GCVE-1988-2026-0567

Vulnerability from gna-1988 – Published: 2026-11-13 02:29 – Updated: 2026-11-13 02:29
VLAI
Title
APPLE-SA-11-09-2026-6 macOS Sequoia 15.8.3
Summary
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-11-09-2026-6 macOS Sequoia 15.8.3 macOS Sequoia 15.8.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/149720. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AirPlay Available for: macOS Sequoia Impact: An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts Description: A logic issue was addressed with improved state management. CVE-2026-113968: Apple Bluetooth Available for: macOS Sequoia Impact: An attacker in Bluetooth range may be able to corrupt process memory Description: A use-after-free issue was addressed with improved memory management. CVE-2026-113970: Apple brotli Available for: macOS Sequoia Impact: Processing maliciously crafted input may lead to memory corruption Description: An out-of-bounds write issue was addressed with improved input validation. CVE-2026-111497 CoreUtils Available for: macOS Sequoia Impact: A malicious Bluetooth device may be able to establish a pairing without user interaction Description: This issue was addressed with improved checks. CVE-2026-113965: Apple CoreUtils Available for: macOS Sequoia Impact: An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction Description: A logic issue was addressed with improved state management. CVE-2026-113964: an anonymous researcher Messages Available for: macOS Sequoia Impact: A user added to an iMessage group may be able to access messages sent before they joined Description: This issue was addressed by removing the vulnerable code. CVE-2026-113960: an anonymous researcher Messages Available for: macOS Sequoia Impact: A remote attacker may be able to join an iMessage group chat and receive its messages Description: An authorization issue was addressed with improved validation. CVE-2026-113961: an anonymous researcher rapportd Available for: macOS Sequoia Impact: An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts Description: A logic issue was addressed with improved state management. CVE-2026-113969: Apple macOS Sequoia 15.8.3 may be obtained from the Mac App Store or Apple's Software Downloads web site: https://support.apple.com/downloads/ All information is also posted on the Apple Security Releases web site: https://support.apple.com/100100. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhjkl+zMLNwFiCT1o4Ifiq8DH7PUFAmryPH8ACgkQ4Ifiq8DH 7PVXgA//W5a4x+xuVhxU5xkLGd6EOAmJsHp6p2v00/1mHOT1Vbzv0mE9Z6oi3ZPX eToAeFI0xryV6x2zVDm12NHpSVbOz86yjWH45+JnGc3J/9FPbTtGTZsw31Qa5sjK NPHwAUs7KHPKHfgOg50QdWYl4S+3iiS26yEs8WleKYKZtVOPiG7spDDJShP0TEBC NsWMlAnMShE2FubGU03P8i01ojGCWjblbBsoLg+XbSrBlJYZzze9BxombbAqdSuW SiWEJEGu9/G0mLvtebbts65yjRM2eu7TaWL/Ud84u9+xCmQciZnfd6Kii0zf1eT9 8zydrj2dqF5Ogeb3i/PCdPhyGUdPmCvcE1j2L4awhP6SDHeVtltiCHUCIZ4wDhoW V6XjG8NFdvTWux2RRteRTtE0jeRB8EP0HAwz18kv3/megarw1GmPTy2ubndupd3U o4JoD/glOQvT6X0y74G78En3oLF+/hBiAfn0ifs9IuVf87wEAKu4K0iduX75z0bj xayg4YW6y5xsNXcESSyvKLj4bkmoBBzk0xn8LwR+HVFd7s2Z+MpxGG6PCVfkhLtJ WmMeUgwNqiBHa6KxuPCbZdQI9iBGnEIqQU4uBCikwB3x9YhASc+CK10zwPOYW58M 0H1EjIQoJqsXUHwoUqnX1yEHzoVvN/VVP+lAy0zgtNK8dDWJvxY= =tmJ8 -----END PGP SIGNATURE----- _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/
Severity
No CVSS data available.
Assigner
VULNARCHIVE GNA GNA-1988
GNA scorecard E 38/100 over 576 records in the last 180 days details
References
Impacted products
Vendor Product Version CPE status
Apple Macos Sequoia Affected: unknown
guessed Create a notification for this product.
Credits
Apple Product Security via Fulldisclosure
Relationships
reference GCVE-1988-2026-0567 (this record)
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Macos Sequoia",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-11-09-2026-6 macOS Sequoia 15.8.3\n\nmacOS Sequoia 15.8.3 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149720.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAirPlay\nAvailable for: macOS Sequoia\nImpact: An attacker in Bluetooth range may be able to bypass the rate\nlimit on pairing code attempts\nDescription: A logic issue was addressed with improved state management.\nCVE-2026-113968: Apple\n\nBluetooth\nAvailable for: macOS Sequoia\nImpact: An attacker in Bluetooth range may be able to corrupt process\nmemory\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nCVE-2026-113970: Apple\n\nbrotli\nAvailable for: macOS Sequoia\nImpact: Processing maliciously crafted input may lead to memory\ncorruption\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation.\nCVE-2026-111497\n\nCoreUtils\nAvailable for: macOS Sequoia\nImpact: A malicious Bluetooth device may be able to establish a pairing\nwithout user interaction\nDescription: This issue was addressed with improved checks.\nCVE-2026-113965: Apple\n\nCoreUtils\nAvailable for: macOS Sequoia\nImpact: An attacker in Bluetooth range may be able to bypass the rate\nlimit on pairing code attempts and pair with a device without user\ninteraction\nDescription: A logic issue was addressed with improved state management.\nCVE-2026-113964: an anonymous researcher\n\nMessages\nAvailable for: macOS Sequoia\nImpact: A user added to an iMessage group may be able to access messages\nsent before they joined\nDescription: This issue was addressed by removing the vulnerable code.\nCVE-2026-113960: an anonymous researcher\n\nMessages\nAvailable for: macOS Sequoia\nImpact: A remote attacker may be able to join an iMessage group chat and\nreceive its messages\nDescription: An authorization issue was addressed with improved\nvalidation.\nCVE-2026-113961: an anonymous researcher\n\nrapportd\nAvailable for: macOS Sequoia\nImpact: An attacker on the same network may be able to bypass the rate\nlimit on AirPlay pairing code attempts\nDescription: A logic issue was addressed with improved state management.\nCVE-2026-113969: Apple\n\nmacOS Sequoia 15.8.3 may be obtained from the Mac App Store or\nApple\u0027s Software Downloads web site:\nhttps://support.apple.com/downloads/\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n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\n0H1EjIQoJqsXUHwoUqnX1yEHzoVvN/VVP+lAy0zgtNK8dDWJvxY=\n=tmJ8\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-13T02:29:21Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Nov/29"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Nov/29"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/149720"
        },
        {
          "url": "https://support.apple.com/downloads/"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Nov/29"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-11-09-2026-6 macOS Sequoia 15.8.3",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-111497",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113960",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113961",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113964",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113965",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113968",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113969",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113970",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0567",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Nov/29",
            "automated": true,
            "contentSha256": "c6aae6836a1da0fc113adbce0d7a57d9df1733ef0c0eb52d577d751b72203f56",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Nov/29",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-11-10T00:06:59Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0567"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-13T02:29:21Z",
    "dateUpdated": "2026-11-13T02:29:21Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0567"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.