APPLE-SA-09-28-2026-3 macOS Sequoia 15.8.1
Apple Product Security via Fulldisclosure ·
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-09-28-2026-3 macOS Sequoia 15.8.1 macOS Sequoia 15.8.1 addresses the following issues. Information about the security content is also available at https://support.apple.com/149229. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. CoreGraphics Available for: macOS Sequoia Impact: Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27. Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-86950: Meta Product Security macOS Sequoia 15.8.1 may be obtained from the Mac App Store or Apple's Software Downloads web site: https://support.apple.com/downloads/ All information is also posted on the Apple Security Releases web site: https://support.apple.com/100100. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhjkl+zMLNwFiCT1o4Ifiq8DH7PUFAmq62u0ACgkQ4Ifiq8DH 7PX9EA//e/Qc6ZrztZtDMNq4xfGbKbIgzNz09jLjIcp0nLU//UWcW3JejP71nu8W IFV9hR77huzaia1Er7nIyt0UGEWLZqHECVhFJNhD4cN+A5tiYSnUk7XWnFWAZz+S sWOrddC3A5rb6IsoiHCuZ1fZOI9nNPda3xw/KGZ56FWSy+hsoFC0c1yMSj3gZ7jC tT1y1qF5UU4B0VbbZKG9w3z3J2smYmgtHzoOp/lRUrbQQ90tuPKEaVJWiqkLBR2P OUfKoSRXLPQ/GjRpo1AwEEZeS0r4MVkCm8uedhF3mdTkpH2sgYWQtM74FEKe6N1a /48B8Tn/CpgdhIWNP6VEpJC4p0RG2X2Gt2mvuedDwqR3EId3HGiSUTIaPI++xRWL f0rBFVJeLHZLJQphzEwFHXk6xK7XE8g+xQuImTchwY2JQjWpFY85yTMD/vZt16k7 MYyEsoGC9Cg5nIvlFfrPRSJM0aShEPmX6s1T1zx1UQ5AASbSiW6BtX7CIeXVPwCW Gla6vrseGwk6UoxOjqtEHiXaSkpSMb70du5DJBftkWHTPIIEF3XNOggcZfLPqxKw aRYdNDHPFmOALhviZpcuNMyN1ALIOfw07sD2XawXD+JE8BPYqzvDJXU2WOYSjc1C 2iNeM38fbJbpvHpE+KcxaJ2lC2BqKRIDyrZcF6ZGeVO7v3sLuIE= =uNAH -----END PGP SIGNATURE----- _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/