APPLE-SA-11-09-2026-6 macOS Sequoia 15.8.3
Apple Product Security via Fulldisclosure ·
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-11-09-2026-6 macOS Sequoia 15.8.3 macOS Sequoia 15.8.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/149720. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AirPlay Available for: macOS Sequoia Impact: An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts Description: A logic issue was addressed with improved state management. CVE-2026-113968: Apple Bluetooth Available for: macOS Sequoia Impact: An attacker in Bluetooth range may be able to corrupt process memory Description: A use-after-free issue was addressed with improved memory management. CVE-2026-113970: Apple brotli Available for: macOS Sequoia Impact: Processing maliciously crafted input may lead to memory corruption Description: An out-of-bounds write issue was addressed with improved input validation. CVE-2026-111497 CoreUtils Available for: macOS Sequoia Impact: A malicious Bluetooth device may be able to establish a pairing without user interaction Description: This issue was addressed with improved checks. CVE-2026-113965: Apple CoreUtils Available for: macOS Sequoia Impact: An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction Description: A logic issue was addressed with improved state management. CVE-2026-113964: an anonymous researcher Messages Available for: macOS Sequoia Impact: A user added to an iMessage group may be able to access messages sent before they joined Description: This issue was addressed by removing the vulnerable code. CVE-2026-113960: an anonymous researcher Messages Available for: macOS Sequoia Impact: A remote attacker may be able to join an iMessage group chat and receive its messages Description: An authorization issue was addressed with improved validation. CVE-2026-113961: an anonymous researcher rapportd Available for: macOS Sequoia Impact: An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts Description: A logic issue was addressed with improved state management. CVE-2026-113969: Apple macOS Sequoia 15.8.3 may be obtained from the Mac App Store or Apple's Software Downloads web site: https://support.apple.com/downloads/ All information is also posted on the Apple Security Releases web site: https://support.apple.com/100100. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhjkl+zMLNwFiCT1o4Ifiq8DH7PUFAmryPH8ACgkQ4Ifiq8DH 7PVXgA//W5a4x+xuVhxU5xkLGd6EOAmJsHp6p2v00/1mHOT1Vbzv0mE9Z6oi3ZPX eToAeFI0xryV6x2zVDm12NHpSVbOz86yjWH45+JnGc3J/9FPbTtGTZsw31Qa5sjK NPHwAUs7KHPKHfgOg50QdWYl4S+3iiS26yEs8WleKYKZtVOPiG7spDDJShP0TEBC NsWMlAnMShE2FubGU03P8i01ojGCWjblbBsoLg+XbSrBlJYZzze9BxombbAqdSuW SiWEJEGu9/G0mLvtebbts65yjRM2eu7TaWL/Ud84u9+xCmQciZnfd6Kii0zf1eT9 8zydrj2dqF5Ogeb3i/PCdPhyGUdPmCvcE1j2L4awhP6SDHeVtltiCHUCIZ4wDhoW V6XjG8NFdvTWux2RRteRTtE0jeRB8EP0HAwz18kv3/megarw1GmPTy2ubndupd3U o4JoD/glOQvT6X0y74G78En3oLF+/hBiAfn0ifs9IuVf87wEAKu4K0iduX75z0bj xayg4YW6y5xsNXcESSyvKLj4bkmoBBzk0xn8LwR+HVFd7s2Z+MpxGG6PCVfkhLtJ WmMeUgwNqiBHa6KxuPCbZdQI9iBGnEIqQU4uBCikwB3x9YhASc+CK10zwPOYW58M 0H1EjIQoJqsXUHwoUqnX1yEHzoVvN/VVP+lAy0zgtNK8dDWJvxY= =tmJ8 -----END PGP SIGNATURE----- _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/