Raw JSON
{
"containers": {
"cna": {
"affected": [
{
"product": "Macos Sequoia",
"vendor": "Apple",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Apple Product Security via Fulldisclosure"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-02-11-2026-4 macOS Sequoia 15.7.4\n\nmacOS Sequoia 15.7.4 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/126349.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAppleMobileFileIntegrity\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: An injection issue was addressed with improved validation.\nCVE-2026-20624: Mickey Jin (@patch1t)\n\nAppleMobileFileIntegrity\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-20625: Mickey Jin (@patch1t), Ryan Dowd (@_rdowd)\n\nCompression\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2025-43403: Mickey Jin (@patch1t)\n\nCoreAudio\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted media file may lead to\nunexpected app termination or corrupt process memory\nDescription: An out-of-bounds access issue was addressed with improved\nbounds checking.\nCVE-2026-20611: Anonymous working with Trend Micro Zero Day Initiative\n\nCoreMedia\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted file may lead to a denial-of-\nservice or potentially disclose memory contents\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-20609: Yiğit Can YILMAZ (@yilmazcanyigit)\n\nGPU Drivers\nAvailable for: macOS Sequoia\nImpact: An attacker may be able to cause unexpected system termination\nor read kernel memory\nDescription: An out-of-bounds read issue was addressed with improved\ninput validation.\nCVE-2026-20620: Murray Mike\n\nImageIO\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted image may result in disclosure\nof process memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-20634: George Karchemsky (@gkarchemsky) working with Trend\nMicro Zero Day Initiative\n\nImageIO\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted image may lead to disclosure of\nuser information\nDescription: The issue was addressed with improved bounds checks.\nCVE-2026-20675: George Karchemsky (@gkarchemsky) working with Trend\nMicro Zero Day Initiative\n\nKernel\nAvailable for: macOS Sequoia\nImpact: An attacker in a privileged network position may be able to\nintercept network traffic\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-20671: Xin'an Zhou, Juefei Pu, Zhutian Liu, Zhiyun Qian,\nZhaowei Tan, Srikanth V. Krishnamurthy, Mathy Vanhoef\n\nKernel\nAvailable for: macOS Sequoia\nImpact: A malicious app may be able to gain root privileges\nDescription: This issue was addressed with improved checks.\nCVE-2026-20626: Keisuke Hosoda\n\nlibexpat\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted file may lead to a denial-of-\nservice\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-59375\n\nlibnetcore\nAvailable for: macOS Sequoia\nImpact: An attacker in a privileged network position may be able to\nintercept network traffic\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-20671: Xin'an Zhou, Juefei Pu, Zhutian Liu, Zhiyun Qian,\nZhaowei Tan, Srikanth V. Krishnamurthy, Mathy Vanhoef\n\nlibxpc\nAvailable for: macOS Sequoia\nImpact: An app may be able to break out of its sandbox\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-20667: an anonymous researcher\n\nMail\nAvailable for: macOS Sequoia\nImpact: Turning off \"Load remote content in messages” may not apply to\nall mail previews\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-20673: an anonymous researcher\n\nMulti-Touch\nAvailable for: macOS Sequoia\nImpact: A malicious HID device may cause an unexpected process crash\nDescription: The issue was addressed with improved bounds checks.\nCVE-2025-43533: Google Threat Analysis Group\nCVE-2025-46300: Google Threat Analysis Group\nCVE-2025-46301: Google Threat Analysis Group\nCVE-2025-46302: Google Threat Analysis Group\nCVE-2025-46303: Google Threat Analysis Group\nCVE-2025-46304: Google Threat Analysis Group\nCVE-2025-46305: Google Threat Analysis Group\n\nPackageKit\nAvailable for: macOS Sequoia\nImpact: An attacker with root privileges may be able to delete protected\nsystem files\nDescription: This issue was addressed through improved state management.\nCVE-2025-46310: Mickey Jin (@patch1t)\n\nRemote Management\nAvailable for: macOS Sequoia\nImpact: An app may be able to gain root privileges\nDescription: A path handling issue was addressed with improved\nvalidation.\nCVE-2026-20614: Gergely Kalman (@gergely_kalman)\n\nSandbox\nAvailable for: macOS Sequoia\nImpact: An app may be able to break out of its sandbox\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-20628: Noah Gregory (wts.dev)\n\nSecurity\nAvailable for: macOS Sequoia\nImpact: A remote attacker may be able to cause a denial-of-service\nDescription: A logic issue was addressed with improved checks.\nCVE-2025-46290: Bing Shi, Wenchao Li and Xiaolong Bai of Alibaba Group,\nand Luyi Xing of Indiana University Bloomington\n\nShortcuts\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-20653: Enis Maholli (enismaholli.com)\n\nSiri\nAvailable for: macOS Sequoia\nImpact: An attacker with physical access to a locked device may be able\nto view sensitive user information\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-20662: Vivek Dhar, ASI (RM) in Border Security Force, FTR HQ\nBSF Kashmir\n\nSpotlight\nAvailable for: macOS Sequoia\nImpact: A sandboxed app may be able to access sensitive user data\nDescription: The issue was addressed with additional restrictions on the\nobservability of app states.\nCVE-2026-20680: an anonymous researcher\n\nSpotlight\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: A privacy issue was addressed with improved checks.\nCVE-2026-20612: Mickey Jin (@patch1t)\n\nStoreKit\nAvailable for: macOS Sequoia\nImpact: An app may be able to identify what other apps a user has\ninstalled\nDescription: A privacy issue was addressed with improved checks.\nCVE-2026-20641: Gongyu Ma (@Mezone0)\n\nSystem Settings\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-20619: Asaf Cohen\n\nUIKit\nAvailable for: macOS Sequoia\nImpact: An app may be able to bypass certain Privacy preferences\nDescription: This issue was addressed by removing the vulnerable code.\nCVE-2026-20606: LeminLimez\n\nVoice Control\nAvailable for: macOS Sequoia\nImpact: An app may be able to crash a system process\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-20605: @cloudlldb of @pixiepointsec\n\nWi-Fi\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-20621: Wang Yu of Cyberserval\n\nWindowServer\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2025-43402: @cloudlldb of @pixiepointsec\n\nWindowServer\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause a denial-of-service\nDescription: The issue was addressed with improved handling of caches.\nCVE-2026-20602: @cloudlldb of @pixiepointsec\n\nAdditional recognition\n\nCoreServices\nWe would like to acknowledge YingQi Shi (@Mas0nShi) of DBAppSecurity's\nWeBin lab for their assistance.\n\nKernel\nWe would like to acknowledge Xinru Chi of Pangu Lab for their\nassistance.\n\nlibpthread\nWe would like to acknowledge Fabiano Anemone for their assistance.\n\nWindowServer\nWe would like to acknowledge @cloudlldb of @pixiepointsec for their\nassistance.\n\nmacOS Sequoia 15.7.4 may be obtained from the Mac App Store or\nApple's Software Downloads web site:\nhttps://support.apple.com/downloads/\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple's Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n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\nGAPbYNZjzBzz369fe5UQj90iP0+Pk5TQ6AtA5Nq9Q1F/3nXVbzk=\n=ryLH\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives & RSS: https://seclists.org/fulldisclosure/"
}
],
"providerMetadata": {
"dateUpdated": "2026-09-11T11:11:34Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Feb/24"
},
{
"tags": [
"technical-description"
],
"url": "https://seclists.org/fulldisclosure/2026/Feb/24"
},
{
"url": "https://nmap.org/mailman/listinfo/fulldisclosure"
},
{
"url": "https://seclists.org/fulldisclosure/"
},
{
"url": "https://support.apple.com/100100"
},
{
"url": "https://support.apple.com/126349"
},
{
"url": "https://support.apple.com/downloads/"
},
{
"url": "https://www.apple.com/support/security/pgp/"
}
],
"source": {
"defect": [
"https://seclists.org/fulldisclosure/2026/Feb/24"
],
"discovery": "EXTERNAL"
},
"title": "APPLE-SA-02-11-2026-4 macOS Sequoia 15.7.4",
"x_gcve": [
{
"recordType": "reference",
"relationships": [
{
"destId": "CVE-2025-43402",
"type": "related"
},
{
"destId": "CVE-2025-43403",
"type": "related"
},
{
"destId": "CVE-2025-43533",
"type": "related"
},
{
"destId": "CVE-2025-46290",
"type": "related"
},
{
"destId": "CVE-2025-46300",
"type": "related"
},
{
"destId": "CVE-2025-46301",
"type": "related"
},
{
"destId": "CVE-2025-46302",
"type": "related"
},
{
"destId": "CVE-2025-46303",
"type": "related"
},
{
"destId": "CVE-2025-46304",
"type": "related"
},
{
"destId": "CVE-2025-46305",
"type": "related"
},
{
"destId": "CVE-2025-46310",
"type": "related"
},
{
"destId": "CVE-2025-59375",
"type": "related"
},
{
"destId": "CVE-2026-20602",
"type": "related"
},
{
"destId": "CVE-2026-20605",
"type": "related"
},
{
"destId": "CVE-2026-20606",
"type": "related"
},
{
"destId": "CVE-2026-20609",
"type": "related"
},
{
"destId": "CVE-2026-20611",
"type": "related"
},
{
"destId": "CVE-2026-20612",
"type": "related"
},
{
"destId": "CVE-2026-20614",
"type": "related"
},
{
"destId": "CVE-2026-20619",
"type": "related"
},
{
"destId": "CVE-2026-20620",
"type": "related"
},
{
"destId": "CVE-2026-20621",
"type": "related"
},
{
"destId": "CVE-2026-20624",
"type": "related"
},
{
"destId": "CVE-2026-20625",
"type": "related"
},
{
"destId": "CVE-2026-20626",
"type": "related"
},
{
"destId": "CVE-2026-20628",
"type": "related"
},
{
"destId": "CVE-2026-20634",
"type": "related"
},
{
"destId": "CVE-2026-20641",
"type": "related"
},
{
"destId": "CVE-2026-20653",
"type": "related"
},
{
"destId": "CVE-2026-20662",
"type": "related"
},
{
"destId": "CVE-2026-20667",
"type": "related"
},
{
"destId": "CVE-2026-20671",
"type": "related"
},
{
"destId": "CVE-2026-20673",
"type": "related"
},
{
"destId": "CVE-2026-20675",
"type": "related"
},
{
"destId": "CVE-2026-20680",
"type": "related"
}
],
"vulnId": "GCVE-1988-2026-0219",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Feb/24",
"automated": true,
"contentSha256": "e39e0593bbee6ea517f6f450206b44987ff897ace3c3fd6c4b65cc7eb814589a",
"evidenceScore": 7,
"messageId": "",
"originalUrl": "https://seclists.org/fulldisclosure/2026/Feb/24",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-02-12T00:04:13Z"
}
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-09-08T07:57:42Z",
"dateUpdated": "2026-09-11T11:11:34Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0219"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}