APPLE-SA-10-26-2026-6 macOS Sequoia 15.8.2

Apple Product Security via Fulldisclosure · 2026-10-26

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-10-26-2026-6 macOS Sequoia 15.8.2

macOS Sequoia 15.8.2 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/149523.

Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.

Accelerate
Available for: macOS Sequoia
Impact: An app may be able to cause a denial-of-service
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-28991: Seiji Sakurai (@HeapSmasher)

Accelerate Framework
Available for: macOS Sequoia
Impact: Processing a maliciously crafted image may lead to unexpected
app termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-86971: an anonymous researcher

Accounts
Available for: macOS Sequoia
Impact: A malicious application may be able to bypass Privacy
preferences
Description: A logging issue was addressed with improved data redaction.
CVE-2026-113898: Bhaswanth Chigurupati

afpfs
Available for: macOS Sequoia
Impact: A remote attacker may be able to cause unexpected system
termination or corrupt kernel memory
Description: A buffer overflow was addressed with improved bounds
checking.
CVE-2026-64767: Dave G.

APFS
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
read kernel memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan
Dautov, Peter Malone

APFS
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
write kernel memory
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112536: Ruslan Dautov, Thomas Guillem, Narendra Singh (@_3P1C),
Kwak Kiyong (@Pwnkai23), Song Nuri, Thanatos Tian (HKPolyU) & wgg with
Diffract

App Store
Available for: macOS Sequoia
Impact: A remote attacker may be able to break out of the WebContent
sandbox
Description: This issue was addressed with improved input validation.
CVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos

Apple Intelligence
Available for: macOS Sequoia
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state
management.
CVE-2026-86920: Johan Wahyudi

Apple Neural Engine
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-84595: tamdao

Apple Neural Engine
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112696: Jaeyeong Lee

AppleAVD
Available for: macOS Sequoia
Impact: Processing a maliciously crafted video file may lead to
unexpected app termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112416: an anonymous researcher, Meta Red Team X - Nik
Tsytsarkin, Narendra Singh (@_3P1C), Hcamael and 章鱼哥@aipy
(aipyaipy.com), Dohyeon An @PILAB Technology, Inc

AppleAVD
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
corrupt process memory
Description: An out-of-bounds write was addressed with improved input
validation.
CVE-2026-112415: Rahul Raj, Hcamael and 章鱼哥@aipy (aipyaipy.com)

AppleAVD
Available for: macOS Sequoia
Impact: A malicious app may be able to break out of its sandbox
Description: An information leakage was addressed with additional
validation.
CVE-2026-112704: Josh Maine of Calif.io

AppleMobileFileIntegrity
Available for: macOS Sequoia
Impact: A malicious app may be able to read or write to protected files
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos

AppleRAID
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination
Description: A use after free issue was addressed with improved memory
management.
CVE-2026-112531: Chanwit Muenprakoddee (ChemIndy)

ArchiveService
Available for: macOS Sequoia
Impact: An app may bypass Gatekeeper checks
Description: A logic issue was addressed with improved state management.
CVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul
Montgomery (@nullevent)

ArchiveService
Available for: macOS Sequoia
Impact: Processing a maliciously crafted file may bypass Gatekeeper
checks
Description: A logic issue was addressed with improved checks.
CVE-2026-112568: an anonymous researcher

Audio
Available for: macOS Sequoia
Impact: Processing a maliciously crafted file may lead to unexpected app
termination
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112546: lunar815, Nathaniel Oh (@calysteon), Piotr Jerzy
Duszynski, an anonymous researcher, Surej Sekhar, r3pwnx (@r3pwnx), Lily
Cohl (@GenericCoding)

Audio
Available for: macOS Sequoia
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with additional entitlement
checks.
CVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud

AVEVideoEncoder
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io

AVEVideoEncoder
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved
input validation.
CVE-2026-112689: Franco Belman at Blackwing Intelligence

AVEVideoEncoder
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112470: Hcamael and 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112468: Hcamael and 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112469: Hcamael and 章鱼哥@aipy (aipyaipy.com)

AVEVideoEncoder
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
read kernel memory
Description: An out-of-bounds read was addressed with improved input
validation.
CVE-2026-112466: Hcamael and 章鱼哥@aipy (aipyaipy.com)

BOM
Available for: macOS Sequoia
Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks
Description: A file quarantine bypass was addressed with additional
checks.
CVE-2026-84610: Murray Mike, Andreas Jaegersberger & Ro Achterberg of
Nosebeard Labs

BOM
Available for: macOS Sequoia
Impact: Processing a maliciously crafted file may lead to heap
corruption
Description: An out-of-bounds write issue was addressed with improved
input validation.
CVE-2026-112670: Bhaswanth Chigurupati

BOM
Available for: macOS Sequoia
Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks
Description: The issue was addressed with improved checks.
CVE-2026-112672: 준우 이, Pasquale Scola

Calendar
Available for: macOS Sequoia
Impact: An app may be able to access sensitive user data
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re)

Carbon Core
Available for: macOS Sequoia
Impact: An app may be able to access sensitive user data
Description: A logging issue was addressed with improved data redaction.
CVE-2026-84528: zenith

Carbon Core
Available for: macOS Sequoia
Impact: An app may bypass Gatekeeper checks
Description: A file quarantine bypass was addressed with additional
checks.
CVE-2026-86941: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

CloudKit
Available for: macOS Sequoia
Impact: A malicious app may be able to gain root privileges
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-86896: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

ColorSync
Available for: macOS Sequoia
Impact: Processing a maliciously crafted file may disclose process
memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112429: Mateusz Jurczyk of Google Project Zero

Compression
Available for: macOS Sequoia
Impact: An app may be able to disclose kernel memory
Description: A memory initialization issue was addressed with improved
memory handling.
CVE-2026-113910: Tucker Willenborg

configd
Available for: macOS Sequoia
Impact: An app may be able to gain root privileges
Description: A parsing issue in the handling of directory paths was
addressed with improved path validation.
CVE-2026-112545: Frederick Kaludis (Coiffeur0x90), Andreas Jaegersberger
& Ro Achterberg of Nosebeard Labs

Control Center
Available for: macOS Sequoia
Impact: A malicious application may be able to bypass Privacy
preferences
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-112462: DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat
Srisutham, Yejun Kim, an anonymous researcher, Zwei Tasse Kaffee,
Lakshay Sharma (MrW0r57)

copyfile
Available for: macOS Sequoia
Impact: An app may be able to modify protected parts of the file system
Description: This issue was addressed with improved handling of
symlinks.
CVE-2026-86966: Jihwan Yoon

Core Image
Available for: macOS Sequoia
Impact: Processing a maliciously crafted image may lead to unexpected
process termination
Description: A buffer overflow was addressed with improved bounds
checking.
CVE-2026-112471: Meta Red Team X - Nik Tsytsarkin

CoreAudio
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
corrupt process memory
Description: A race condition was addressed with improved locking.
CVE-2026-112708: Nathaniel Oh (@calysteon)

CoreAudio
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: An out-of-bounds write was addressed with improved input
validation.
CVE-2026-86969: Meta Red Team X - Nik Tsytsarkin

CoreAudio
Available for: macOS Sequoia
Impact: Processing a maliciously crafted media file may lead to
unexpected app termination or corrupt process memory
Description: An out-of-bounds access issue was addressed with improved
bounds checking.
CVE-2026-113912: an anonymous researcher, 章鱼哥@aipy (aipyaipy.com), Roman
Zabicki, Anna Groza (@pwnlambda) of Calif.io

CoreAudio
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
corrupt process memory
Description: A buffer overflow issue was addressed with improved memory
handling.
CVE-2026-113907: Meta Red Team X - Nik Tsytsarkin

CoreAudio
Available for: macOS Sequoia
Impact: An attacker in radio range may be able to cause unexpected
system termination
Description: A heap buffer overflow was addressed with improved bounds
checking.
CVE-2026-112638: Altin Gashi, Përparim Mjeku, Altin Gashi

CoreGraphics
Available for: macOS Sequoia
Impact: Processing a maliciously crafted PDF file may lead to memory
corruption
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112610: Meta Red Team X - Nik Tsytsarkin
CVE-2026-112611: f4&Zhiniang Peng with HUST, Aobo Wang (@M4x_1997),
Xiang Chen, Jakob Pammer, Anna Groza (@pwnlambda) of Calif.io, Piotr
Jerzy Duszynski, an anonymous researcher

CoreMedia
Available for: macOS Sequoia
Impact: Processing a maliciously crafted video file may lead to
unexpected app termination
Description: The issue was addressed with improved memory handling.
CVE-2026-86992: Niels Hofmans

CoreMedia
Available for: macOS Sequoia
Impact: Parsing a file may lead to an unexpected app termination or
arbitrary code execution
Description: A memory corruption issue was addressed with improved
memory handling.
CVE-2026-112688: 정우 하 (@0xfa11babe), Chris Bailey - Short Circuit

CoreServicesUIAgent
Available for: macOS Sequoia
Impact: A maliciously crafted disk image may bypass Gatekeeper checks
Description: A logic issue was addressed with improved validation.
CVE-2026-65368: an anonymous researcher

CoreText
Available for: macOS Sequoia
Impact: Processing a maliciously crafted font may result in the
disclosure of process memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112656: Nurihan Kim (HanTul) working with TrendAI Zero Day
Initiative

CUPS
Available for: macOS Sequoia
Impact: An app with App Sandbox restrictions may be able to escape the
sandbox and execute code with root privileges
Description: A use after free issue was addressed with improved memory
management.
CVE-2026-84545: Jurre van Bergen - Threatnotify, Mathis Mansière,
章鱼哥@aipy (aipyaipy.com）, Redon Gashi (Sentry)

CUPS
Available for: macOS Sequoia
Impact: A local attacker may be able to elevate their privileges
Description: A logic issue was addressed with improved checks.
CVE-2026-65327: Sanny Mitra

CVMS
Available for: macOS Sequoia
Impact: An app may be able to gain root privileges
Description: A logic issue was addressed with improved checks.
CVE-2026-112530: Alfredo Pesoli (@__rev) of Bynar.io, Claudio Bozzato
and Francesco Benvenuto of Cisco Talos

DesktopServices
Available for: macOS Sequoia
Impact: An app may bypass Gatekeeper checks
Description: A logic issue was addressed with improved checks.
CVE-2026-112428: Koh M. Nakagawa (@tsunek0h) of FFRI Security, Inc.,
Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Directory Utility
Available for: macOS Sequoia
Impact: An app may be able to modify protected parts of the file system
Description: A path handling issue was addressed with improved
validation.
CVE-2026-112483: Csaba Fitzl (@theevilbit) of Iru, Lyutoon

Disk Images
Available for: macOS Sequoia
Impact: An app may be able to cause a denial-of-service
Description: A buffer overflow was addressed with improved bounds
checking.
CVE-2026-112502: Narendra Singh (@_3P1C)

DiskArbitration
Available for: macOS Sequoia
Impact: An app may be able to break out of its sandbox
Description: An access issue was addressed with additional sandbox
restrictions.
CVE-2026-112570: Andrey Chernykh (BypassLabs.ai), Keisuke Hosoda

dyld
Available for: macOS Sequoia
Impact: An attacker with memory write capability may be able to bypass
pointer authentication codes and run arbitrary code
Description: The issue was addressed with improved memory handling.
CVE-2026-86958: oxsignal

dyld
Available for: macOS Sequoia
Impact: An app may be able to bypass sandbox restrictions
Description: This issue was addressed with improved access restrictions.
CVE-2026-112534: an anonymous researcher

FileProvider
Available for: macOS Sequoia
Impact: An app may be able to access sensitive user data
Description: A race condition was addressed with additional validation.
CVE-2026-113896: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, R4mbb

FontParser
Available for: macOS Sequoia
Impact: Processing a maliciously crafted font may result in the
disclosure of process memory
Description: An out-of-bounds read was addressed with improved input
validation.
CVE-2026-86970: Hcamael and 章鱼哥@aipy (aipyaipy.com)

FontParser
Available for: macOS Sequoia
Impact: Processing a maliciously crafted font may lead to unexpected app
termination or corrupt process memory
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112683: Hcamael and 章鱼哥@aipy (aipyaipy.com)

FontParser
Available for: macOS Sequoia
Impact: Processing a maliciously crafted font may result in the
disclosure of process memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112642: Meta Red Team X - Nik Tsytsarkin

Game Center
Available for: macOS Sequoia
Impact: A user may be able to view sensitive user information
Description: A logging issue was addressed with improved data redaction.
CVE-2026-20649: Asaf Cohen

GPU Drivers
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
write kernel memory
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112593: f00l (@PPPF00L) and 3ndy1(@_3ndy1)

Grapher
Available for: macOS Sequoia
Impact: Processing a maliciously crafted file may lead to arbitrary code
execution
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-86929: Anand (anandsreekumar.com)

Heimdal
Available for: macOS Sequoia
Impact: A remote attacker may cause an unexpected process termination
Description: A double free issue was addressed with improved memory
management.
CVE-2026-112410: Piotr Jerzy Duszynski

Heimdal
Available for: macOS Sequoia
Impact: An app may be able to cause a denial-of-service
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-86942: He Wei (ギカク)

Help Viewer
Available for: macOS Sequoia
Impact: An app may be able to access user-sensitive data
Description: This issue was addressed with improved handling of
symlinks.
CVE-2026-112523: powerprove, Michael Benich, Niels Hofmans, Christian
Niel Angel of Protectiv IT Security Inc. (protectiv.ph), Lyutoon, Seung
Je Seong, R4mbb, Wojciech Regula of SecuRing (wojciechregula.blog)

HFS
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
read kernel memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112424: Peter Malone

HFS
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112475: Aswin Kumar Gokulakannan, Minseok Kim, Dave G.,
Thanatos Tian (HKPolyU) & wgg & xmr, Marco Schmitt

HFS
Available for: macOS Sequoia
Impact: Processing a maliciously crafted file may lead to heap
corruption
Description: An out-of-bounds write issue was addressed with improved
input validation.
CVE-2026-112456: Jihwan Yoon, Yash Pandya, Parth Raval

iCloud
Available for: macOS Sequoia
Impact: An app may be able to access sensitive user data
Description: An access issue was addressed with additional sandbox
restrictions.
CVE-2026-112647: Sattyam Yadav, onetwo, Christian Niel Angel of
Protectiv IT Security Inc. (protectiv.ph), Robert Tran, Merrick Hare

ImageIO
Available for: macOS Sequoia
Impact: Processing a maliciously crafted image may result in memory
corruption
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-64750: Mateusz Jurczyk of Google Project Zero, Eddy
Tsalolikhin, Johann Rehberger

ImageIO
Available for: macOS Sequoia
Impact: Processing a maliciously crafted image may result in disclosure
of process memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112561: Meta Red Team X - Nik Tsytsarkin
CVE-2026-112560: Wout van der Ploeg (woutvanderploeg.nl)
CVE-2026-112627: Mateusz Jurczyk of Google Project Zero

ImageIO
Available for: macOS Sequoia
Impact: Processing a maliciously crafted image may result in disclosure
of process memory
Description: A memory initialization issue was addressed with improved
memory handling.
CVE-2026-112571: sh3rlock (김보겸)

ImageIO
Available for: macOS Sequoia
Impact: Processing a maliciously crafted image may lead to unexpected
app termination
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-86954: Mateusz Jurczyk of Google Project Zero
CVE-2026-112629: Mateusz Jurczyk of Google Project Zero
CVE-2026-112634: Mateusz Jurczyk of Google Project Zero

ImageIO
Available for: macOS Sequoia
Impact: Processing a maliciously crafted image may result in disclosure
of process memory
Description: An uninitialized memory issue was addressed with improved
memory handling.
CVE-2026-112632: Mateusz Jurczyk of Google Project Zero
CVE-2026-112630: Mateusz Jurczyk of Google Project Zero

ImageIO
Available for: macOS Sequoia
Impact: Processing a maliciously crafted image may result in memory
corruption
Description: An integer underflow was addressed with improved input
validation.
CVE-2026-112625: Mateusz Jurczyk of Google Project Zero

ImageIO
Available for: macOS Sequoia
Impact: Processing a maliciously crafted image may lead to unexpected
app termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112633: Mateusz Jurczyk of Google Project Zero

IOGPUFamily
Available for: macOS Sequoia
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state
management.
CVE-2026-112533: Andrey Chernykh, Sihyun Roh (Compsec, SNU)

IOHIDFamily
Available for: macOS Sequoia
Impact: An attacker may be able to cause unexpected system termination
or read kernel memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112515: Charles Stevenson, Mathis Mansière, Seung Je Seong

IOStorageFamily
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
read kernel memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112554: Bhuwan Bhetwal, Kwak Kiyong (@Pwnkai23), Song Nuri,
Nicolas Seriot, Tommy DeVoss from Braze Security Team (@thedawgyg),
Tucker Willenborg, Navapon Premkasem, Aswin Kumar Gokulakannan, Peter
Malone, Richard Zana

IOSurface
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: A race condition was addressed with improved locking.
CVE-2026-112477: an anonymous researcher

Kernel
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected changes to copy-on-write
memory
Description: A memory integrity issue was addressed with improved
handling of copy-on-write pages.
CVE-2026-112576: Pedro Pinho

Kernel
Available for: macOS Sequoia
Impact: An app may be able to gain root privileges
Description: A race condition was addressed with improved state
handling.
CVE-2026-113900: Frederick Kaludis (Coiffeur0x90), YingQi Shi
(@Mas0nShi) of DBAppSecurity's WeBin lab, Lakshay Sharma
(MrW0r57)/WorstCase Labs., Ashish Kavishwar, Csaba Fitzl (@theevilbit)
of Iru and Gergely Kalman (@gergely_kalman)

Kernel
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination
Description: A type confusion issue was addressed with improved memory
handling.
CVE-2026-112606: Wang Yu

Kernel
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: The issue was addressed with improved memory handling.
CVE-2026-112532: Peter Malone

Kernel
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: A use after free issue was addressed with improved memory
management.
CVE-2026-112517: Pasquale Scola, Cem Onat Karagun, Wout van der Ploeg
(woutvanderploeg.nl), John Lussier, an anonymous researcher

Kernel
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination
Description: A use-after-free issue was addressed with improved memory
management.
CVE-2026-112516: an anonymous researcher, greenbynox

Kernel
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination
Description: The issue was addressed with improved memory handling.
CVE-2026-112698: OpenAI, Billy Jheng Bing Jhong and Pan Zhenpeng
(@Peterpan0927) of STAR Labs SG Pte. Ltd.

Kernel
Available for: macOS Sequoia
Impact: An attacker may be able to cause unexpected system termination
or corrupt kernel memory
Description: A use-after-free issue was addressed with improved memory
management.
CVE-2026-112514: Marc Newlin of SkySafe, Billy Jheng Bing Jhong and Pan
Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., greenbynox

Kernel
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
write kernel memory
Description: A use-after-free issue was addressed with improved memory
management.
CVE-2026-84495: Wang Yu

Kernel
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: A use-after-free issue was addressed with improved memory
management.
CVE-2026-65350: Xinru Chi of Pangu Lab, Nebula Security (@nebusecurity),
Tim Michaud (@TimGMichaud) of Aginor.ai

Kernel
Available for: macOS Sequoia
Impact: A malicious app may be able to break out of its sandbox
Description: A race condition was addressed with additional validation.
CVE-2026-112543: f0r of MurphySec

Kernel
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112476: Arnold Cartagena, Matt Suiche (@msuiche) of Tolmo

Kernel
Available for: macOS Sequoia
Impact: An unprivileged attacker may be able to execute arbitrary code
as root
Description: A logic issue was addressed with improved state management.
CVE-2026-112438: Jakob Pammer

Kernel
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination
Description: A race condition was addressed with improved state
handling.
CVE-2026-112501: Cem Onat Karagun

Kernel
Available for: macOS Sequoia
Impact: An app may be able to bypass Privacy preferences
Description: This issue was addressed with improved checks.
CVE-2026-112624: Jerry L. Knot

libarchive
Available for: macOS Sequoia
Impact: Processing a maliciously crafted file may lead to unexpected app
termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112522: Eliya M., Viacheslav Radiukov, Tristan Madani (Talence
Security), Robert Tran

libcryptex
Available for: macOS Sequoia
Impact: A malicious app may be able to create files in protected
directories
Description: This issue was addressed with improved checks.
CVE-2026-86945: an anonymous researcher, Andrey Chernykh

libxpc
Available for: macOS Sequoia
Impact: An app may be able to break out of its sandbox
Description: This issue was addressed with improved permissions
checking.
CVE-2026-112497: Claudio Bozzato and Francesco Benvenuto of Cisco Talos

Mail
Available for: macOS Sequoia
Impact: A remote attacker may be able to cause a denial-of-service
Description: A resource exhaustion issue was addressed with improved
input validation.
CVE-2026-112671: Nathaniel Oh (@calysteon)

Mail
Available for: macOS Sequoia
Impact: Processing a maliciously crafted message may lead to a
denial-of-service
Description: A stack overflow was addressed with improved input
validation.
CVE-2026-112414: Daniel Rodríguez, Nathaniel Oh (@calysteon)

MediaAnalysis
Available for: macOS Sequoia
Impact: An app may be able to access sensitive user data
Description: A race condition was addressed with additional validation.
CVE-2026-113915: Abodi Dawoud, Rodolphe BRUNETTI (@eisw0lf) of Lupus
Nova, Ilya Andr (andrd3v) of Positive Technologies, Zhongquan Li
(@Guluisacat)

Metal
Available for: macOS Sequoia
Impact: An app may be able to read files outside of its sandbox
Description: An access issue was addressed with improved access
restrictions.
CVE-2026-84542: Mustafa Ahmed, an anonymous researcher

Model I/O
Available for: macOS Sequoia
Impact: Processing a maliciously crafted 3D model may lead to memory
corruption
Description: An integer overflow was addressed with improved input
validation.
CVE-2026-112565: Musaab Khan (@bxff), Hcamael and 章鱼哥@aipy
(aipyaipy.com), Saoud Khalifah, stratan (@5tratan), Niels Hofmans
CVE-2026-112449: ret2happy (@ret2happy)

Model I/O
Available for: macOS Sequoia
Impact: Processing a maliciously crafted file may lead to unexpected app
termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112563: stratan (@5tratan)
CVE-2026-112553: stratan (@5tratan)

Model I/O
Available for: macOS Sequoia
Impact: Processing a maliciously crafted file may lead to unexpected app
termination
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112413: Nathaniel Oh (@calysteon)

Model I/O
Available for: macOS Sequoia
Impact: Processing a maliciously crafted 3D model may lead to memory
corruption
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112461: 진규정 (Gyujeong Jin, @G1uN4sh), Lucas Parnell, Nathaniel
Oh (@calysteon), Meta Red Team X - Nik Tsytsarkin, YingMuo (@YingMuo) of
DEVCORE Research Team, ret2happy (@ret2happy)

Model I/O
Available for: macOS Sequoia
Impact: Processing a maliciously crafted 3D model may lead to memory
corruption
Description: The issue was addressed with improved memory handling.
CVE-2026-112485: Nik Tsytsarkin

Model I/O
Available for: macOS Sequoia
Impact: Processing a 3D model may lead to unexpected app termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112486: Md Rasel Bhuyan (www.linkedin.com/in/rasel-bhuyan),
Musaab Khan (@bxff)

ncurses
Available for: macOS Sequoia
Impact: An app may be able to cause a denial-of-service
Description: A type confusion issue was addressed with improved memory
handling.
CVE-2026-112550: Jonathan Bar Or (@yo_yo_yo_jbo)

OpenBSM
Available for: macOS Sequoia
Impact: Processing a maliciously crafted audit file may corrupt process
memory
Description: A stack buffer overflow was addressed through improved
input validation.
CVE-2026-84604: Tristan Madani (Talence Security)

PackageKit
Available for: macOS Sequoia
Impact: An app may be able to modify protected parts of the file system
Description: A race condition was addressed with improved handling of
symbolic links.
CVE-2026-112421: Csaba Fitzl (@theevilbit) of Iru and Gergely Kalman
(@gergely_kalman)

PackageKit
Available for: macOS Sequoia
Impact: An app may be able to modify protected parts of the file system
Description: A race condition was addressed with additional validation.
CVE-2026-112442: Mickey Jin (@patch1t)

Photos Storage
Available for: macOS Sequoia
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state
management.
CVE-2026-65397: Varik Matevosyan (@D4RK7ET), an anonymous researcher

Photos Storage
Available for: macOS Sequoia
Impact: An app may be able to bypass certain Privacy preferences
Description: An authorization issue was addressed with improved state
management.
CVE-2026-112660: Prafull Dhiman, Alto_00000

Photos Storage
Available for: macOS Sequoia
Impact: An app may be able to access a user's Photos Library
Description: This issue was addressed with additional entitlement
checks.
CVE-2026-112676: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova

ppp
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination
Description: The issue was addressed with improved checks.
CVE-2026-113899: Siddharth Aeri

ppp
Available for: macOS Sequoia
Impact: A malicious app may be able to intercept network traffic
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-112542: Gabriel '0xv1n' Cardona, Mrunal Chawda, Kujtim Kryeziu
(Sentry), Tristan Madani (Talence Security)

Printing
Available for: macOS Sequoia
Impact: A malicious app may be able to break out of its sandbox
Description: A parsing issue in the handling of directory paths was
addressed with improved path validation.
CVE-2026-112562: 도현 김, Ithrael, YEONGJAE SHIN, an anonymous researcher

quarantine
Available for: macOS Sequoia
Impact: A malicious application may bypass Gatekeeper checks
Description: This issue was addressed with improved validation of file
attributes.
CVE-2026-64789: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs
(nosebeard.co), an anonymous researcher

quarantine
Available for: macOS Sequoia
Impact: An app may be able to break out of its sandbox
Description: An access issue was addressed with additional sandbox
restrictions.
CVE-2026-112569: Csaba Fitzl (@theevilbit) of Iru, an anonymous
researcher
CVE-2026-112498: an anonymous researcher

RealityKit
Available for: macOS Sequoia
Impact: Processing a maliciously crafted file may lead to unexpected app
termination
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112491: Hongsik Kim (mnur)

Remote Management
Available for: macOS Sequoia
Impact: An attacker on the local network may be able to cause unexpected
system termination or corrupt process memory
Description: A double free issue was addressed with improved memory
management.
CVE-2026-112457: Efstratios Kaplanellis (@5tratan) of Almamater
Technologies, Nathaniel Oh (@calysteon)

Remote Management
Available for: macOS Sequoia
Impact: A user with screen sharing access may be able to view another
user's screen
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-112480: Andrey Chernykh, ruitong (@abstract)

RemoteManagement
Available for: macOS Sequoia
Impact: An application may be able to execute arbitrary code with system
privileges
Description: An authorization issue was addressed with improved access
control.
CVE-2026-112677: an anonymous researcher, Niels Hofmans, 도현 김, Junyeong
Lee (jylab.github.io), Andreas Jaegersberger & Ro Achterberg of
Nosebeard Labs, Jonghoon Han (Aegis)

Sandbox
Available for: macOS Sequoia
Impact: An app with root privileges may be able to access private
information
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-65392: Ahmad Al Harrizuan Izadin, Prathamesh Walunj, Csaba
Fitzl (@theevilbit) of Iru

SceneKit
Available for: macOS Sequoia
Impact: Processing a 3D model may result in disclosure of process memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112425: stratan (@5tratan)

SceneKit
Available for: macOS Sequoia
Impact: Processing a maliciously crafted file may lead to a
denial-of-service or potentially disclose memory contents
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112423: Rahul Raj

SceneKit
Available for: macOS Sequoia
Impact: Processing a maliciously crafted file may lead to unexpected app
termination
Description: An integer overflow was addressed with improved input
validation.
CVE-2026-112540: f4&Zhiniang Peng with HUST, Geonha Lee (@leegn4a), Kwak
Kiyong (@Pwnkai23), Song Nuri, Wout van der Ploeg (woutvanderploeg.nl),
Substrate, Piotr Jerzy Duszynski, Tristan Madani (Talence Security),
Arni Hardarson (Neonix Security), an anonymous researcher

SceneKit
Available for: macOS Sequoia
Impact: Processing a maliciously crafted file may lead to heap
corruption
Description: An out-of-bounds write issue was addressed with improved
input validation.
CVE-2026-112464: 정우 하 (@0xfa11babe), Narendra Singh (@_3P1C)

SceneKit
Available for: macOS Sequoia
Impact: Processing a maliciously crafted file may lead to unexpected
process termination
Description: A buffer overflow was addressed with improved bounds
checking.
CVE-2026-86991: Cem Onat Karagun, Yujung Choi (@Dusker), Mathis
Mansière, Rahul Raj

Screen Sharing
Available for: macOS Sequoia
Impact: Connecting to a malicious VNC server may cause a
denial-of-service
Description: An integer overflow was addressed with improved input
validation.
CVE-2026-112519: Piotr Jerzy Duszynski, Nathaniel Oh (@calysteon)

Screen Sharing Server
Available for: macOS Sequoia
Impact: A malicious app may be able to gain root privileges
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-65373: Stefan Esser (Calif), Alfredo Pesoli (@__rev) via
Bynario Atlas (bynar.io), Anon Tuttu Venus, Nathaniel Oh (@calysteon)

Screen Sharing Server
Available for: macOS Sequoia
Impact: An attacker with the legacy VNC password for Screen Sharing may
be able to copy files to the Mac
Description: An authorization issue was addressed with improved state
management.
CVE-2026-112473: Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)

Screen Sharing Server
Available for: macOS Sequoia
Impact: An attacker on the local network may be able to corrupt process
memory
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112482: Nathaniel Oh (@calysteon)

Screen Sharing Server
Available for: macOS Sequoia
Impact: A malicious Screen Sharing peer may be able to create arbitrary
symlinks as root
Description: A path handling issue was addressed with improved logic.
CVE-2026-112511: Nathaniel Oh (@calysteon)

Screen Sharing Server
Available for: macOS Sequoia
Impact: A malicious application may be able to execute arbitrary code
with system privileges
Description: This issue was addressed with improved file handling.
CVE-2026-112484: Mahmoud Abdelmoniem

Screen Sharing Server
Available for: macOS Sequoia
Impact: A remote attacker may be able to cause unexpected app
termination or heap corruption
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-84590: Nathaniel Oh (@calysteon), Narendra Singh (@_3P1C),
koocolb, Tristan Madani (Talence Security)

Screen Sharing Server
Available for: macOS Sequoia
Impact: An attacker on the local network may be able to cause unexpected
process termination or disclose process memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112481: Nathaniel Oh (@calysteon)

Security
Available for: macOS Sequoia
Impact: Processing web content may disclose sensitive information
Description: An input validation issue was addressed with improved input
validation.
CVE-2026-113913: Niels Hofmans, Stav Nir and Vladimir Tokarev

Security
Available for: macOS Sequoia
Impact: An app may be able to break out of its sandbox
Description: The issue was addressed with improved checks.
CVE-2026-65363: Arni Hardarson (Neonix Security), Csaba Fitzl
(@theevilbit) of Iru and Gergely Kalman (@gergely_kalman)

Security
Available for: macOS Sequoia
Impact: An app may be able to access sensitive user data
Description: A privacy issue was addressed with improved memory
management.
CVE-2026-86931: Pranav Gopalkrishnan, Alan Wang, Ailsa Sun, Hovav
Shacham, Riccardo Paccagnella, Chris Fletcher, David Kohlbrenner

Security
Available for: macOS Sequoia
Impact: A sandboxed process may be able to circumvent sandbox
restrictions
Description: A buffer overflow was addressed with improved bounds
checking.
CVE-2026-112521: Richard Hyunho Im (@richeeta) at Route Zero Security,
Efstratios Kaplanellis (@5tratan) of Almamater Technologies

Security
Available for: macOS Sequoia
Impact: A local attacker may gain access to user's Keychain items
Description: This issue was addressed with improved permissions
checking.
CVE-2026-28864: Alex Radocea

Security
Available for: macOS Sequoia
Impact: An app may be able to gain root privileges
Description: A logic issue was addressed with improved checks.
CVE-2026-112668: cnitlrt (@abstract), Roman Belovitskiy, Lyutoon, Art
Pllana, Redon Gashi of Sentry, ruitong (@abstract), Franco Belman at
Blackwing Intelligence, Surej Sekhar, Sihyun Roh (Compsec, SNU),
lokerxx, Teodor Sorescu (@teodorsorescu), Eddy Tsalolikhin, Phillip
Groves
CVE-2026-86936: cnitlrt (@abstract), lokerxx
CVE-2026-112437: lokerxx
CVE-2026-112434: ruitong (@abstract), lokerxx

Security
Available for: macOS Sequoia
Impact: An malicious app may be able to bypass certificate validation
Description: A logic issue was addressed with improved state management.
CVE-2026-112652: Aditya Kumar

Security
Available for: macOS Sequoia
Impact: An app may be able to gain root privileges
Description: An authentication issue was addressed with improved
validation of user attributes.
CVE-2026-112430: ruitong (@abstract)

SecurityAgent
Available for: macOS Sequoia
Impact: An app may be able to gain root privileges
Description: A downgrade issue was addressed with additional version
checks.
CVE-2026-112493: Mickey Jin (@patch1t)

Shortcuts
Available for: macOS Sequoia
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state
management.
CVE-2026-112559: Lucas Lammer, Stuart Wallace
CVE-2026-112455: Rahul Raj, Chris Bailey - Short Circuit

Shortcuts
Available for: macOS Sequoia
Impact: An app may be able to cause a denial-of-service
Description: An integer overflow was addressed with improved input
validation.
CVE-2026-112601: 진규정 (Gyujeong Jin, @G1uN4sh)

Siri
Available for: macOS Sequoia
Impact: An app may be able to access information about a user's contacts
Description: A file access issue existed with certain home folder files.
This was addressed with improved access restrictions.
CVE-2026-86984: Albin Haliti

Siri
Available for: macOS Sequoia
Impact: An app may be able to access sensitive user data
Description: An information disclosure issue was addressed with improved
privacy controls.
CVE-2026-86923: Sindre Sorhus, Asaf Cohen

Siri
Available for: macOS Sequoia
Impact: A malicious app may be able to access notifications from other
iCloud devices
Description: A privacy issue was addressed by moving sensitive data to a
protected location.
CVE-2026-20648: Morris Richman (@morrisinlife)

SMB
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: A use-after-free issue was addressed with improved memory
management.
CVE-2026-86946: Jakob Pammer

SMB
Available for: macOS Sequoia
Impact: An attacker with control of a network file server may be able to
cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112552: Bhuwan Bhetwal, Feng Xue and XGPT of ThreatBook,
Claudio Bozzato and Francesco Benvenuto of Cisco Talos

smbx
Available for: macOS Sequoia
Impact: A remote attacker may be able to cause unexpected app
termination
Description: A buffer overflow was addressed with improved bounds
checking.
CVE-2026-112526: Nathaniel Oh (@calysteon), Narendra Singh (@_3P1C),
Tristan Madani (@TristanInSec) from Talence Security, an anonymous
researcher

smbx
Available for: macOS Sequoia
Impact: A remote attacker may be able to cause a denial-of-service or
disclose process memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112451: Nathaniel Oh (@calysteon)

smbx
Available for: macOS Sequoia
Impact: A remote attacker may be able to cause a denial-of-service
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112510: Efstratios Kaplanellis (@5tratan) of Almamater
Technologies, Andrey Chernykh

smbx
Available for: macOS Sequoia
Impact: A malicious Screen Sharing peer may be able to corrupt process
memory
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112505: an anonymous researcher, Narendra Singh (@_3P1C),
Andrey Chernykh

SoftRAID
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
read kernel memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112495: Lyutoon

Spotlight
Available for: macOS Sequoia
Impact: A malicious application may be able to bypass Privacy
preferences
Description: This issue was addressed with improved checks.
CVE-2026-112567: zenith

Spotlight
Available for: macOS Sequoia
Impact: An app may be able to access sensitive user data
Description: A permissions issue was addressed with additional sandbox
restrictions.
CVE-2026-112558: D4rthL

Spotlight
Available for: macOS Sequoia
Impact: A malicious application may be able to bypass Privacy
preferences
Description: The issue was addressed with improved checks.
CVE-2026-112557: D4rthL

Spotlight
Available for: macOS Sequoia
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with improved data access
restriction.
CVE-2026-112628: Santiago Albertengo, Chris Bailey - Short Circuit

Spotlight
Available for: macOS Sequoia
Impact: An app may be able to access sensitive user data
Description: This issue was addressed by removing the vulnerable code.
CVE-2026-112441: Pan ZhenPeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Storage
Available for: macOS Sequoia
Impact: An app may be able to gain root privileges
Description: A path handling issue was addressed with improved
validation.
CVE-2026-112487: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab,
Junyeong Lee (jylab.github.io), Gergely Kalman (@gergely_kalman),
Lyutoon, Jaeyeong Lee, Andreas Jaegersberger & Ro Achterberg of
Nosebeard Labs

StorageKit
Available for: macOS Sequoia
Impact: An app may be able to gain root privileges
Description: A parsing issue in the handling of directory paths was
addressed with improved path validation.
CVE-2026-112541: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs
(nosebeard.co), Maher Azzouzi, Sindre Sorhus, Paul Montgomery
(@nullevent), Mickey Jin (@patch1t), Frederick Kaludis (Coiffeur0x90)

StorageKit
Available for: macOS Sequoia
Impact: An app may be able to modify protected parts of the file system
Description: A race condition was addressed with improved handling of
symbolic links.
CVE-2026-112535: Sindre Sorhus

StorageKit
Available for: macOS Sequoia
Impact: An app may be able to modify protected parts of the file system
Description: A parsing issue in the handling of directory paths was
addressed with improved path validation.
CVE-2026-112504: Mickey Jin (@patch1t)

StorageKit
Available for: macOS Sequoia
Impact: An app may be able to gain root privileges
Description: A race condition was addressed with additional validation.
CVE-2026-112492: Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)

StorageKit
Available for: macOS Sequoia
Impact: An app may be able to gain root privileges
Description: A use after free issue was addressed with improved memory
management.
CVE-2026-112548: Surej Sekhar

System Settings
Available for: macOS Sequoia
Impact: An attacker may tamper with code-signed applications to execute
arbitrary code in the application's context
Description: A race condition was addressed with additional validation.
CVE-2026-112556: Paul Montgomery (@nullevent), Mickey Jin (@patch1t)

System Settings
Available for: macOS Sequoia
Impact: An app may be able to break out of its sandbox
Description: A path handling issue was addressed with improved
validation.
CVE-2026-112453: Sindre Sorhus

System Settings
Available for: macOS Sequoia
Impact: An app may be able to bypass Gatekeeper checks
Description: A path handling issue was addressed with improved
validation.
CVE-2026-112512: Mufeed VH of Winfunc Research (winfunc.com), YingQi Shi
(@Mas0nShi) of DBAppSecurity's WeBin lab, Mathis Mansière

Time Machine
Available for: macOS Sequoia
Impact: An app may be able to bypass Privacy preferences
Description: An authorization issue was addressed with improved state
management.
CVE-2026-112447: 云开 江, Joshua Maina, Ithrael, Mahmoud Gamal
(@Zombiehelp54)

udf
Available for: macOS Sequoia
Impact: An app may be able to disclose kernel memory
Description: The issue was addressed with improved memory handling.
CVE-2026-84498: Nathaniel Oh (@calysteon)

udf
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112529: Nathaniel Oh (@calysteon)

udf
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: A use-after-free issue was addressed with improved memory
management.
CVE-2026-112524: Thanatos Tian (HKPolyU) & wgg & 2st with Diffract,
Peter Malone, Tim Michaud (@TimGMichaud) of Aginor.ai

udf
Available for: macOS Sequoia
Impact: An app may be able to cause unexpected system termination or
read kernel memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112508: Aditya Kumar, Aswin Kumar Gokula Kannan, David
Krehwinkel

USB
Available for: macOS Sequoia
Impact: A malicious USB device may be able to cause unexpected system
termination or read kernel memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112479: Rotce, Sandeep Wawdane (thecybersandeep), Marc Newlin
of SkySafe, Ankur Saini of Volexity, Kwak Kiyong (@Pwnkai23), Song nuri

Wi-Fi
Available for: macOS Sequoia
Impact: An app may be able to read sensitive location information
Description: This issue was addressed with improved data protection.
CVE-2026-112537: Sindre Sorhus

WindowServer
Available for: macOS Sequoia
Impact: An app may be able to monitor keystrokes without user permission
Description: The issue was addressed with improved handling of secure
input state.
CVE-2026-112575: Ricardo Prado

zsh
Available for: macOS Sequoia
Impact: A malicious app may be able to break out of its sandbox
Description: A validation issue was addressed with improved input
sanitization.
CVE-2026-112555: Phillip Groves

Additional recognition

AppleRAID
We would like to acknowledge Ashish Kunwar for their assistance.

AVEVideoEncoder
We would like to acknowledge Josh Maine of Calif.io for their
assistance.

Bluetooth
We would like to acknowledge John De Armas, an anonymous researcher for
their assistance.

configd
We would like to acknowledge 九宫格 of Chongqing Telecom for their
assistance.

Core Location
We would like to acknowledge 糖豆爸爸(@晴天组织), 이재영 for their assistance.

CoreAudio
We would like to acknowledge Meta Product Security for their assistance.

CoreCrypto
We would like to acknowledge Niels Hofmans for their assistance.

curl
We would like to acknowledge Muhamad Syaiful for their assistance.

ppp
We would like to acknowledge Siddharth Aeri for their assistance.

Screen Sharing
We would like to acknowledge Nathaniel Oh (@calysteon) for their
assistance.

SMB
We would like to acknowledge Feng Xue and XGPT of ThreatBook for their
assistance.

xar
We would like to acknowledge Meridian Miftari for their assistance.

zip
We would like to acknowledge Feng Xue and XGPT of ThreatBook for their
assistance.

macOS Sequoia 15.8.2 may be obtained from the Mac App Store or
Apple's Software Downloads web site:
https://support.apple.com/downloads/

All information is also posted on the Apple Security Releases
web site: https://support.apple.com/100100.

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----
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=e8ff
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/