Live › vulnerability › CVE-2026-28864
Apple's macOS Tahoe 26.7.2 security release fixes a large batch of flaws across system components, including kernel memory corruption, sandbox escapes, and Gatekeeper bypasses. An attacker who gets a crafted file or a malicious app onto a Mac could run code, escape restrictions, or read protected data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-04 05:22 UTC, 0h before NVD. All times on this page are UTC.
Any Mac running macOS Tahoe before 26.7.2 is exposed, since the flaws are in core system components rather than optional features. Many of the bugs need a malicious app or a crafted file to trigger, so the risk is highest on machines that open untrusted files or run third-party software.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| apple ipados | vendor | < 18.7.7 | 18.7.7 |
| apple ipados | vendor | >= 26.0, < 26.4 | 26.4 |
| apple iphone os | vendor | < 18.7.7 | 18.7.7 |
| apple iphone os | vendor | >= 26.0, < 26.4 | 26.4 |
| apple macos | vendor | >= 14.0, < 14.8.5 | 14.8.5 |
| apple macos | vendor | >= 15.0, < 15.7.5 | 15.7.5 |
| apple macos | vendor | >= 26.0, < 26.4 | 26.4 |
| apple visionos | vendor | < 26.4 | 26.4 |
| apple watchos | vendor | < 26.4 | 26.4 |
sw_vers -productVersion in Terminal.26.7.2 or later for macOS Tahoe.26.7.2 or later, per the Apple advisory.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
About the security content of macOS Tahoe 26.7.2 - Apple Support
This document describes the security content of macOS Tahoe 26.7.2.
For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.
Apple security documents reference vulnerabilities by CVE-ID when possible.
For more information about security, see the Apple Product Security page.
Released October 26, 2026
Available for: macOS Tahoe
Impact: Processing a maliciously crafted image may lead to unexpected app termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-86971: an anonymous researcher
Available for: macOS Tahoe
Impact: A malicious application may be able to bypass Privacy preferences
Description: A logging issue was addressed with improved data redaction.
CVE-2026-113898: Bhaswanth Chigurupati
Available for: macOS Tahoe
Impact: An app may be able to read sensitive location information
Description: An authorization issue was addressed with improved state management.
CVE-2026-112551: Nguyen Duc Anh of Noventiq, Sindre Sorhus
Available for: macOS Tahoe
Impact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-84496: 준우 이, Maher Azzouzi, Jonathan Bar Or (@yo_yo_yo_jbo), Marco Schmitt, Nathaniel Oh (@calysteon), Aswin Kumar Gokulakannan, Narendra Singh (@_3P1C), Thanatos Tian (HKPolyU) & wgg with Diffract, Jakob Pammer, an anonymous researcher, Bhuwan Bhetwal, Kwak kiyong (@Pwnkai23) , Song nuri
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or read kernel memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan Dautov, Peter Malone
Available for: macOS Tahoe
Impact: An app may be able to cause unexpected system termination or write kernel memory
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112536: Ruslan Dautov, Thomas Guillem, Narendra Singh (@_3P1C), Kwak Kiyong (@Pwnkai23), Song Nuri, Thanatos Tian (HKPolyU) & wgg with Diffract
Available for: macOS Tahoe
Impact: An app may be able to bypass network restrictions
Description: This issue was addressed with improved checks.
CVE-2026-112467: Sindre Sorhus
Available for: macOS Tahoe
Impact: A remote attacker may be able to break out of the WebContent sandbox
Description: This issue was addressed with improved input validation.
CVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state management.
CVE-2026-86920: Johan Wahyudi
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-84595: tamdao
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112696: Jaeyeong Lee
Impact: Processing a maliciously crafted video file may lead to unexpected app termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112416: an anonymous researcher, Meta Red Team X - Nik Tsytsarkin, Narendra Singh (@_3P1C), Hcamael and 章鱼哥@aipy (aipyaipy.com), Dohyeon An @PILAB Technology, Inc
Impact: An app may be able to cause unexpected system termination or corrupt process memory
Description: An out-of-bounds write was addressed with improved input validation.
CVE-2026-112415: Rahul Raj, Hcamael and 章鱼哥@aipy (aipyaipy.com)
Impact: A malicious app may be able to break out of its sandbox
Description: An information leakage was addressed with additional validation.
CVE-2026-112704: Josh Maine of Calif.io
Impact: A malicious app may be able to read or write to protected files
Description: A permissions issue was addressed with additional restrictions.
CVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos
Impact: An app may be able to cause unexpected system termination
Description: A use after free issue was addressed with improved memory management.
CVE-2026-112531: Chanwit Muenprakoddee (ChemIndy)
Impact: An attacker with root privileges may be able to access protected user data
Description: A permissions issue was addressed with additional restrictions.
CVE-2026-86939: Lance Cain - Senior Security Researcher at SpecterOps Inc.
Impact: An app may bypass Gatekeeper checks
Description: A logic issue was addressed with improved state management.
CVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul Montgomery (@nullevent)
Impact: Processing a maliciously crafted file may bypass Gatekeeper checks
Description: A logic issue was addressed with improved checks.
CVE-2026-112568: an anonymous researcher
Impact: Processing a maliciously crafted file may lead to unexpected app termination
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112546: lunar815, Nathaniel Oh (@calysteon), Piotr Jerzy Duszynski, an anonymous researcher, Surej Sekhar, r3pwnx (@r3pwnx), Lily Cohl (@GenericCoding)
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with additional entitlement checks.
CVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved input validation.
CVE-2026-112689: Franco Belman at Blackwing Intelligence
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112470: Hcamael and 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112468: Hcamael and 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112469: Hcamael and 章鱼哥@aipy (aipyaipy.com)
Impact: An app may be able to cause unexpected system termination or read kernel memory
Description: An out-of-bounds read was addressed with improved input validation.
CVE-2026-112466: Hcamael and 章鱼哥@aipy (aipyaipy.com)
Impact: An attacker in physical proximity may be able to cause a denial-of-service
Description: A null pointer dereference was addressed with improved validation.
CVE-2026-112566: Chris Bailey - Short Circuit
Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks
Description: A file quarantine bypass was addressed with additional checks.
CVE-2026-84610: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Murray Mike
Impact: Processing a maliciously crafted file may lead to heap corruption
Description: An out-of-bounds write issue was addressed with improved input validation.
This page as .md · .json · in your agent: get_signal("CVE-2026-28864")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.