Raw JSON
{
"containers": {
"cna": {
"affected": [
{
"product": "Macos Sequoia",
"vendor": "Apple",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Apple Product Security via Fulldisclosure"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-03-24-2026-4 macOS Sequoia 15.7.5\n\nmacOS Sequoia 15.7.5 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/126795.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\n802.1X\nAvailable for: macOS Sequoia\nImpact: An attacker in a privileged network position may be able to\nintercept network traffic\nDescription: An authentication issue was addressed with improved state\nmanagement.\nCVE-2026-28865: Héloïse Gollier and Mathy Vanhoef (KU Leuven)\n\nAccounts\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-28877: Rosyna Keller of Totally Not Malicious Software\n\napache\nAvailable for: macOS Sequoia\nImpact: Multiple issues in Apache\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-55753\nCVE-2025-58098\nCVE-2025-59775\nCVE-2025-65082\nCVE-2025-66200\n\nAppleKeyStore\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-20637: Johnny Franks (zeroxjf), an anonymous researcher\n\nAppleMobileFileIntegrity\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-28824: Mickey Jin (@patch1t)\n\nAppleMobileFileIntegrity\nAvailable for: macOS Sequoia\nImpact: An app may be able to access user-sensitive data\nDescription: A downgrade issue affecting Intel-based Mac computers was\naddressed with additional code-signing restrictions.\nCVE-2026-20699: Mickey Jin (@patch1t)\n\nAudio\nAvailable for: macOS Sequoia\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process crash\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nCVE-2026-28879: Justin Cohen of Google\n\nAudio\nAvailable for: macOS Sequoia\nImpact: An attacker may be able to cause unexpected app termination\nDescription: A type confusion issue was addressed with improved memory\nhandling.\nCVE-2026-28822: Jex Amro\n\nCalling Framework\nAvailable for: macOS Sequoia\nImpact: A remote attacker may be able to cause a denial-of-service\nDescription: A denial-of-service issue was addressed with improved input\nvalidation.\nCVE-2026-28894: an anonymous researcher\n\nCFNetwork\nAvailable for: macOS Sequoia\nImpact: A remote user may be able to write arbitrary files\nDescription: A path handling issue was addressed with improved logic.\nCVE-2026-20660: Amy (amys.website)\n\nClipboard\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with improved validation of\nsymlinks.\nCVE-2026-28866: Cristian Dinca (icmd.tech)\n\nconfigd\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted string may lead to heap\ncorruption\nDescription: An integer overflow was addressed with improved input\nvalidation.\nCVE-2026-20639: @cloudlldb of @pixiepointsec\n\nCoreMedia\nAvailable for: macOS Sequoia\nImpact: Processing an audio stream in a maliciously crafted media file\nmay terminate the process\nDescription: An out-of-bounds access issue was addressed with improved\nbounds checking.\nCVE-2026-20690: Hossein Lotfi (@hosselot) of Trend Micro Zero Day\nInitiative\n\nCoreServices\nAvailable for: macOS Sequoia\nImpact: An app may be able to gain elevated privileges\nDescription: A validation issue existed in the entitlement verification.\nThis issue was addressed with improved validation of the process\nentitlement.\nCVE-2026-28821: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab\n\nCoreServices\nAvailable for: macOS Sequoia\nImpact: An app may be able to break out of its sandbox\nDescription: A permissions issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-28838: an anonymous researcher\n\nCoreUtils\nAvailable for: macOS Sequoia\nImpact: A user in a privileged network position may be able to cause a\ndenial-of-service\nDescription: A null pointer dereference was addressed with improved\ninput validation.\nCVE-2026-28886: Etienne Charron (Renault) and Victoria Martini (Renault)\n\nCUPS\nAvailable for: macOS Sequoia\nImpact: An app may be able to gain root privileges\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-28888: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\ncurl\nAvailable for: macOS Sequoia\nImpact: An issue existed in curl which may result in unintentionally\nsending sensitive information via an incorrect connection\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-14524\n\nDesktopServices\nAvailable for: macOS Sequoia\nImpact: An app may be able to access user-sensitive data\nDescription: This issue was addressed with improved handling of\nsymlinks.\nCVE-2026-20633: Mickey Jin (@patch1t)\n\nDeviceLink\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-28876: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\nDiagnostics\nAvailable for: macOS Sequoia\nImpact: An app may be able to modify protected parts of the file system\nDescription: A permissions issue was addressed by removing the\nvulnerable code.\nCVE-2026-28892: 风沐云烟 (@binary_fmyy) and Minghao Lin (@Y1nKoc)\n\nFile System\nAvailable for: macOS Sequoia\nImpact: An app may be able to disclose kernel memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-28832: DARKNAVY (@DarkNavyOrg)\n\nFocus\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-20668: Kirin (@Pwnrin)\n\nGPU Drivers\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-28834: an anonymous researcher\n\niCloud\nAvailable for: macOS Sequoia\nImpact: An app may be able to enumerate a user's installed apps\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-28880: Zhongcheng Li from IES Red Team\n\nImageIO\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-64505\n\nKernel\nAvailable for: macOS Sequoia\nImpact: An app may be able to disclose kernel memory\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-28868: 이동하 (Lee Dong Ha of BoB 0xB6)\n\nKernel\nAvailable for: macOS Sequoia\nImpact: An app may be able to leak sensitive kernel state\nDescription: This issue was addressed with improved authentication.\nCVE-2026-28867: Jian Lee (@speedyfriend433)\n\nKernel\nAvailable for: macOS Sequoia\nImpact: An app may be able to determine kernel memory layout\nDescription: An information disclosure issue was addressed with improved\nmemory management.\nCVE-2026-20695: 이동하 (Lee Dong Ha of BoB 0xB6) working with TrendAI Zero\nDay Initiative, hari shanmugam\n\nKernel\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-20687: Johnny Franks (@zeroxjf)\n\nKernel\nAvailable for: macOS Sequoia\nImpact: An app may be able to modify protected parts of the file system\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-28829: Sreejith Krishnan R\n\nlibxpc\nAvailable for: macOS Sequoia\nImpact: An app may be able to access protected user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-20607: an anonymous researcher\n\nMail\nAvailable for: macOS Sequoia\nImpact: \"Hide IP Address\" and \"Block All Remote Content\" may not apply\nto all mail content\nDescription: A privacy issue was addressed with improved handling of\nuser preferences.\nCVE-2026-20692: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\nmDNSResponder\nAvailable for: macOS Sequoia\nImpact: An app may be able to leak sensitive kernel state\nDescription: This issue was addressed with improved authentication.\nCVE-2026-28867: Jian Lee (@speedyfriend433)\n\nMessages\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: A privacy issue was addressed with improved handling of\ntemporary files.\nCVE-2026-20651: Chunyu Song of NorthSea\n\nMigrationKit\nAvailable for: macOS Sequoia\nImpact: An app may be able to access user-sensitive data\nDescription: This issue was addressed with improved handling of\nsymlinks.\nCVE-2026-20694: Rodolphe Brunetti (@eisw0lf) of Lupus Nova\n\nNetAuth\nAvailable for: macOS Sequoia\nImpact: An app may be able to break out of its sandbox\nDescription: A race condition was addressed with additional validation.\nCVE-2026-28891: an anonymous researcher\n\nNetAuth\nAvailable for: macOS Sequoia\nImpact: An app may be able to connect to a network share without user\nconsent\nDescription: An access issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-20701: Matej Moravec (@MacejkoMoravec)\n\nNetAuth\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: The issue was addressed with improved checks.\nCVE-2026-28839: Mickey Jin (@patch1t)\n\nNetFSFramework\nAvailable for: macOS Sequoia\nImpact: An app may be able to break out of its sandbox\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-28827: Csaba Fitzl (@theevilbit) of Iru, an anonymous\nresearcher\n\nNotes\nAvailable for: macOS Sequoia\nImpact: An app may be able to delete files for which it does not have\npermission\nDescription: A path handling issue was addressed with improved\nvalidation.\nCVE-2026-28816: Dawuge of Shuffle Team and Hunan University\n\nPackageKit\nAvailable for: macOS Sequoia\nImpact: An attacker with root privileges may be able to delete protected\nsystem files\nDescription: This issue was addressed through improved state management.\nCVE-2026-20693: Mickey Jin (@patch1t)\n\nPhone\nAvailable for: macOS Sequoia\nImpact: An app may be able to access user-sensitive data\nDescription: A privacy issue was addressed with improved private data\nredaction for log entries.\nCVE-2026-28862: Kun Peeks (@SwayZGl1tZyyy)\n\nPrinting\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-28831: an anonymous researcher\n\nPrinting\nAvailable for: macOS Sequoia\nImpact: A sandboxed process may be able to circumvent sandbox\nrestrictions\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-28817: Gyujeong Jin (@G1uN4sh) at Team.0xb6\n\nPrinting\nAvailable for: macOS Sequoia\nImpact: An app may be able to break out of its sandbox\nDescription: A path handling issue was addressed with improved\nvalidation.\nCVE-2026-20688: wdszzml and Atuin Automated Vulnerability Discovery\nEngine\n\nSecurity\nAvailable for: macOS Sequoia\nImpact: A local attacker may gain access to user's Keychain items\nDescription: This issue was addressed with improved permissions\nchecking.\nCVE-2026-28864: Alex Radocea\n\nSMB\nAvailable for: macOS Sequoia\nImpact: "
}
],
"providerMetadata": {
"dateUpdated": "2026-09-11T11:21:40Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Mar/19"
},
{
"tags": [
"technical-description"
],
"url": "https://seclists.org/fulldisclosure/2026/Mar/19"
},
{
"url": "https://nmap.org/mailman/listinfo/fulldisclosure"
},
{
"url": "https://seclists.org/fulldisclosure/"
},
{
"url": "https://support.apple.com/100100"
},
{
"url": "https://support.apple.com/126795"
},
{
"url": "https://support.apple.com/downloads/"
},
{
"url": "https://www.apple.com/support/security/pgp/"
}
],
"source": {
"defect": [
"https://seclists.org/fulldisclosure/2026/Mar/19"
],
"discovery": "EXTERNAL"
},
"title": "APPLE-SA-03-24-2026-4 macOS Sequoia 15.7.5",
"x_gcve": [
{
"recordType": "reference",
"relationships": [
{
"destId": "CVE-2025-14524",
"type": "related"
},
{
"destId": "CVE-2025-55753",
"type": "related"
},
{
"destId": "CVE-2025-58098",
"type": "related"
},
{
"destId": "CVE-2025-59775",
"type": "related"
},
{
"destId": "CVE-2025-64505",
"type": "related"
},
{
"destId": "CVE-2025-65082",
"type": "related"
},
{
"destId": "CVE-2025-66200",
"type": "related"
},
{
"destId": "CVE-2026-20607",
"type": "related"
},
{
"destId": "CVE-2026-20633",
"type": "related"
},
{
"destId": "CVE-2026-20637",
"type": "related"
},
{
"destId": "CVE-2026-20639",
"type": "related"
},
{
"destId": "CVE-2026-20651",
"type": "related"
},
{
"destId": "CVE-2026-20657",
"type": "related"
},
{
"destId": "CVE-2026-20660",
"type": "related"
},
{
"destId": "CVE-2026-20668",
"type": "related"
},
{
"destId": "CVE-2026-20687",
"type": "related"
},
{
"destId": "CVE-2026-20688",
"type": "related"
},
{
"destId": "CVE-2026-20690",
"type": "related"
},
{
"destId": "CVE-2026-20692",
"type": "related"
},
{
"destId": "CVE-2026-20693",
"type": "related"
},
{
"destId": "CVE-2026-20694",
"type": "related"
},
{
"destId": "CVE-2026-20695",
"type": "related"
},
{
"destId": "CVE-2026-20697",
"type": "related"
},
{
"destId": "CVE-2026-20699",
"type": "related"
},
{
"destId": "CVE-2026-20701",
"type": "related"
},
{
"destId": "CVE-2026-28816",
"type": "related"
},
{
"destId": "CVE-2026-28817",
"type": "related"
},
{
"destId": "CVE-2026-28818",
"type": "related"
},
{
"destId": "CVE-2026-28821",
"type": "related"
},
{
"destId": "CVE-2026-28822",
"type": "related"
},
{
"destId": "CVE-2026-28824",
"type": "related"
},
{
"destId": "CVE-2026-28825",
"type": "related"
},
{
"destId": "CVE-2026-28827",
"type": "related"
},
{
"destId": "CVE-2026-28828",
"type": "related"
},
{
"destId": "CVE-2026-28829",
"type": "related"
},
{
"destId": "CVE-2026-28831",
"type": "related"
},
{
"destId": "CVE-2026-28832",
"type": "related"
},
{
"destId": "CVE-2026-28834",
"type": "related"
},
{
"destId": "CVE-2026-28835",
"type": "related"
},
{
"destId": "CVE-2026-28838",
"type": "related"
},
{
"destId": "CVE-2026-28839",
"type": "related"
},
{
"destId": "CVE-2026-28852",
"type": "related"
},
{
"destId": "CVE-2026-28862",
"type": "related"
},
{
"destId": "CVE-2026-28864",
"type": "related"
},
{
"destId": "CVE-2026-28865",
"type": "related"
},
{
"destId": "CVE-2026-28866",
"type": "related"
},
{
"destId": "CVE-2026-28867",
"type": "related"
},
{
"destId": "CVE-2026-28868",
"type": "related"
},
{
"destId": "CVE-2026-28876",
"type": "related"
},
{
"destId": "CVE-2026-28877",
"type": "related"
},
{
"destId": "CVE-2026-28879",
"type": "related"
},
{
"destId": "CVE-2026-28880",
"type": "related"
},
{
"destId": "CVE-2026-28886",
"type": "related"
},
{
"destId": "CVE-2026-28888",
"type": "related"
},
{
"destId": "CVE-2026-28891",
"type": "related"
},
{
"destId": "CVE-2026-28892",
"type": "related"
},
{
"destId": "CVE-2026-28894",
"type": "related"
}
],
"vulnId": "GCVE-1988-2026-0264",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Mar/19",
"automated": true,
"contentSha256": "a972b2597cbec43d3689c8b5f0b84c13edaf7bd2d69b56230f776f49ec2ed16c",
"evidenceScore": 7,
"messageId": "",
"originalUrl": "https://seclists.org/fulldisclosure/2026/Mar/19",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-03-25T00:02:26Z"
}
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-09-08T08:13:43Z",
"dateUpdated": "2026-09-11T11:21:40Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0264"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}