En Us 149522

For our customers' protection, Apple doesn't disclose, , or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.

Apple security documents reference vulnerabilities by CVE-ID when possible.

For more information security, see the Apple Product Security page.

Released October 26, 2026

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-86971: an anonymous researcher

Available for: macOS Tahoe

Impact: A malicious application may be able to bypass Privacy preferences

Description: A logging issue was addressed with improved data redaction.

CVE-2026-113898: Bhaswanth Chigurupati

Available for: macOS Tahoe

Impact: An app may be able to read sensitive location information

Description: An authorization issue was addressed with improved state management.

CVE-2026-112551: Nguyen Duc Anh of Noventiq, Sindre Sorhus

Available for: macOS Tahoe

Impact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84496: 준우 이, Maher Azzouzi, Jonathan Bar Or (@yo_yo_yo_jbo), Marco Schmitt, Nathaniel Oh (@calysteon), Aswin Kumar Gokulakannan, Narendra Singh (@_3P1C), Thanatos Tian (HKPolyU) & wgg with Diffract, Jakob Pammer, an anonymous researcher, Bhuwan Bhetwal, Kwak kiyong (@Pwnkai23) , Song nuri

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan Dautov, Peter Malone

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or write kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112536: Ruslan Dautov, Thomas Guillem, Narendra Singh (@_3P1C), Kwak Kiyong (@Pwnkai23), Song Nuri, Thanatos Tian (HKPolyU) & wgg with Diffract

Available for: macOS Tahoe

Impact: An app may be able to bypass network restrictions

Description: This issue was addressed with improved checks.

CVE-2026-112467: Sindre Sorhus

Available for: macOS Tahoe

Impact: A remote attacker may be able to break out of the WebContent sandbox

Description: This issue was addressed with improved input validation.

CVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-86920: Johan Wahyudi

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84595: tamdao

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112696: Jaeyeong Lee

Available for: macOS Tahoe

Impact: Processing a maliciously crafted video file may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112416: an anonymous researcher, Meta Red Team X - Nik Tsytsarkin, Narendra Singh (@_3P1C), Hcamael and 章鱼哥@aipy (aipyaipy.com), Dohyeon An @PILAB Technology, Inc

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt process memory

Description: An out-of-bounds write was addressed with improved input validation.

CVE-2026-112415: Rahul Raj, Hcamael and 章鱼哥@aipy (aipyaipy.com)

Available for: macOS Tahoe

Impact: A malicious app may be able to break out of its sandbox

Description: An information leakage was addressed with additional validation.

CVE-2026-112704: Josh Maine of Calif.io

AppleMobileFileIntegrity

Available for: macOS Tahoe

Impact: A malicious app may be able to read or write to protected files

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: A use after free issue was addressed with improved memory management.

CVE-2026-112531: Chanwit Muenprakoddee (ChemIndy)

Available for: macOS Tahoe

Impact: An attacker with root privileges may be able to access protected user data

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-86939: Lance Cain - Senior Security Researcher at SpecterOps Inc.

Available for: macOS Tahoe

Impact: An app may bypass Gatekeeper checks

Description: A logic issue was addressed with improved state management.

CVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul Montgomery (@nullevent)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may bypass Gatekeeper checks

Description: A logic issue was addressed with improved checks.

CVE-2026-112568: an anonymous researcher

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112546: lunar815, Nathaniel Oh (@calysteon), Piotr Jerzy Duszynski, an anonymous researcher, Surej Sekhar, r3pwnx (@r3pwnx), Lily Cohl (@GenericCoding)

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with additional entitlement checks.

CVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2026-112689: Franco Belman at Blackwing Intelligence

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112470: Hcamael and 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112468: Hcamael and 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112469: Hcamael and 章鱼哥@aipy (aipyaipy.com)

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2026-112466: Hcamael and 章鱼哥@aipy (aipyaipy.com)

Available for: macOS Tahoe

Impact: An attacker in physical proximity may be able to cause a denial-of-service

Description: A null pointer dereference was addressed with improved validation.

CVE-2026-112566: Chris Bailey - Short Circuit

Available for: macOS Tahoe

Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks

Description: A file quarantine bypass was addressed with additional checks.

CVE-2026-84610: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Murray Mike

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to heap corruption

Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2026-112670: Bhaswanth Chigurupati

Available for: macOS Tahoe

Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks

Description: The issue was addressed with improved checks.

CVE-2026-112672: 준우 이, Pasquale Scola

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re)

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: A logging issue was addressed with improved data redaction.

CVE-2026-84528: zenith

Available for: macOS Tahoe

Impact: An app may bypass Gatekeeper checks

Description: A file quarantine bypass was addressed with additional checks.

CVE-2026-86941: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Available for: macOS Tahoe

Impact: A malicious app may be able to gain root privileges

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-86896: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may disclose process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112429: Mateusz Jurczyk of Google Project Zero

Available for: macOS Tahoe

Impact: An app may be able to disclose kernel memory

Description: A memory initialization issue was addressed with improved memory handling.

CVE-2026-113910: Tucker Willenborg

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-112545: Frederick Kaludis (Coiffeur0x90), Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Available for: macOS Tahoe

Impact: A malicious application may be able to bypass Privacy preferences

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-112462: DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat Srisutham, Yejun Kim, an anonymous researcher, Zwei Tasse Kaffee, Lakshay Sharma (MrW0r57)

Available for: macOS Tahoe

Impact: An app may be able to modify protected parts of the file system

Description: This issue was addressed with improved handling of symlinks.

CVE-2026-86966: Jihwan Yoon

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may lead to unexpected process termination

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-112471: Meta Red Team X - Nik Tsytsarkin

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt process memory

Description: A race condition was addressed with improved locking.

CVE-2026-112708: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write was addressed with improved input validation.

CVE-2026-86969: Meta Red Team X - Nik Tsytsarkin

Available for: macOS Tahoe

Impact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory

Description: An out-of-bounds access issue was addressed with improved bounds checking.

CVE-2026-113912: an anonymous researcher, 章鱼哥@aipy (aipyaipy.com), Roman Zabicki, Anna Groza (@pwnlambda) of Calif.io

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt process memory

Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2026-113907: Meta Red Team X - Nik Tsytsarkin

Available for: macOS Tahoe

Impact: An attacker in radio range may be able to cause unexpected system termination

Description: A heap buffer overflow was addressed with improved bounds checking.

CVE-2026-112638: Altin Gashi, Përparim Mjeku, Altin Gashi

Available for: macOS Tahoe

Impact: Processing a maliciously crafted audio file may lead to memory corruption

Description: A buffer overflow was addressed with improved size validation.

CVE-2026-86972: an anonymous researcher, Meta Product Security

Available for: macOS Tahoe

Impact: Processing a maliciously crafted PDF file may lead to memory corruption

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112611: f4&Zhiniang Peng with HUST, Aobo Wang (@M4x_1997), Xiang Chen, Jakob Pammer, Anna Groza (@pwnlambda) of Calif.io, Piotr Jerzy Duszynski, an anonymous researcher

CVE-2026-112610: Meta Red Team X - Nik Tsytsarkin

Available for: macOS Tahoe

Impact: Processing a maliciously crafted video file may lead to unexpected app termination

Description: The issue was addressed with improved memory handling.

CVE-2026-86992: Niels Hofmans

Available for: macOS Tahoe

Impact: Parsing a file may lead to an unexpected app termination or arbitrary code execution

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2026-112688: 정우 하 (@0xfa11babe), Chris Bailey - Short Circuit

Available for: macOS Tahoe

Impact: A malicious app may be able to access the camera without user permission

Description: An access issue was addressed with improved access restrictions.

CVE-2026-86990: Mustafa Calap (@ordinal0, dbg.re)

Available for: macOS Tahoe

Impact: A maliciously crafted disk image may bypass Gatekeeper checks

Description: A logic issue was addressed with improved validation.

CVE-2026-65368: an anonymous researcher

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112604: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted font may result in the disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112656: Nurihan Kim (HanTul) working with TrendAI Zero Day Initiative

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A race condition was addressed with improved state handling.

CVE-2026-113900: Frederick Kaludis (Coiffeur0x90), YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab, Lakshay Sharma (MrW0r57)/WorstCase Labs., Ashish Kavishwar, Csaba Fitzl (@theevilbit) of Iru and Gergely Kalman (@gergely_kalman)

Available for: macOS Tahoe

Impact: An app with App Sandbox restrictions may be able to escape the sandbox and execute code with root privileges

Description: A use after free issue was addressed with improved memory management.

CVE-2026-84545: Jurre van Bergen - Threatnotify, Mathis Mansière, 章鱼哥@aipy (aipyaipy.com）, Redon Gashi (Sentry)

Available for: macOS Tahoe

Impact: A local attacker may be able to elevate their privileges

Description: A logic issue was addressed with improved checks.

CVE-2026-65327: Sanny Mitra

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A logic issue was addressed with improved checks.

CVE-2026-112530: Alfredo Pesoli (@__rev) of Bynar.io, Claudio Bozzato and Francesco Benvenuto of Cisco Talos

Available for: macOS Tahoe

Impact: An app may be able to bypass Gatekeeper checks

Description: This issue was addressed with improved checks.

CVE-2026-112444: Paul Montgomery (@nullevent)

Available for: macOS Tahoe

Impact: An app may bypass Gatekeeper checks

Description: A logic issue was addressed with improved checks.

CVE-2026-112428: Koh M. Nakagawa (@tsunek0h) of FFRI Security, Inc., Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Available for: macOS Tahoe

Impact: An app may be able to modify protected parts of the file system

Description: A path handling issue was addressed with improved validation.

CVE-2026-112483: Csaba Fitzl (@theevilbit) of Iru, Lyutoon

Available for: macOS Tahoe

Impact: An app may be able to cause a denial-of-service

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-112502: Narendra Singh (@_3P1C)

Available for: macOS Tahoe

Impact: An app may be able to break out of its sandbox

Description: An access issue was addressed with additional sandbox restrictions.

CVE-2026-112570: Andrey Chernykh (BypassLabs.ai), Keisuke Hosoda

Available for: macOS Tahoe

Impact: An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code

Description: The issue was addressed with improved memory handling.

CVE-2026-86958: oxsignal

Available for: macOS Tahoe

Impact: An app may be able to bypass sandbox restrictions

Description: This issue was addressed with improved access restrictions.

CVE-2026-112534: an anonymous researcher

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: A race condition was addressed with additional validation.

CVE-2026-113896: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, R4mbb

Available for: macOS Tahoe

Impact: Processing a maliciously crafted font may result in the disclosure of process memory

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2026-86970: Hcamael and 章鱼哥@aipy (aipyaipy.com)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112683: Hcamael and 章鱼哥@aipy (aipyaipy.com)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted font may result in the disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112642: Meta Red Team X - Nik Tsytsarkin

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84539: Ye Zhang (@VAR10CK) of Baidu Security

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or write kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112593: f00l (@PPPF00L) and 3ndy1(@_3ndy1)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to arbitrary code execution

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-86929: Anand (anandsreekumar.com)

Available for: macOS Tahoe

Impact: A remote attacker may cause an unexpected process termination

Description: A double free issue was addressed with improved memory management.

CVE-2026-112410: Piotr Jerzy Duszynski

Available for: macOS Tahoe

Impact: An app may be able to cause a denial-of-service

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-86942: He Wei (ギカク)

Available for: macOS Tahoe

Impact: An app may be able to access user-sensitive data

Description: This issue was addressed with improved handling of symlinks.

CVE-2026-112523: powerprove, Michael Benich, Niels Hofmans, Christian Niel Angel of Protectiv IT Security Inc. (protectiv.ph), Lyutoon, Seung Je Seong, R4mbb, Wojciech Regula of SecuRing (wojciechregula.blog)

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112424: Peter Malone

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112475: Aswin Kumar Gokulakannan, Minseok Kim, Dave G., Thanatos Tian (HKPolyU) & wgg & xmr, Marco Schmitt

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to heap corruption

Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2026-112456: Jihwan Yoon, Yash Pandya, Parth Raval

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: An access issue was addressed with additional sandbox restrictions.

CVE-2026-112647: Sattyam Yadav, onetwo, Christian Niel Angel of Protectiv IT Security Inc. (protectiv.ph), Robert Tran, Merrick Hare

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may lead to heap corruption

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-84627: ธนกฤต ทัฬหะ, Rahul Raj, Piotr Jerzy Duszynski, PETOWORKS의 Bugeun Choi (@Bugeun), Mateusz Jurczyk of Google Project Zero, f0r of MurphySec

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may result in memory corruption

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-64750: Mateusz Jurczyk of Google Project Zero, Eddy Tsalolikhin, Johann Rehberger

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may corrupt process memory

Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2026-112488: an anonymous researcher, Mateusz Jurczyk of Google Project Zero, Nik Tsytsarkin

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may result in disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112560: Wout van der Ploeg (woutvanderploeg.nl)

CVE-2026-112561: Meta Red Team X - Nik Tsytsarkin

CVE-2026-112627: Mateusz Jurczyk of Google Project Zero

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may result in disclosure of process memory

Description: A memory initialization issue was addressed with improved memory handling.

CVE-2026-112571: sh3rlock (김보겸)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-86954: Mateusz Jurczyk of Google Project Zero

CVE-2026-112634: Mateusz Jurczyk of Google Project Zero

CVE-2026-112629: Mateusz Jurczyk of Google Project Zero

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112633: Mateusz Jurczyk of Google Project Zero

CVE-2026-112614: Mateusz Jurczyk of Google Project Zero, PETOWORKS의 Bugeun Choi (@Bugeun), Rahul Raj, Piotr Jerzy Duszynski

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may result in memory corruption

Description: An integer underflow was addressed with improved input validation.

CVE-2026-112625: Mateusz Jurczyk of Google Project Zero

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may result in disclosure of process memory

Description: An uninitialized memory issue was addressed with improved memory handling.

CVE-2026-112630: Mateusz Jurczyk of Google Project Zero

CVE-2026-112632: Mateusz Jurczyk of Google Project Zero

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-112533: Andrey Chernykh, Sihyun Roh (Compsec, SNU)

Available for: macOS Tahoe

Impact: An attacker may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112515: Charles Stevenson, Mathis Mansière, Seung Je Seong

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read issue was addressed by removing the vulnerable code.

CVE-2026-112478: Nord0x, Narendra Singh (@_3P1C), Marco Schmitt, an anonymous researcher

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112554: Bhuwan Bhetwal, Kwak Kiyong (@Pwnkai23), Song Nuri, Nicolas Seriot, Tommy DeVoss from Braze Security Team (@thedawgyg), Tucker Willenborg, Navapon Premkasem, Aswin Kumar Gokulakannan, Peter Malone, Richard Zana

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A race condition was addressed with improved locking.

CVE-2026-112477: an anonymous researcher

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected changes to copy-on-write memory

Description: A memory integrity issue was addressed with improved handling of copy-on-write pages.

CVE-2026-112576: Pedro Pinho

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: A type confusion issue was addressed with improved memory handling.

CVE-2026-112606: Wang Yu

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-112532: Peter Malone

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A use after free issue was addressed with improved memory management.

CVE-2026-112517: Pasquale Scola, Cem Onat Karagun, Wout van der Ploeg (woutvanderploeg.nl), John Lussier, an anonymous researcher

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-112516: an anonymous researcher, greenbynox

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: The issue was addressed with improved memory handling.

CVE-2026-112698: OpenAI, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Available for: macOS Tahoe

Impact: An attacker may be able to cause unexpected system termination or corrupt kernel memory

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-112514: Marc Newlin of SkySafe, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., greenbynox

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or write kernel memory

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-84495: Wang Yu

Available for: macOS Tahoe

Impact: An app may be able to execute arbitrary code with kernel privileges

Description: A use after free issue was addressed with improved memory management.

CVE-2026-86916: Wang Yu

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-65350: Xinru Chi of Pangu Lab, Tim Michaud (@TimGMichaud) of Aginor.ai, Nebula Security (@nebusecurity)

Available for: macOS Tahoe

Impact: A malicious app may be able to break out of its sandbox

Description: A race condition was addressed with additional validation.

CVE-2026-112543: f0r of MurphySec

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112476: Arnold Cartagena, Matt Suiche (@msuiche) of Tolmo

Available for: macOS Tahoe

Impact: An unprivileged attacker may be able to execute arbitrary code as root

Description: A logic issue was addressed with improved state management.

CVE-2026-112438: Jakob Pammer

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: A null pointer dereference was addressed with improved input validation.

CVE-2026-86964: Ryan Hileman via Xint Code (xint.io)

Available for: macOS Tahoe

Impact: An app may be able to determine kernel memory layout

Description: An information disclosure issue was addressed with improved state management.

CVE-2026-112665: Will Estes

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: A race condition was addressed with improved state handling.

CVE-2026-112501: Cem Onat Karagun

Available for: macOS Tahoe

Impact: An app may be able to bypass Privacy preferences

Description: This issue was addressed with improved checks.

CVE-2026-112624: Jerry L. Knot

Available for: macOS Tahoe

Impact: An app may bypass Gatekeeper checks

Description: A file quarantine bypass was addressed with additional checks.

CVE-2026-112494: Yiğit Can YILMAZ (@yilmazcanyigit)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112522: Eliya M., Viacheslav Radiukov, Tristan Madani (Talence Security), Robert Tran

Available for: macOS Tahoe

Impact: An malicious app may be able to create files in protected directories

Description: This issue was addressed with improved checks.

CVE-2026-86945: an anonymous researcher, Andrey Chernykh

Available for: macOS Tahoe

Impact: An app may be able to break out of its sandbox

Description: This issue was addressed with improved permissions checking.

CVE-2026-112497: Claudio Bozzato and Francesco Benvenuto of Cisco Talos

Available for: macOS Tahoe

Impact: Processing a maliciously crafted message may lead to a denial-of-service

Description: A stack overflow was addressed with improved input validation.

CVE-2026-112414: Daniel Rodríguez, Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: A remote attacker may be able to cause a denial-of-service

Description: A resource exhaustion issue was addressed with improved input validation.

CVE-2026-112671: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: A race condition was addressed with additional validation.

CVE-2026-113915: Abodi Dawoud, Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Ilya Andr (andrd3v) of Positive Technologies, Zhongquan Li (@Guluisacat)

Available for: macOS Tahoe

Impact: A remote attacker may be able to cause unexpected app termination

Description: An input validation issue was addressed with improved input validation.

CVE-2026-112682: Mahmoud Abdelmoniem

Available for: macOS Tahoe

Impact: An app may be able to read files outside of its sandbox

Description: An access issue was addressed with improved access restrictions.

CVE-2026-84542: Mustafa Ahmed, an anonymous researcher

Available for: macOS Tahoe

Impact: Processing a maliciously crafted 3D model may lead to memory corruption

Description: An integer overflow was addressed with improved input validation.

CVE-2026-112565: Musaab Khan (@bxff), Hcamael and 章鱼哥@aipy (aipyaipy.com), Saoud Khalifah, stratan (@5tratan), Niels Hofmans

CVE-2026-112449: ret2happy (@ret2happy)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112413: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112553: stratan (@5tratan)

CVE-2026-112563: stratan (@5tratan)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted 3D model may lead to memory corruption

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112461: 진규정 (Gyujeong Jin, @G1uN4sh), Lucas Parnell, Nathaniel Oh (@calysteon), Meta Red Team X - Nik Tsytsarkin, YingMuo (@YingMuo) of DEVCORE Research Team, ret2happy (@ret2happy)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted 3D model may lead to memory corruption

Description: The issue was addressed with improved memory handling.

CVE-2026-112485: Nik Tsytsarkin

Available for: macOS Tahoe

Impact: Processing a 3D model may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112486: Md Rasel Bhuyan ( Musaab Khan (@bxff)

Available for: macOS Tahoe

Impact: An app may be able to cause a denial-of-service

Description: A type confusion issue was addressed with improved memory handling.

CVE-2026-112550: Jonathan Bar Or (@yo_yo_yo_jbo)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted audit file may corrupt process memory

Description: A stack buffer overflow was addressed through improved input validation.

CVE-2026-84604: Tristan Madani (Talence Security)

Available for: macOS Tahoe

Impact: An app may be able to modify protected parts of the file system

Description: A race condition was addressed with improved handling of symbolic links.

CVE-2026-112421: Csaba Fitzl (@theevilbit) of Iru and Gergely Kalman (@gergely_kalman)

Available for: macOS Tahoe

Impact: An app may be able to modify protected parts of the file system

Description: A race condition was addressed with additional validation.

CVE-2026-112442: Mickey Jin (@patch1t)

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-65397: Varik Matevosyan (@D4RK7ET), an anonymous researcher

Available for: macOS Tahoe

Impact: An app may be able to bypass certain Privacy preferences

Description: An authorization issue was addressed with improved state management.

CVE-2026-112660: Prafull Dhiman, Alto_00000

Available for: macOS Tahoe

Impact: An app may be able to access a user's Photos Library

Description: This issue was addressed with additional entitlement checks.

CVE-2026-112676: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: The issue was addressed with improved checks.

CVE-2026-113899: Siddharth Aeri

Available for: macOS Tahoe

Impact: A malicious app may be able to intercept network traffic

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-112542: Gabriel '0xv1n' Cardona, Mrunal Chawda, Kujtim Kryeziu (Sentry), Tristan Madani (Talence Security)

Available for: macOS Tahoe

Impact: A malicious app may be able to break out of its sandbox

Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-112562: 도현 김, Ithrael, YEONGJAE SHIN, an anonymous researcher

Available for: macOS Tahoe

Impact: A malicious application may bypass Gatekeeper checks

Description: This issue was addressed with improved validation of file attributes.

CVE-2026-64789: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs (nosebeard.co), an anonymous researcher

Available for: macOS Tahoe

Impact: An app may be able to break out of its sandbox

Description: An access issue was addressed with additional sandbox restrictions.

CVE-2026-112569: Csaba Fitzl (@theevilbit) of Iru, an anonymous researcher

CVE-2026-112498: an anonymous researcher

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112491: Hongsik Kim (mnur)

Available for: macOS Tahoe

Impact: An attacker on the local network may be able to cause unexpected system termination or corrupt process memory

Description: A double free issue was addressed with improved memory management.

CVE-2026-112457: Efstratios Kaplanellis (@5tratan) of Almamater Technologies, Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: A user with screen sharing access may be able to view another user's screen

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-112480: Andrey Chernykh, ruitong (@abstract)

Available for: macOS Tahoe

Impact: An application may be able to execute arbitrary code with system privileges

Description: An authorization issue was addressed with improved access control.

CVE-2026-112677: an anonymous researcher, Niels Hofmans, 도현 김, Junyeong Lee (jylab.github.io), Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Jonghoon Han (Aegis)

Available for: macOS Tahoe

Impact: Processing a 3D model may result in disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112425: stratan (@5tratan)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112423: Rahul Raj

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An integer overflow was addressed with improved input validation.

CVE-2026-112540: f4&Zhiniang Peng with HUST, Geonha Lee (@leegn4a), Kwak Kiyong (@Pwnkai23), Song Nuri, Wout van der Ploeg (woutvanderploeg.nl), Substrate, Piotr Jerzy Duszynski, Tristan Madani (Talence Security), Arni Hardarson (Neonix Security), an anonymous researcher

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to heap corruption

Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2026-112464: 정우 하 (@0xfa11babe), Narendra Singh (@_3P1C)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to unexpected process termination

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-86991: Cem Onat Karagun, Yujung Choi (@Dusker), Mathis Mansière, Rahul Raj

Available for: macOS Tahoe

Impact: Connecting to a malicious VNC server may cause a denial-of-service

Description: An integer overflow was addressed with improved input validation.

CVE-2026-112519: Piotr Jerzy Duszynski, Nathaniel Oh (@calysteon)

Screen Sharing Server

Available for: macOS Tahoe

Impact: A malicious app may be able to gain root privileges

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-65373: Stefan Esser (Calif), Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io), Anon Tuttu Venus, Nathaniel Oh (@calysteon)

Screen Sharing Server

Available for: macOS Tahoe

Impact: An attacker with the legacy VNC password for Screen Sharing may be able to copy files to the Mac

Description: An authorization issue was addressed with improved state management.

CVE-2026-112473: Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)

Screen Sharing Server

Available for: macOS Tahoe

Impact: An attacker on the local network may be able to corrupt process memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112482: Nathaniel Oh (@calysteon)

Screen Sharing Server

Available for: macOS Tahoe

Impact: A malicious Screen Sharing peer may be able to create arbitrary symlinks as root

Description: A path handling issue was addressed with improved logic.

CVE-2026-112511: Nathaniel Oh (@calysteon)

Screen Sharing Server

Available for: macOS Tahoe

Impact: A malicious application may be able to execute arbitrary code with system privileges

Description: This issue was addressed with improved file handling.

CVE-2026-112484: Mahmoud Abdelmoniem

Screen Sharing Server

Available for: macOS Tahoe

Impact: A remote attacker may be able to cause unexpected app termination or heap corruption

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84590: Nathaniel Oh (@calysteon), Narendra Singh (@_3P1C), koocolb, Tristan Madani (Talence Security)

Screen Sharing Server

Available for: macOS Tahoe

Impact: An attacker on the local network may be able to cause unexpected process termination or disclose process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112481: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: Processing web content may disclose sensitive information

Description: An input validation issue was addressed with improved input validation.

CVE-2026-113913: Niels Hofmans, Stav Nir and Vladimir Tokarev

Available for: macOS Tahoe

Impact: An app may be able to break out of its sandbox

Description: The issue was addressed with improved checks.

CVE-2026-65363: Arni Hardarson (Neonix Security), Csaba Fitzl (@theevilbit) of Iru and Gergely Kalman (@gergely_kalman)

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: A privacy issue was addressed with improved memory management.

CVE-2026-86931: Pranav Gopalkrishnan, Alan Wang, Ailsa Sun, Hovav Shacham, Riccardo Paccagnella, Chris Fletcher, David Kohlbrenner

Available for: macOS Tahoe

Impact: A sandboxed process may be able to circumvent sandbox restrictions

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-112521: Richard Hyunho Im (@richeeta) at Route Zero Security, Efstratios Kaplanellis (@5tratan) of Almamater Technologies

Available for: macOS Tahoe

Impact: A local attacker may gain access to user's Keychain items

Description: This issue was addressed with improved permissions checking.

CVE-2026-28864: Alex Radocea

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A logic issue was addressed with improved checks.

CVE-2026-112668: cnitlrt (@abstract), Roman Belovitskiy, Lyutoon, Art Pllana, Redon Gashi of Sentry, ruitong (@abstract), Surej Sekhar, Teodor Sorescu (@teodorsorescu), Eddy Tsalolikhin, Franco Belman at Blackwing Intelligence, Phillip Groves, Sihyun Roh (Compsec, SNU), lokerxx

CVE-2026-86936: cnitlrt (@abstract), lokerxx

CVE-2026-112437: lokerxx

CVE-2026-112434: ruitong (@abstract), lokerxx

Available for: macOS Tahoe

Impact: An malicious app may be able to bypass certificate validation

Description: A logic issue was addressed with improved state management.

CVE-2026-112652: Aditya Kumar

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: An authentication issue was addressed with improved validation of user attributes.

CVE-2026-112430: ruitong (@abstract)

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A downgrade issue was addressed with additional version checks.

CVE-2026-112493: Mickey Jin (@patch1t)

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-112559: Lucas Lammer, Stuart Wallace

CVE-2026-112455: Rahul Raj, Chris Bailey - Short Circuit

Available for: macOS Tahoe

Impact: An app may be able to access information a user's contacts

Description: A file access issue existed with certain folder files. This was addressed with improved access restrictions.

CVE-2026-86984: Albin Haliti

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: An information disclosure issue was addressed with improved privacy controls.

CVE-2026-86923: Sindre Sorhus, Asaf Cohen

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-43736: Guilherme Rambo of Best Buddy Apps (rambo.codes), Abodi Dawoud

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-86946: Jakob Pammer

Available for: macOS Tahoe

Impact: An attacker with control of a network file server may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112552: Bhuwan Bhetwal, Feng Xue and XGPT of ThreatBook, Claudio Bozzato and Francesco Benvenuto of Cisco Talos

Available for: macOS Tahoe

Impact: A remote attacker may be able to cause unexpected app termination

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-112526: Nathaniel Oh (@calysteon), Narendra Singh (@_3P1C), Tristan Madani (@TristanInSec) from Talence Security, an anonymous researcher

Available for: macOS Tahoe

Impact: A remote attacker may be able to cause a denial-of-service or disclose process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112451: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: A remote attacker may be able to cause a denial-of-service

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112510: Efstratios Kaplanellis (@5tratan) of Almamater Technologies, Andrey Chernykh

Available for: macOS Tahoe

Impact: A malicious Screen Sharing peer may be able to corrupt process memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112505: an anonymous researcher, Narendra Singh (@_3P1C), Andrey Chernykh

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112495: Lyutoon

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: A permissions issue was addressed with additional sandbox restrictions.

CVE-2026-112558: D4rthL

Available for: macOS Tahoe

Impact: A malicious application may be able to bypass Privacy preferences

Description: The issue was addressed with improved checks.

CVE-2026-112557: D4rthL

Available for: macOS Tahoe

Impact: A malicious application may be able to bypass Privacy preferences

Description: This issue was addressed with improved checks.

CVE-2026-112567: zenith

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with improved data access restriction.

CVE-2026-112628: Santiago Albertengo, Chris Bailey - Short Circuit

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: This issue was addressed by removing the vulnerable code.

CVE-2026-112441: Pan ZhenPeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A path handling issue was addressed with improved validation.

CVE-2026-112487: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab, Junyeong Lee (jylab.github.io), Gergely Kalman (@gergely_kalman), Lyutoon, Jaeyeong Lee, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-112541: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs (nosebeard.co), Maher Azzouzi, Sindre Sorhus, Paul Montgomery (@nullevent), Mickey Jin (@patch1t), Frederick Kaludis (Coiffeur0x90)

Available for: macOS Tahoe

Impact: An app may be able to modify protected parts of the file system

Description: A race condition was addressed with improved handling of symbolic links.

CVE-2026-112535: Sindre Sorhus

Available for: macOS Tahoe

Impact: An app may be able to modify protected parts of the file system

Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-112504: Mickey Jin (@patch1t)

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A race condition was addressed with additional validation.

CVE-2026-112492: Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A use after free issue was addressed with improved memory management.

CVE-2026-112548: Surej Sekhar

Available for: macOS Tahoe

Impact: An attacker may tamper with code-signed applications to execute arbitrary code in the application's context

Description: A race condition was addressed with additional validation.

CVE-2026-112556: Paul Montgomery (@nullevent), Mickey Jin (@patch1t)

Available for: macOS Tahoe

Impact: An app may be able to break out of its sandbox

Description: A path handling issue was addressed with improved validation.

CVE-2026-112453: Sindre Sorhus

Available for: macOS Tahoe

Impact: An app may be able to bypass Gatekeeper checks

Description: A path handling issue was addressed with improved validation.

CVE-2026-112512: Mufeed VH of Winfunc Research (winfunc.com), YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab, Mathis Mansière

Available for: macOS Tahoe

Impact: An app may be able to bypass Privacy preferences

Description: An authorization issue was addressed with improved state management.

CVE-2026-112447: 云开 江, Joshua Maina, Ithrael, Mahmoud Gamal (@Zombiehelp54)

Available for: macOS Tahoe

Impact: An app may be able to disclose kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-84498: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected sys...