GCVE-1988-2026-0463
Vulnerability from gna-1988 – Published: 2026-11-02 07:30 – Updated: 2026-11-02 07:30
VLAI
EPSS
VEX
Title
APPLE-SA-10-26-2026-5 macOS Tahoe 26.7.2
Summary
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
APPLE-SA-10-26-2026-5 macOS Tahoe 26.7.2
macOS Tahoe 26.7.2 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/149522.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Accelerate Framework
Available for: macOS Tahoe
Impact: Processing a maliciously crafted image may lead to unexpected
app termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-86971: an anonymous researcher
Accounts
Available for: macOS Tahoe
Impact: A malicious application may be able to bypass Privacy
preferences
Description: A logging issue was addressed with improved data redaction.
CVE-2026-113898: Bhaswanth Chigurupati
AirPort
Available for: macOS Tahoe
Impact: An app may be able to read sensitive location information
Description: An authorization issue was addressed with improved state
management.
CVE-2026-112551: Nguyen Duc Anh of Noventiq, Sindre Sorhus
APFS
Available for: macOS Tahoe
Impact: Mounting a maliciously crafted disk image may cause unexpected
system termination or corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-84496: 준우 이, Maher Azzouzi, Jonathan Bar Or (@yo_yo_yo_jbo),
Marco Schmitt, Nathaniel Oh (@calysteon), Aswin Kumar Gokulakannan,
Narendra Singh (@_3P1C), Thanatos Tian (HKPolyU) & wgg with Diffract,
Jakob Pammer, an anonymous researcher, Bhuwan Bhetwal, Kwak kiyong
(@Pwnkai23), Song nuri
APFS
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or
read kernel memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan
Dautov, Peter Malone
APFS
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or
write kernel memory
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112536: Ruslan Dautov, Thomas Guillem, Narendra Singh (@_3P1C),
Kwak Kiyong (@Pwnkai23), Song Nuri, Thanatos Tian (HKPolyU) & wgg with
Diffract
App Store
Available for: macOS Tahoe
Impact: An app may be able to bypass network restrictions
Description: This issue was addressed with improved checks.
CVE-2026-112467: Sindre Sorhus
App Store
Available for: macOS Tahoe
Impact: A remote attacker may be able to break out of the WebContent
sandbox
Description: This issue was addressed with improved input validation.
CVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos
Apple Intelligence
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state
management.
CVE-2026-86920: Johan Wahyudi
Apple Neural Engine
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-84595: tamdao
Apple Neural Engine
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112696: Jaeyeong Lee
AppleAVD
Available for: macOS Tahoe
Impact: Processing a maliciously crafted video file may lead to
unexpected app termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112416: an anonymous researcher, Meta Red Team X - Nik
Tsytsarkin, Narendra Singh (@_3P1C), Hcamael and 章鱼哥@aipy
(aipyaipy.com), Dohyeon An @PILAB Technology, Inc
AppleAVD
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or
corrupt process memory
Description: An out-of-bounds write was addressed with improved input
validation.
CVE-2026-112415: Rahul Raj, Hcamael and 章鱼哥@aipy (aipyaipy.com)
AppleAVD
Available for: macOS Tahoe
Impact: A malicious app may be able to break out of its sandbox
Description: An information leakage was addressed with additional
validation.
CVE-2026-112704: Josh Maine of Calif.io
AppleMobileFileIntegrity
Available for: macOS Tahoe
Impact: A malicious app may be able to read or write to protected files
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos
AppleRAID
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: A use after free issue was addressed with improved memory
management.
CVE-2026-112531: Chanwit Muenprakoddee (ChemIndy)
Archive Utility
Available for: macOS Tahoe
Impact: An attacker with root privileges may be able to access protected
user data
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-86939: Lance Cain - Senior Security Researcher at SpecterOps
Inc.
ArchiveService
Available for: macOS Tahoe
Impact: An app may bypass Gatekeeper checks
Description: A logic issue was addressed with improved state management.
CVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul
Montgomery (@nullevent)
ArchiveService
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may bypass Gatekeeper
checks
Description: A logic issue was addressed with improved checks.
CVE-2026-112568: an anonymous researcher
Audio
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to unexpected app
termination
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112546: lunar815, Nathaniel Oh (@calysteon), Piotr Jerzy
Duszynski, an anonymous researcher, Surej Sekhar, r3pwnx (@r3pwnx), Lily
Cohl (@GenericCoding)
Audio
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with additional entitlement
checks.
CVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud
AVEVideoEncoder
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io
AVEVideoEncoder
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved
input validation.
CVE-2026-112689: Franco Belman at Blackwing Intelligence
AVEVideoEncoder
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112470: Hcamael and 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112468: Hcamael and 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112469: Hcamael and 章鱼哥@aipy (aipyaipy.com)
AVEVideoEncoder
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or
read kernel memory
Description: An out-of-bounds read was addressed with improved input
validation.
CVE-2026-112466: Hcamael and 章鱼哥@aipy (aipyaipy.com)
Bluetooth
Available for: macOS Tahoe
Impact: An attacker in physical proximity may be able to cause a
denial-of-service
Description: A null pointer dereference was addressed with improved
validation.
CVE-2026-112566: Chris Bailey - Short Circuit
BOM
Available for: macOS Tahoe
Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks
Description: A file quarantine bypass was addressed with additional
checks.
CVE-2026-84610: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs,
Murray Mike
BOM
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to heap
corruption
Description: An out-of-bounds write issue was addressed with improved
input validation.
CVE-2026-112670: Bhaswanth Chigurupati
BOM
Available for: macOS Tahoe
Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks
Description: The issue was addressed with improved checks.
CVE-2026-112672: 준우 이, Pasquale Scola
Calendar
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re)
Carbon Core
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: A logging issue was addressed with improved data redaction.
CVE-2026-84528: zenith
Carbon Core
Available for: macOS Tahoe
Impact: An app may bypass Gatekeeper checks
Description: A file quarantine bypass was addressed with additional
checks.
CVE-2026-86941: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs
CloudKit
Available for: macOS Tahoe
Impact: A malicious app may be able to gain root privileges
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-86896: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs
ColorSync
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may disclose process
memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112429: Mateusz Jurczyk of Google Project Zero
Compression
Available for: macOS Tahoe
Impact: An app may be able to disclose kernel memory
Description: A memory initialization issue was addressed with improved
memory handling.
CVE-2026-113910: Tucker Willenborg
configd
Available for: macOS Tahoe
Impact: An app may be able to gain root privileges
Description: A parsing issue in the handling of directory paths was
addressed with improved path validation.
CVE-2026-112545: Frederick Kaludis (Coiffeur0x90), Andreas Jaegersberger
& Ro Achterberg of Nosebeard Labs
Control Center
Available for: macOS Tahoe
Impact: A malicious application may be able to bypass Privacy
preferences
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-112462: DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat
Srisutham, Yejun Kim, an anonymous researcher, Zwei Tasse Kaffee,
Lakshay Sharma (MrW0r57)
copyfile
Available for: macOS Tahoe
Impact: An app may be able to modify protected parts of the file system
Description: This issue was addressed with improved handling of
symlinks.
CVE-2026-86966: Jihwan Yoon
Core Image
Available for: macOS Tahoe
Impact: Processing a maliciously crafted image may lead to unexpected
process termination
Description: A buffer overflow was addressed with improved bounds
checking.
CVE-2026-112471: Meta Red Team X - Nik Tsytsarkin
CoreAudio
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or
corrupt process memory
Description: A race condition was addressed with improved locking.
CVE-2026-112708: Nathaniel Oh (@calysteon)
CoreAudio
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: An out-of-bounds write was addressed with improved input
validation.
CVE-2026-86969: Meta Red Team X - Nik Tsytsarkin
CoreAudio
Available for: macOS Tahoe
Impact: Processing a maliciously crafted media file may lead to
unexpected app termination or corrupt process memory
Description: An out-of-bounds access issue was addressed with improved
bounds checking.
CVE-2026-113912: an anonymous researcher, 章鱼哥@aipy (aipyaipy.com), Roman
Zabicki, Anna Groza (@pwnlambda) of Calif.io
CoreAudio
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or
corrupt process memory
Description: A buffer overflow issue was addressed with improved memory
handling.
CVE-2026-113907: Meta Red Team X - Nik Tsytsarkin
CoreAudio
Available for: macOS Tahoe
Impact: An attacker in radio range ma
Severity
No CVSS data available.
Assigner
References
8 references
Impacted products
1 product
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Apple | Macos Tahoe |
Affected:
unknown
|
guessed |
Relationships
reference
GCVE-1988-2026-0463 (this record)
- related CVE-2026-112410
- related CVE-2026-112413
- related CVE-2026-112414
- related CVE-2026-112415
- related CVE-2026-112416
- related CVE-2026-112421
- related CVE-2026-112423
- related CVE-2026-112424
- related CVE-2026-112425
- related CVE-2026-112428
- related CVE-2026-112429
- related CVE-2026-112430
- related CVE-2026-112434
- related CVE-2026-112437
- related CVE-2026-112438
- related CVE-2026-112441
- related CVE-2026-112442
- related CVE-2026-112443
- related CVE-2026-112444
- related CVE-2026-112447
- related CVE-2026-112449
- related CVE-2026-112451
- related CVE-2026-112453
- related CVE-2026-112455
- related CVE-2026-112456
- related CVE-2026-112457
- related CVE-2026-112461
- related CVE-2026-112462
- related CVE-2026-112464
- related CVE-2026-112466
- related CVE-2026-112467
- related CVE-2026-112468
- related CVE-2026-112469
- related CVE-2026-112470
- related CVE-2026-112471
- related CVE-2026-112473
- related CVE-2026-112475
- related CVE-2026-112476
- related CVE-2026-112477
- related CVE-2026-112478
- related CVE-2026-112479
- related CVE-2026-112480
- related CVE-2026-112481
- related CVE-2026-112482
- related CVE-2026-112483
- related CVE-2026-112484
- related CVE-2026-112485
- related CVE-2026-112486
- related CVE-2026-112487
- related CVE-2026-112488
- related CVE-2026-112491
- related CVE-2026-112492
- related CVE-2026-112493
- related CVE-2026-112494
- related CVE-2026-112495
- related CVE-2026-112497
- related CVE-2026-112498
- related CVE-2026-112501
- related CVE-2026-112502
- related CVE-2026-112504
- related CVE-2026-112505
- related CVE-2026-112508
- related CVE-2026-112510
- related CVE-2026-112511
- related CVE-2026-112512
- related CVE-2026-112514
- related CVE-2026-112515
- related CVE-2026-112516
- related CVE-2026-112517
- related CVE-2026-112519
- related CVE-2026-112521
- related CVE-2026-112522
- related CVE-2026-112523
- related CVE-2026-112524
- related CVE-2026-112525
- related CVE-2026-112526
- related CVE-2026-112529
- related CVE-2026-112530
- related CVE-2026-112531
- related CVE-2026-112532
- related CVE-2026-112533
- related CVE-2026-112534
- related CVE-2026-112535
- related CVE-2026-112536
- related CVE-2026-112537
- related CVE-2026-112539
- related CVE-2026-112540
- related CVE-2026-112541
- related CVE-2026-112542
- related CVE-2026-112543
- related CVE-2026-112545
- related CVE-2026-112546
- related CVE-2026-112548
- related CVE-2026-112550
- related CVE-2026-112551
- related CVE-2026-112552
- related CVE-2026-112553
- related CVE-2026-112554
- related CVE-2026-112555
- related CVE-2026-112556
- related CVE-2026-112557
- related CVE-2026-112558
- related CVE-2026-112559
- related CVE-2026-112560
- related CVE-2026-112561
- related CVE-2026-112562
- related CVE-2026-112563
- related CVE-2026-112565
- related CVE-2026-112566
- related CVE-2026-112567
- related CVE-2026-112568
- related CVE-2026-112569
- related CVE-2026-112570
- related CVE-2026-112571
- related CVE-2026-112575
- related CVE-2026-112576
- related CVE-2026-112593
- related CVE-2026-112604
- related CVE-2026-112606
- related CVE-2026-112610
- related CVE-2026-112611
- related CVE-2026-112614
- related CVE-2026-112622
- related CVE-2026-112624
- related CVE-2026-112625
- related CVE-2026-112627
- related CVE-2026-112628
- related CVE-2026-112629
- related CVE-2026-112630
- related CVE-2026-112632
- related CVE-2026-112633
- related CVE-2026-112634
- related CVE-2026-112638
- related CVE-2026-112642
- related CVE-2026-112647
- related CVE-2026-112652
- related CVE-2026-112656
- related CVE-2026-112660
- related CVE-2026-112665
- related CVE-2026-112668
- related CVE-2026-112670
- related CVE-2026-112671
- related CVE-2026-112672
- related CVE-2026-112675
- related CVE-2026-112676
- related CVE-2026-112677
- related CVE-2026-112678
- related CVE-2026-112682
- related CVE-2026-112683
- related CVE-2026-112688
- related CVE-2026-112689
- related CVE-2026-112690
- related CVE-2026-112696
- related CVE-2026-112698
- related CVE-2026-112704
- related CVE-2026-112705
- related CVE-2026-112708
- related CVE-2026-113896
- related CVE-2026-113898
- related CVE-2026-113899
- related CVE-2026-113900
- related CVE-2026-113907
- related CVE-2026-113910
- related CVE-2026-113912
- related CVE-2026-113913
- related CVE-2026-113915
- related CVE-2026-28864
- related CVE-2026-43736
- related CVE-2026-64750
- related CVE-2026-64789
- related CVE-2026-65327
- related CVE-2026-65350
- related CVE-2026-65363
- related CVE-2026-65368
- related CVE-2026-65373
- related CVE-2026-65397
- related CVE-2026-84495
- related CVE-2026-84496
- related CVE-2026-84498
- related CVE-2026-84528
- related CVE-2026-84539
- related CVE-2026-84542
- related CVE-2026-84545
- related CVE-2026-84590
- related CVE-2026-84595
- related CVE-2026-84604
- related CVE-2026-84610
- related CVE-2026-84627
- related CVE-2026-86896
- related CVE-2026-86916
- related CVE-2026-86920
- related CVE-2026-86923
- related CVE-2026-86929
- related CVE-2026-86931
- related CVE-2026-86936
- related CVE-2026-86937
- related CVE-2026-86939
- related CVE-2026-86941
- related CVE-2026-86942
- related CVE-2026-86945
- related CVE-2026-86946
- related CVE-2026-86954
- related CVE-2026-86958
- related CVE-2026-86964
- related CVE-2026-86966
- related CVE-2026-86969
- related CVE-2026-86970
- related CVE-2026-86971
- related CVE-2026-86972
- related CVE-2026-86984
- related CVE-2026-86990
- related CVE-2026-86991
- related CVE-2026-86992
{
"containers": {
"cna": {
"affected": [
{
"product": "Macos Tahoe",
"vendor": "Apple",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Apple Product Security via Fulldisclosure"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-10-26-2026-5 macOS Tahoe 26.7.2\n\nmacOS Tahoe 26.7.2 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149522.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccelerate Framework\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted image may lead to unexpected\napp termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-86971: an anonymous researcher\n\nAccounts\nAvailable for: macOS Tahoe\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-113898: Bhaswanth Chigurupati\n\nAirPort\nAvailable for: macOS Tahoe\nImpact: An app may be able to read sensitive location information\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-112551: Nguyen Duc Anh of Noventiq, Sindre Sorhus\n\nAPFS\nAvailable for: macOS Tahoe\nImpact: Mounting a maliciously crafted disk image may cause unexpected\nsystem termination or corrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84496: \uc900\uc6b0 \uc774, Maher Azzouzi, Jonathan Bar Or (@yo_yo_yo_jbo),\nMarco Schmitt, Nathaniel Oh (@calysteon), Aswin Kumar Gokulakannan,\nNarendra Singh (@_3P1C), Thanatos Tian (HKPolyU) \u0026 wgg with Diffract,\nJakob Pammer, an anonymous researcher, Bhuwan Bhetwal, Kwak kiyong\n(@Pwnkai23), Song nuri\n\nAPFS\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan\nDautov, Peter Malone\n\nAPFS\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112536: Ruslan Dautov, Thomas Guillem, Narendra Singh (@_3P1C),\nKwak Kiyong (@Pwnkai23), Song Nuri, Thanatos Tian (HKPolyU) \u0026 wgg with\nDiffract\n\nApp Store\nAvailable for: macOS Tahoe\nImpact: An app may be able to bypass network restrictions\nDescription: This issue was addressed with improved checks.\nCVE-2026-112467: Sindre Sorhus\n\nApp Store\nAvailable for: macOS Tahoe\nImpact: A remote attacker may be able to break out of the WebContent\nsandbox\nDescription: This issue was addressed with improved input validation.\nCVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\nApple Intelligence\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-86920: Johan Wahyudi\n\nApple Neural Engine\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84595: tamdao\n\nApple Neural Engine\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112696: Jaeyeong Lee\n\nAppleAVD\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112416: an anonymous researcher, Meta Red Team X - Nik\nTsytsarkin, Narendra Singh (@_3P1C), Hcamael and \u7ae0\u9c7c\u54e5@aipy\n(aipyaipy.com), Dohyeon An @PILAB Technology, Inc\n\nAppleAVD\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: An out-of-bounds write was addressed with improved input\nvalidation.\nCVE-2026-112415: Rahul Raj, Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAppleAVD\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to break out of its sandbox\nDescription: An information leakage was addressed with additional\nvalidation.\nCVE-2026-112704: Josh Maine of Calif.io\n\nAppleMobileFileIntegrity\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to read or write to protected files\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\nAppleRAID\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-112531: Chanwit Muenprakoddee (ChemIndy)\n\nArchive Utility\nAvailable for: macOS Tahoe\nImpact: An attacker with root privileges may be able to access protected\nuser data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-86939: Lance Cain - Senior Security Researcher at SpecterOps\nInc.\n\nArchiveService\nAvailable for: macOS Tahoe\nImpact: An app may bypass Gatekeeper checks\nDescription: A logic issue was addressed with improved state management.\nCVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul\nMontgomery (@nullevent)\n\nArchiveService\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may bypass Gatekeeper\nchecks\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-112568: an anonymous researcher\n\nAudio\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112546: lunar815, Nathaniel Oh (@calysteon), Piotr Jerzy\nDuszynski, an anonymous researcher, Surej Sekhar, r3pwnx (@r3pwnx), Lily\nCohl (@GenericCoding)\n\nAudio\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation.\nCVE-2026-112689: Franco Belman at Blackwing Intelligence\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112470: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112468: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112469: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: An out-of-bounds read was addressed with improved input\nvalidation.\nCVE-2026-112466: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nBluetooth\nAvailable for: macOS Tahoe\nImpact: An attacker in physical proximity may be able to cause a\ndenial-of-service\nDescription: A null pointer dereference was addressed with improved\nvalidation.\nCVE-2026-112566: Chris Bailey - Short Circuit\n\nBOM\nAvailable for: macOS Tahoe\nImpact: A maliciously crafted ZIP archive may bypass Gatekeeper checks\nDescription: A file quarantine bypass was addressed with additional\nchecks.\nCVE-2026-84610: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs,\nMurray Mike\n\nBOM\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may lead to heap\ncorruption\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation.\nCVE-2026-112670: Bhaswanth Chigurupati\n\nBOM\nAvailable for: macOS Tahoe\nImpact: A maliciously crafted ZIP archive may bypass Gatekeeper checks\nDescription: The issue was addressed with improved checks.\nCVE-2026-112672: \uc900\uc6b0 \uc774, Pasquale Scola\n\nCalendar\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re)\n\nCarbon Core\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-84528: zenith\n\nCarbon Core\nAvailable for: macOS Tahoe\nImpact: An app may bypass Gatekeeper checks\nDescription: A file quarantine bypass was addressed with additional\nchecks.\nCVE-2026-86941: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nCloudKit\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to gain root privileges\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-86896: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nColorSync\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may disclose process\nmemory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112429: Mateusz Jurczyk of Google Project Zero\n\nCompression\nAvailable for: macOS Tahoe\nImpact: An app may be able to disclose kernel memory\nDescription: A memory initialization issue was addressed with improved\nmemory handling.\nCVE-2026-113910: Tucker Willenborg\n\nconfigd\nAvailable for: macOS Tahoe\nImpact: An app may be able to gain root privileges\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-112545: Frederick Kaludis (Coiffeur0x90), Andreas Jaegersberger\n\u0026 Ro Achterberg of Nosebeard Labs\n\nControl Center\nAvailable for: macOS Tahoe\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112462: DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat\nSrisutham, Yejun Kim, an anonymous researcher, Zwei Tasse Kaffee,\nLakshay Sharma (MrW0r57)\n\ncopyfile\nAvailable for: macOS Tahoe\nImpact: An app may be able to modify protected parts of the file system\nDescription: This issue was addressed with improved handling of\nsymlinks.\nCVE-2026-86966: Jihwan Yoon\n\nCore Image\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted image may lead to unexpected\nprocess termination\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-112471: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: A race condition was addressed with improved locking.\nCVE-2026-112708: Nathaniel Oh (@calysteon)\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write was addressed with improved input\nvalidation.\nCVE-2026-86969: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted media file may lead to\nunexpected app termination or corrupt process memory\nDescription: An out-of-bounds access issue was addressed with improved\nbounds checking.\nCVE-2026-113912: an anonymous researcher, \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com), Roman\nZabicki, Anna Groza (@pwnlambda) of Calif.io\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: A buffer overflow issue was addressed with improved memory\nhandling.\nCVE-2026-113907: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: An attacker in radio range ma"
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T07:30:00Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/48"
},
{
"tags": [
"technical-description"
],
"url": "https://seclists.org/fulldisclosure/2026/Oct/48"
},
{
"url": "https://nmap.org/mailman/listinfo/fulldisclosure"
},
{
"url": "https://seclists.org/fulldisclosure/"
},
{
"url": "https://support.apple.com/100100"
},
{
"url": "https://support.apple.com/149522"
},
{
"url": "https://support.apple.com/downloads/"
},
{
"url": "https://www.apple.com/support/security/pgp/"
}
],
"source": {
"defect": [
"https://seclists.org/fulldisclosure/2026/Oct/48"
],
"discovery": "EXTERNAL"
},
"title": "APPLE-SA-10-26-2026-5 macOS Tahoe 26.7.2",
"x_gcve": [
{
"recordType": "reference",
"relationships": [
{
"destId": "CVE-2026-112410",
"type": "related"
},
{
"destId": "CVE-2026-112413",
"type": "related"
},
{
"destId": "CVE-2026-112414",
"type": "related"
},
{
"destId": "CVE-2026-112415",
"type": "related"
},
{
"destId": "CVE-2026-112416",
"type": "related"
},
{
"destId": "CVE-2026-112421",
"type": "related"
},
{
"destId": "CVE-2026-112423",
"type": "related"
},
{
"destId": "CVE-2026-112424",
"type": "related"
},
{
"destId": "CVE-2026-112425",
"type": "related"
},
{
"destId": "CVE-2026-112428",
"type": "related"
},
{
"destId": "CVE-2026-112429",
"type": "related"
},
{
"destId": "CVE-2026-112430",
"type": "related"
},
{
"destId": "CVE-2026-112434",
"type": "related"
},
{
"destId": "CVE-2026-112437",
"type": "related"
},
{
"destId": "CVE-2026-112438",
"type": "related"
},
{
"destId": "CVE-2026-112441",
"type": "related"
},
{
"destId": "CVE-2026-112442",
"type": "related"
},
{
"destId": "CVE-2026-112443",
"type": "related"
},
{
"destId": "CVE-2026-112444",
"type": "related"
},
{
"destId": "CVE-2026-112447",
"type": "related"
},
{
"destId": "CVE-2026-112449",
"type": "related"
},
{
"destId": "CVE-2026-112451",
"type": "related"
},
{
"destId": "CVE-2026-112453",
"type": "related"
},
{
"destId": "CVE-2026-112455",
"type": "related"
},
{
"destId": "CVE-2026-112456",
"type": "related"
},
{
"destId": "CVE-2026-112457",
"type": "related"
},
{
"destId": "CVE-2026-112461",
"type": "related"
},
{
"destId": "CVE-2026-112462",
"type": "related"
},
{
"destId": "CVE-2026-112464",
"type": "related"
},
{
"destId": "CVE-2026-112466",
"type": "related"
},
{
"destId": "CVE-2026-112467",
"type": "related"
},
{
"destId": "CVE-2026-112468",
"type": "related"
},
{
"destId": "CVE-2026-112469",
"type": "related"
},
{
"destId": "CVE-2026-112470",
"type": "related"
},
{
"destId": "CVE-2026-112471",
"type": "related"
},
{
"destId": "CVE-2026-112473",
"type": "related"
},
{
"destId": "CVE-2026-112475",
"type": "related"
},
{
"destId": "CVE-2026-112476",
"type": "related"
},
{
"destId": "CVE-2026-112477",
"type": "related"
},
{
"destId": "CVE-2026-112478",
"type": "related"
},
{
"destId": "CVE-2026-112479",
"type": "related"
},
{
"destId": "CVE-2026-112480",
"type": "related"
},
{
"destId": "CVE-2026-112481",
"type": "related"
},
{
"destId": "CVE-2026-112482",
"type": "related"
},
{
"destId": "CVE-2026-112483",
"type": "related"
},
{
"destId": "CVE-2026-112484",
"type": "related"
},
{
"destId": "CVE-2026-112485",
"type": "related"
},
{
"destId": "CVE-2026-112486",
"type": "related"
},
{
"destId": "CVE-2026-112487",
"type": "related"
},
{
"destId": "CVE-2026-112488",
"type": "related"
},
{
"destId": "CVE-2026-112491",
"type": "related"
},
{
"destId": "CVE-2026-112492",
"type": "related"
},
{
"destId": "CVE-2026-112493",
"type": "related"
},
{
"destId": "CVE-2026-112494",
"type": "related"
},
{
"destId": "CVE-2026-112495",
"type": "related"
},
{
"destId": "CVE-2026-112497",
"type": "related"
},
{
"destId": "CVE-2026-112498",
"type": "related"
},
{
"destId": "CVE-2026-112501",
"type": "related"
},
{
"destId": "CVE-2026-112502",
"type": "related"
},
{
"destId": "CVE-2026-112504",
"type": "related"
},
{
"destId": "CVE-2026-112505",
"type": "related"
},
{
"destId": "CVE-2026-112508",
"type": "related"
},
{
"destId": "CVE-2026-112510",
"type": "related"
},
{
"destId": "CVE-2026-112511",
"type": "related"
},
{
"destId": "CVE-2026-112512",
"type": "related"
},
{
"destId": "CVE-2026-112514",
"type": "related"
},
{
"destId": "CVE-2026-112515",
"type": "related"
},
{
"destId": "CVE-2026-112516",
"type": "related"
},
{
"destId": "CVE-2026-112517",
"type": "related"
},
{
"destId": "CVE-2026-112519",
"type": "related"
},
{
"destId": "CVE-2026-112521",
"type": "related"
},
{
"destId": "CVE-2026-112522",
"type": "related"
},
{
"destId": "CVE-2026-112523",
"type": "related"
},
{
"destId": "CVE-2026-112524",
"type": "related"
},
{
"destId": "CVE-2026-112525",
"type": "related"
},
{
"destId": "CVE-2026-112526",
"type": "related"
},
{
"destId": "CVE-2026-112529",
"type": "related"
},
{
"destId": "CVE-2026-112530",
"type": "related"
},
{
"destId": "CVE-2026-112531",
"type": "related"
},
{
"destId": "CVE-2026-112532",
"type": "related"
},
{
"destId": "CVE-2026-112533",
"type": "related"
},
{
"destId": "CVE-2026-112534",
"type": "related"
},
{
"destId": "CVE-2026-112535",
"type": "related"
},
{
"destId": "CVE-2026-112536",
"type": "related"
},
{
"destId": "CVE-2026-112537",
"type": "related"
},
{
"destId": "CVE-2026-112539",
"type": "related"
},
{
"destId": "CVE-2026-112540",
"type": "related"
},
{
"destId": "CVE-2026-112541",
"type": "related"
},
{
"destId": "CVE-2026-112542",
"type": "related"
},
{
"destId": "CVE-2026-112543",
"type": "related"
},
{
"destId": "CVE-2026-112545",
"type": "related"
},
{
"destId": "CVE-2026-112546",
"type": "related"
},
{
"destId": "CVE-2026-112548",
"type": "related"
},
{
"destId": "CVE-2026-112550",
"type": "related"
},
{
"destId": "CVE-2026-112551",
"type": "related"
},
{
"destId": "CVE-2026-112552",
"type": "related"
},
{
"destId": "CVE-2026-112553",
"type": "related"
},
{
"destId": "CVE-2026-112554",
"type": "related"
},
{
"destId": "CVE-2026-112555",
"type": "related"
},
{
"destId": "CVE-2026-112556",
"type": "related"
},
{
"destId": "CVE-2026-112557",
"type": "related"
},
{
"destId": "CVE-2026-112558",
"type": "related"
},
{
"destId": "CVE-2026-112559",
"type": "related"
},
{
"destId": "CVE-2026-112560",
"type": "related"
},
{
"destId": "CVE-2026-112561",
"type": "related"
},
{
"destId": "CVE-2026-112562",
"type": "related"
},
{
"destId": "CVE-2026-112563",
"type": "related"
},
{
"destId": "CVE-2026-112565",
"type": "related"
},
{
"destId": "CVE-2026-112566",
"type": "related"
},
{
"destId": "CVE-2026-112567",
"type": "related"
},
{
"destId": "CVE-2026-112568",
"type": "related"
},
{
"destId": "CVE-2026-112569",
"type": "related"
},
{
"destId": "CVE-2026-112570",
"type": "related"
},
{
"destId": "CVE-2026-112571",
"type": "related"
},
{
"destId": "CVE-2026-112575",
"type": "related"
},
{
"destId": "CVE-2026-112576",
"type": "related"
},
{
"destId": "CVE-2026-112593",
"type": "related"
},
{
"destId": "CVE-2026-112604",
"type": "related"
},
{
"destId": "CVE-2026-112606",
"type": "related"
},
{
"destId": "CVE-2026-112610",
"type": "related"
},
{
"destId": "CVE-2026-112611",
"type": "related"
},
{
"destId": "CVE-2026-112614",
"type": "related"
},
{
"destId": "CVE-2026-112622",
"type": "related"
},
{
"destId": "CVE-2026-112624",
"type": "related"
},
{
"destId": "CVE-2026-112625",
"type": "related"
},
{
"destId": "CVE-2026-112627",
"type": "related"
},
{
"destId": "CVE-2026-112628",
"type": "related"
},
{
"destId": "CVE-2026-112629",
"type": "related"
},
{
"destId": "CVE-2026-112630",
"type": "related"
},
{
"destId": "CVE-2026-112632",
"type": "related"
},
{
"destId": "CVE-2026-112633",
"type": "related"
},
{
"destId": "CVE-2026-112634",
"type": "related"
},
{
"destId": "CVE-2026-112638",
"type": "related"
},
{
"destId": "CVE-2026-112642",
"type": "related"
},
{
"destId": "CVE-2026-112647",
"type": "related"
},
{
"destId": "CVE-2026-112652",
"type": "related"
},
{
"destId": "CVE-2026-112656",
"type": "related"
},
{
"destId": "CVE-2026-112660",
"type": "related"
},
{
"destId": "CVE-2026-112665",
"type": "related"
},
{
"destId": "CVE-2026-112668",
"type": "related"
},
{
"destId": "CVE-2026-112670",
"type": "related"
},
{
"destId": "CVE-2026-112671",
"type": "related"
},
{
"destId": "CVE-2026-112672",
"type": "related"
},
{
"destId": "CVE-2026-112675",
"type": "related"
},
{
"destId": "CVE-2026-112676",
"type": "related"
},
{
"destId": "CVE-2026-112677",
"type": "related"
},
{
"destId": "CVE-2026-112678",
"type": "related"
},
{
"destId": "CVE-2026-112682",
"type": "related"
},
{
"destId": "CVE-2026-112683",
"type": "related"
},
{
"destId": "CVE-2026-112688",
"type": "related"
},
{
"destId": "CVE-2026-112689",
"type": "related"
},
{
"destId": "CVE-2026-112690",
"type": "related"
},
{
"destId": "CVE-2026-112696",
"type": "related"
},
{
"destId": "CVE-2026-112698",
"type": "related"
},
{
"destId": "CVE-2026-112704",
"type": "related"
},
{
"destId": "CVE-2026-112705",
"type": "related"
},
{
"destId": "CVE-2026-112708",
"type": "related"
},
{
"destId": "CVE-2026-113896",
"type": "related"
},
{
"destId": "CVE-2026-113898",
"type": "related"
},
{
"destId": "CVE-2026-113899",
"type": "related"
},
{
"destId": "CVE-2026-113900",
"type": "related"
},
{
"destId": "CVE-2026-113907",
"type": "related"
},
{
"destId": "CVE-2026-113910",
"type": "related"
},
{
"destId": "CVE-2026-113912",
"type": "related"
},
{
"destId": "CVE-2026-113913",
"type": "related"
},
{
"destId": "CVE-2026-113915",
"type": "related"
},
{
"destId": "CVE-2026-28864",
"type": "related"
},
{
"destId": "CVE-2026-43736",
"type": "related"
},
{
"destId": "CVE-2026-64750",
"type": "related"
},
{
"destId": "CVE-2026-64789",
"type": "related"
},
{
"destId": "CVE-2026-65327",
"type": "related"
},
{
"destId": "CVE-2026-65350",
"type": "related"
},
{
"destId": "CVE-2026-65363",
"type": "related"
},
{
"destId": "CVE-2026-65368",
"type": "related"
},
{
"destId": "CVE-2026-65373",
"type": "related"
},
{
"destId": "CVE-2026-65397",
"type": "related"
},
{
"destId": "CVE-2026-84495",
"type": "related"
},
{
"destId": "CVE-2026-84496",
"type": "related"
},
{
"destId": "CVE-2026-84498",
"type": "related"
},
{
"destId": "CVE-2026-84528",
"type": "related"
},
{
"destId": "CVE-2026-84539",
"type": "related"
},
{
"destId": "CVE-2026-84542",
"type": "related"
},
{
"destId": "CVE-2026-84545",
"type": "related"
},
{
"destId": "CVE-2026-84590",
"type": "related"
},
{
"destId": "CVE-2026-84595",
"type": "related"
},
{
"destId": "CVE-2026-84604",
"type": "related"
},
{
"destId": "CVE-2026-84610",
"type": "related"
},
{
"destId": "CVE-2026-84627",
"type": "related"
},
{
"destId": "CVE-2026-86896",
"type": "related"
},
{
"destId": "CVE-2026-86916",
"type": "related"
},
{
"destId": "CVE-2026-86920",
"type": "related"
},
{
"destId": "CVE-2026-86923",
"type": "related"
},
{
"destId": "CVE-2026-86929",
"type": "related"
},
{
"destId": "CVE-2026-86931",
"type": "related"
},
{
"destId": "CVE-2026-86936",
"type": "related"
},
{
"destId": "CVE-2026-86937",
"type": "related"
},
{
"destId": "CVE-2026-86939",
"type": "related"
},
{
"destId": "CVE-2026-86941",
"type": "related"
},
{
"destId": "CVE-2026-86942",
"type": "related"
},
{
"destId": "CVE-2026-86945",
"type": "related"
},
{
"destId": "CVE-2026-86946",
"type": "related"
},
{
"destId": "CVE-2026-86954",
"type": "related"
},
{
"destId": "CVE-2026-86958",
"type": "related"
},
{
"destId": "CVE-2026-86964",
"type": "related"
},
{
"destId": "CVE-2026-86966",
"type": "related"
},
{
"destId": "CVE-2026-86969",
"type": "related"
},
{
"destId": "CVE-2026-86970",
"type": "related"
},
{
"destId": "CVE-2026-86971",
"type": "related"
},
{
"destId": "CVE-2026-86972",
"type": "related"
},
{
"destId": "CVE-2026-86984",
"type": "related"
},
{
"destId": "CVE-2026-86990",
"type": "related"
},
{
"destId": "CVE-2026-86991",
"type": "related"
},
{
"destId": "CVE-2026-86992",
"type": "related"
}
],
"vulnId": "GCVE-1988-2026-0463",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/48",
"automated": true,
"contentSha256": "8953149b22d4d1361092baf693a41370ebbb0e9372fca138550a4a5a6eda0995",
"evidenceScore": 7,
"messageId": "",
"originalUrl": "https://seclists.org/fulldisclosure/2026/Oct/48",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-10-26T21:45:02Z"
}
},
{
"recordType": "advisory",
"vulnId": "gcve-1988-2026-0463"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-11-02T07:30:00Z",
"dateUpdated": "2026-11-02T07:30:00Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0463"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.