https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T12:34:46.546161+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/certfr-2026-avi-0938 certfr-2026-avi-0938 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu… 2026-09-28T12:34:46.847758+00:00 certfr-2026-avi-0938 https://vulnerability.circl.lu/vuln/fkie_cve-2026-28849 fkie_cve-2026-28849 2026-09-28T12:34:46.847847+00:00

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.

 https://vulnerability.circl.lu/vuln/gcve-1988-2026-0289 GCVE-1988-2026-0289 — APPLE-SA-07-27-2026-3 macOS Sequoia 15.7.8 2026-09-28T12:34:46.847907+00:00

Affected: Apple Macos Sequoia

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256

APPLE-SA-07-27-2026-3 macOS Sequoia 15.7.8

macOS Sequoia 15.7.8 addresses the following issues. Information about the security content is also available at https://support.apple.com/en-us/128071.

Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories.

Accounts Available for: macOS Sequoia Impact: An app may be able to gain root privileges Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-43749: Adam Franke, Trung Nguyen (@everping) of CyStack, Ashish Kunwar

afpfs Available for: macOS Sequoia Impact: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory Description: A buffer overflow was addressed with improved bounds checking. CVE-2026-64767: Dave G.

apache Available for: macOS Sequoia Impact: A remote attacker may be able to cause a denial-of-service Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. CVE-2026-23918: Юлия Мерцалова

APFS Available for: macOS Sequoia Impact: A remote user may be able to cause unexpected system termination or corrupt kernel memory Description: The issue was addressed with improved memory handling. CVE-2026-64695: Peter Malone

App Store Available for: macOS…

 https://vulnerability.circl.lu/vuln/ghsa-r4rg-rrj9-352x GHSA-r4rg-rrj9-352x 2026-09-28T12:34:46.848082+00:00

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gatekeeper checks.

 https://vulnerability.circl.lu/vuln/ncsc-2026-0267 NCSC-2026-0267 — Kwetsbaarheden verholpen in Apple MacOS 2026-09-28T12:34:46.848110+00:00 NCSC-2026-0267 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-2543 WID-SEC-W-2026-2543 — Apple macOS (Tahoe, Sonoma und Sequoia): Mehrere Schwachstellen 2026-09-28T12:34:46.848307+00:00

Ein Angreifer kann mehrere Schwachstellen in Apple macOS Tahoe, Sonoma und Sequoia ausnutzen, um seine Privilegien zu erhöhen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.