\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-86920: Johan Wahyudi\n\nApple Neural Engine\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84595: tamdao\n\nApple Neural Engine\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112696: Jaeyeong Lee\n\nAppleAVD\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112416: an anonymous researcher, Meta Red Team X - Nik\nTsytsarkin, Narendra Singh (@_3P1C), Hcamael and \u7ae0\u9c7c\u54e5@aipy\n(aipyaipy.com), Dohyeon An @PILAB Technology, Inc\n\nAppleAVD\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: An out-of-bounds write was addressed with improved input\nvalidation.\nCVE-2026-112415: Rahul Raj, Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAppleAVD\nAvailable for: macOS Sequoia\nImpact: A malicious app may be able to break out of its sandbox\nDescription: An information leakage was addressed with additional\nvalidation.\nCVE-2026-112704: Josh Maine of Calif.io\n\nAppleMobileFileIntegrity\nAvailable for: macOS Sequoia\nImpact: A malicious app may be able to read or write to protected files\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\nAppleRAID\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-112531: Chanwit Muenprakoddee (ChemIndy)\n\nArchiveService\nAvailable for: macOS Sequoia\nImpact: An app may bypass Gatekeeper checks\nDescription: A logic issue was addressed with improved state management.\nCVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul\nMontgomery (@nullevent)\n\nArchiveService\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted file may bypass Gatekeeper\nchecks\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-112568: an anonymous researcher\n\nAudio\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112546: lunar815, Nathaniel Oh (@calysteon), Piotr Jerzy\nDuszynski, an anonymous researcher, Surej Sekhar, r3pwnx (@r3pwnx), Lily\nCohl (@GenericCoding)\n\nAudio\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud\n\nAVEVideoEncoder\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io\n\nAVEVideoEncoder\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation.\nCVE-2026-112689: Franco Belman at Blackwing Intelligence\n\nAVEVideoEncoder\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112470: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112468: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112469: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAVEVideoEncoder\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: An out-of-bounds read was addressed with improved input\nvalidation.\nCVE-2026-112466: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nBOM\nAvailable for: macOS Sequoia\nImpact: A maliciously crafted ZIP archive may bypass Gatekeeper checks\nDescription: A file quarantine bypass was addressed with additional\nchecks.\nCVE-2026-84610: Murray Mike, Andreas Jaegersberger \u0026 Ro Achterberg of\nNosebeard Labs\n\nBOM\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted file may lead to heap\ncorruption\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation.\nCVE-2026-112670: Bhaswanth Chigurupati\n\nBOM\nAvailable for: macOS Sequoia\nImpact: A maliciously crafted ZIP archive may bypass Gatekeeper checks\nDescription: The issue was addressed with improved checks.\nCVE-2026-112672: \uc900\uc6b0 \uc774, Pasquale Scola\n\nCalendar\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re)\n\nCarbon Core\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-84528: zenith\n\nCarbon Core\nAvailable for: macOS Sequoia\nImpact: An app may bypass Gatekeeper checks\nDescription: A file quarantine bypass was addressed with additional\nchecks.\nCVE-2026-86941: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nCloudKit\nAvailable for: macOS Sequoia\nImpact: A malicious app may be able to gain root privileges\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-86896: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nColorSync\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted file may disclose process\nmemory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112429: Mateusz Jurczyk of Google Project Zero\n\nCompression\nAvailable for: macOS Sequoia\nImpact: An app may be able to disclose kernel memory\nDescription: A memory initialization issue was addressed with improved\nmemory handling.\nCVE-2026-113910: Tucker Willenborg\n\nconfigd\nAvailable for: macOS Sequoia\nImpact: An app may be able to gain root privileges\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-112545: Frederick Kaludis (Coiffeur0x90), Andreas Jaegersberger\n\u0026 Ro Achterberg of Nosebeard Labs\n\nControl Center\nAvailable for: macOS Sequoia\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112462: DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat\nSrisutham, Yejun Kim, an anonymous researcher, Zwei Tasse Kaffee,\nLakshay Sharma (MrW0r57)\n\ncopyfile\nAvailable for: macOS Sequoia\nImpact: An app may be able to modify protected parts of the file system\nDescription: This issue was addressed with improved handling of\nsymlinks.\nCVE-2026-86966: Jihwan Yoon\n\nCore Image\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted image may lead to unexpected\nprocess termination\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-112471: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: A race condition was addressed with improved locking.\nCVE-2026-112708: Nathaniel Oh (@calysteon)\n\nCoreAudio\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write was addressed with improved input\nvalidation.\nCVE-2026-86969: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted media file may lead to\nunexpected app termination or corrupt process memory\nDescription: An out-of-bounds access issue was addressed with improved\nbounds checking.\nCVE-2026-113912: an anonymous researcher, \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com), Roman\nZabicki, Anna Groza (@pwnlambda) of Calif.io\n\nCoreAudio\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: A buffer overflow issue was addressed with improved memory\nhandling.\nCVE-2026-113907: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: macOS Sequoia\nImpact: An attacker in radio range may be able to cause unexpected\nsystem termination\nDescription: A heap buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-112638: Altin Gashi, P\u00ebrparim Mjeku, Altin Gashi\n\nCoreGraphics\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted PDF file may lead to memory\ncorruption\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112610: Meta Red Team X - Nik Tsytsarkin\nCVE-2026-112611: f4\u0026Zhiniang Peng with HUST, Aobo Wang (@M4x_1997),\nXiang Chen, Jakob Pammer, Anna Groza (@pwnlambda) of Calif.io, Piotr\nJerzy Duszynski, an anonymous researcher\n\nCoreMedia\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-86992: Niels Hofmans\n\nCoreMedia\nAvailable for: macOS Sequoia\nImpact: Parsing a file may lead to an unexpected app"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T07:29:58Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/43"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Oct/43"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/149523"
        },
        {
          "url": "https://support.apple.com/downloads/"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Oct/43"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-10-26-2026-6 macOS Sequoia 15.8.2",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-112410",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112413",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112414",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112415",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112416",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112421",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112423",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112424",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112425",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112428",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112429",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112430",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112434",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112437",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112438",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112441",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112442",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112447",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112449",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112451",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112453",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112455",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112456",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112457",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112461",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112462",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112464",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112466",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112468",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112469",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112470",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112471",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112473",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112475",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112476",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112477",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112479",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112480",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112481",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112482",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112483",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112484",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112485",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112486",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112487",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112491",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112492",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112493",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112495",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112497",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112498",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112501",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112502",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112504",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112505",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112508",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112510",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112511",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112512",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112514",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112515",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112516",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112517",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112519",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112521",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112522",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112523",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112524",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112525",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112526",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112529",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112530",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112531",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112532",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112533",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112534",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112535",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112536",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112537",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112539",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112540",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112541",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112542",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112543",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112545",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112546",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112548",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112550",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112552",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112553",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112554",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112555",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112556",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112557",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112558",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112559",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112560",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112561",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112562",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112563",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112565",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112567",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112568",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112569",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112570",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112571",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112575",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112576",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112593",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112601",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112606",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112610",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112611",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112624",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112625",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112627",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112628",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112629",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112630",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112632",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112633",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112634",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112638",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112642",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112647",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112652",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112656",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112660",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112668",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112670",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112671",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112672",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112675",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112676",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112677",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112678",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112683",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112688",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112689",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112690",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112696",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112698",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112704",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112705",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112708",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113896",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113898",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113899",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113900",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113907",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113910",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113912",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113913",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113915",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20648",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20649",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28864",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28991",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64750",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64767",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64789",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65327",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65350",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65363",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65368",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65373",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65392",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65397",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84495",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84498",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84528",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84542",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84545",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84590",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84595",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84604",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84610",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86896",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86920",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86923",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86929",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86931",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86936",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86937",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86941",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86942",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86945",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86946",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86954",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86958",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86966",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86969",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86970",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86971",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86984",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86991",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86992",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0458",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/43",
            "automated": true,
            "contentSha256": "ff2ea9fe255fa5beba44a8150b2fbf204aa52a22024eaa1ddc129527b824fe75",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Oct/43",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-10-26T21:41:59Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0458"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T07:29:58Z",
    "dateUpdated": "2026-11-02T07:29:58Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0458"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.