NCSC-2026-0267

Vulnerability from csaf_ncscnl - Published: 2026-07-28 08:57 - Updated: 2026-07-28 08:57
Summary
Kwetsbaarheden verholpen in Apple MacOS
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Apple heeft meerdere kwetsbaarheden verholpen in MacOS, specifiek in de versies Sequoia 15.7.8, Sonoma 14.8.8 en Tahoe 26.x.
Interpretaties: De kwetsbaarheden betreffen diverse beveiligingsproblemen in macOS, waaronder onvoldoende sandbox restricties waardoor applicaties mogelijk ongeautoriseerd toegang kunnen krijgen tot gevoelige gebruikersdata. Er zijn problemen opgelost met betrekking tot onjuiste geheugenafhandeling, zoals use-after-free, buffer overflows, out-of-bounds reads en writes, integer overflows, race conditions en type confusion. Deze kunnen leiden tot onverwachte systeem- of applicatie-terminaties, privilege escalatie, ongeautoriseerde toegang tot kernel geheugen, en in sommige gevallen remote code execution. Daarnaast zijn er fixes voor bypasses van Gatekeeper beveiliging via gemanipuleerde ZIP-archieven, verbeterde validatie van bestands- en padverwerking, en versterkte autorisatie- en toestemmingscontroles. Ook zijn er verbeteringen doorgevoerd in de netwerkbeveiliging, zoals het voorkomen van het onderscheppen van netwerkverbindingen en het beperken van applicatie permissies. De updates richten zich op het versterken van geheugenbeheer, inputvalidatie, state management en sandbox isolatie om ongeautoriseerde toegang en systeeminstabiliteit te voorkomen. De kwetsbaarheden zijn opgelost in de genoemde macOS versies en sommige fixes zijn ook doorgevoerd in gerelateerde Apple besturingssystemen zoals iOS, iPadOS, tvOS, visionOS en watchOS.
Oplossingen: Apple heeft updates uitgebracht voor macOS Sequoia 15.7.8, Sonoma 14.8.8 en Tahoe 26.x die deze kwetsbaarheden verhelpen door verbeterde sandbox restricties, geheugenbeheer, inputvalidatie, autorisatiecontroles en andere beveiligingsmechanismen te implementeren. Zie bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-20: Improper Input Validation
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-121: Stack-based Buffer Overflow
CWE-125: Out-of-bounds Read
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-201: Insertion of Sensitive Information Into Sent Data
CWE-276: Incorrect Default Permissions
CWE-284: Improper Access Control
CWE-305: Authentication Bypass by Primary Weakness
CWE-358: Improperly Implemented Security Check for Standard
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-400: Uncontrolled Resource Consumption
CWE-404: Improper Resource Shutdown or Release
CWE-415: Double Free
CWE-416: Use After Free
CWE-522: Insufficiently Protected Credentials
CWE-693: Protection Mechanism Failure
CWE-787: Out-of-bounds Write
CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
CWE-1341: Multiple Releases of Same Resource or Handle

An access issue in macOS Tahoe 26 that could allow unauthorized app access to sensitive user data was resolved by implementing additional sandbox restrictions.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A curl vulnerability in versions 7.33.0 to before 8.19.0 allows OAuth2 bearer tokens to be leaked to redirected hosts with .netrc entries, affecting multiple NetApp products and Apple software, risking sensitive information disclosure.

CWE-522 - Insufficiently Protected Credentials
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

Curl versions prior to 8.19.0 contain vulnerabilities including improper reuse of HTTP proxy connections with different credentials during CONNECT requests, leading to potential unauthorized access and sensitive information disclosure.

CWE-305 - Authentication Bypass by Primary Weakness
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

Libarchive contains multiple vulnerabilities including a heap out-of-bounds read in RAR archive processing that can disclose sensitive memory, memory allocation errors in ISO files causing denial of service, and a heap buffer overflow in zisofs potentially enabling arbitrary code execution.

CWE-125 - Out-of-bounds Read
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8 address an information disclosure vulnerability that previously allowed applications to access sensitive user data through enhanced privacy controls.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

Apache HTTP Server 2.4.66 contains a critical double free vulnerability in its HTTP/2 implementation that allows remote code execution, along with multiple other security flaws including privilege escalation, denial of service, and information disclosure.

CWE-415 - Double Free
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A vulnerability allowing maliciously crafted ZIP archives to bypass Gatekeeper checks was fixed with improved validation in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An issue allowing potential unexpected system termination or kernel memory reading by attackers was addressed through enhanced memory handling in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A file quarantine bypass vulnerability in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8 involving maliciously crafted ZIP archives that could circumvent Gatekeeper checks was addressed with enhanced security measures.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

macOS Sonoma 14.8.8 and macOS Tahoe 26.6 addressed a memory corruption vulnerability caused by malicious applications targeting system processes through enhanced memory handling.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A logic flaw enabling privilege escalation was addressed through enhanced restrictions in macOS Sequoia 15.7.8 and macOS Tahoe 26.6 updates.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A logic flaw in file handling was fixed in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.5 to prevent maliciously crafted ZIP archives from bypassing Gatekeeper security checks.

CWE-358 - Improperly Implemented Security Check for Standard
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A race condition vulnerability allowing privilege escalation was addressed by Apple through enhanced state management in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A use after free vulnerability in iOS 26.6 and related OS versions was addressed through improved memory management to prevent apps from causing unexpected system termination.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A buffer overflow vulnerability causing kernel memory corruption via malicious NFS server connections was fixed with improved bounds checking in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A logic flaw causing memory corruption was resolved through enhanced state management in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6, preventing potential denial of service by an application.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An issue causing unexpected application termination when processing maliciously crafted files was resolved through enhanced validation checks across multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A permissions vulnerability allowing an application to bypass network restrictions was addressed through enhanced sandbox restrictions in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A vulnerability allowing attackers with physical access to locked devices to view sensitive user information was addressed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.5 through enhanced security checks.

CWE-522 - Insufficiently Protected Credentials
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An integer overflow vulnerability allowing sandbox escape was addressed via improved input validation in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6, and watchOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A buffer overflow vulnerability enabling arbitrary code execution via crafted images has been addressed with enhanced bounds checking in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A race condition vulnerability allowing remote users to cause unexpected system termination or kernel memory corruption has been fixed with improved locking in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A type confusion vulnerability causing potential denial of service was addressed with enhanced validation checks across multiple Apple operating systems including iOS 18.7.9, iPadOS 18.7.9, and macOS Sequoia 15.7.8.

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An input validation vulnerability in multiple OS versions, including iOS 26.5.2 and macOS Sequoia 15.7.8, was fixed to prevent apps from causing unexpected system termination or corrupting kernel memory.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An issue causing unexpected system termination when connecting to a malicious SMB server was resolved through improved memory handling in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A permissions vulnerability allowing malicious applications to gain root privileges has been addressed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6 through enhanced restrictions.

CWE-276 - Incorrect Default Permissions
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A permissions vulnerability allowing malicious applications to gain root privileges has been addressed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6 through enhanced restrictions.

CWE-276 - Incorrect Default Permissions
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory corruption vulnerability in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8 was addressed by improving memory handling to prevent unauthorized disclosure of kernel memory by applications.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A denial-of-service vulnerability caused by improper memory handling was fixed in multiple Apple operating systems including iOS 18.7.9, iPadOS 18.7.9, and macOS Sequoia 15.7.8, exploitable by an attacker on the local network.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A buffer overflow vulnerability in multiple Apple operating systems, including iOS 26.5 and macOS Sequoia 15.7.8, was fixed by improving memory handling to prevent process memory corruption from maliciously crafted images.

CWE-121 - Stack-based Buffer Overflow
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A local vulnerability in macOS Screen Sharing allowed attackers to determine the legacy VNC password, which was mitigated by adding entitlement checks in macOS Sequoia 15.7.8 and Sonoma 14.8.8.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An authorization vulnerability allowing malicious applications to bypass Privacy preferences was resolved through improved state management in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory corruption vulnerability caused by processing a maliciously crafted audio file was resolved through improved memory handling across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A buffer overflow vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 was fixed by improving bounds checking to prevent local users from reading kernel memory.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory handling vulnerability allowing remote users to cause unexpected system termination or kernel memory corruption has been addressed in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A race condition vulnerability allowing privilege escalation to root was resolved by enhanced state management in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory handling flaw in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 was resolved to prevent apps from causing unexpected system termination or unauthorized kernel memory writes.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An injection vulnerability allowing privilege escalation to root has been addressed through enhanced validation in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An issue causing unexpected process crashes from maliciously crafted web content was resolved through improved memory handling in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.

CWE-125 - Out-of-bounds Read
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A double free vulnerability in various Apple operating systems was fixed by enhancing memory management to prevent unexpected process crashes triggered by malicious web content.

CWE-415 - Double Free
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory handling vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 could allow attackers to cause unexpected system termination or kernel memory corruption.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory corruption vulnerability causing unexpected application termination when processing maliciously crafted video files was resolved through improved memory handling across multiple Apple operating systems.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

The vulnerability was addressed by enhancing input sanitization across multiple OS versions, including iOS 26.6 and macOS updates, to prevent malicious applications from accessing protected user data.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

The issue was resolved by enhancing input sanitization in specific iOS, iPadOS, and macOS versions to prevent applications from leaking sensitive kernel state information.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A path handling vulnerability allowing privilege escalation to root was addressed through improved validation in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.6 and macOS Sequoia 15.7.8.

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

The issue was resolved across multiple OS versions by enhancing input sanitization to prevent applications from causing unexpected system termination or unauthorized kernel memory writes.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A vulnerability involving potential Keychain state modification by an attacker was addressed through enhanced state management and resolved in macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory handling vulnerability causing potential process memory corruption when processing malicious images has been resolved in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A permissions issue in iOS 26.6 and related versions was fixed by adding restrictions to prevent apps from fingerprinting users, addressing a potential privacy vulnerability.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory corruption vulnerability caused by processing a maliciously crafted image was addressed through improved memory handling in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8 address a potential process memory disclosure vulnerability caused by processing maliciously crafted asset catalogs through improved memory handling.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds write vulnerability causing unexpected system termination was resolved by improving memory handling and implementing enhanced bounds checking across multiple OS versions.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A use-after-free memory handling flaw in WebKitGTK and multiple Apple software versions was fixed to prevent process memory disclosure when processing maliciously crafted web content.

CWE-416 - Use After Free
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds write vulnerability in multiple Apple operating systems was addressed by enhancing bounds checking to prevent process termination caused by maliciously crafted audio streams.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds read vulnerability causing unexpected application termination when parsing malicious files was addressed with improved bounds checking in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds write vulnerability was addressed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6 through enhanced bounds checking to prevent applications from causing unexpected system termination.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A parsing issue in directory path handling was fixed with improved validation in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 to prevent apps from potentially gaining root privileges.

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A buffer overflow vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 was fixed by enhancing bounds checking to prevent arbitrary code execution outside app sandboxes or with elevated privileges.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds read vulnerability in iOS 26.6, iPadOS 26.6, and multiple macOS versions was addressed by Apple through enhanced bounds checking to prevent unauthorized access to sensitive user data on locked devices with physical access.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A vulnerability allowing an application to potentially leak sensitive kernel state was addressed by enhanced redaction in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A race condition vulnerability in macOS Sonoma 14.8.8 and macOS Tahoe 26.6 was fixed by improving state management to prevent an application from potentially gaining root privileges.

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A logic flaw allowing unauthorized access to user-sensitive data was resolved through enhanced validation in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds read vulnerability causing unexpected system termination was addressed through enhanced bounds checking in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An authorization vulnerability allowing unauthorized app access to sensitive user data was resolved via enhanced state management in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, and watchOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An authorization flaw in macOS Tahoe 26.6 and watchOS 26.6 that could allow unauthorized access to sensitive user data was addressed by enhancing state management mechanisms.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An access control vulnerability allowing applications to access user-sensitive data was addressed through enhanced access restrictions in macOS Sonoma 14.8.8 and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A permissions vulnerability allowing an application to read files outside its sandbox was resolved by removing the vulnerable code, with fixes implemented in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An integer overflow vulnerability causing unexpected system termination was addressed via enhanced input validation in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A symlink handling vulnerability allowing apps to modify protected file system areas has been fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An authorization vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 allowed attackers with physical access to locked devices to view sensitive user information, which was resolved through improved state management.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory handling issue causing unexpected system termination has been resolved in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory handling flaw that allowed applications to cause unexpected system termination was resolved in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An integer overflow vulnerability causing unexpected system termination was addressed via improved input validation across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.6 and macOS Sequoia 15.7.8 and Sonoma 14.8.8.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A race condition vulnerability in specific macOS and tvOS versions was fixed by adding validation to prevent apps from potentially accessing sensitive user data.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A stack overflow vulnerability causing denial-of-service was addressed via enhanced input validation in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A path traversal vulnerability allowing sandbox escape was addressed via enhanced input validation in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds read vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 that could cause system crashes or kernel memory corruption when mounting malicious disk images was fixed by improved bounds checking.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds read vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 was fixed by implementing improved bounds checking to prevent unauthorized access to sensitive user data.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An authorization vulnerability allowing potential access to sensitive user data was resolved by enhancing state management in macOS Sequoia 15.7.8 and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A buffer overflow vulnerability in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6 was fixed by improving bounds checking to prevent unexpected app termination or arbitrary code execution from maliciously crafted files.

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A denial of service vulnerability in specific macOS versions was resolved by implementing improved input validation to prevent remote attackers from exploiting the issue.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A use after free vulnerability affecting multiple Apple OS versions was fixed by improving memory management to prevent unexpected system termination or kernel memory corruption caused by malicious applications.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A logic issue allowing an app to intercept network connections intended for another process was fixed with improved restrictions in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An integer overflow vulnerability in multiple Apple operating systems was fixed by enhancing input validation to prevent unexpected application termination when processing maliciously crafted textures.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A race condition vulnerability was resolved by enhancing state handling in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 to prevent unauthorized access to sensitive user data by applications.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An issue allowing unauthorized app access to sensitive user data was resolved through enhanced validation checks in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An authorization issue allowing potential access to sensitive user data was fixed through improved state management in Safari 26.6 and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An environment variable handling issue causing unexpected system termination was resolved via enhanced validation in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An app vulnerability allowing potential access to sensitive user data was addressed with enhanced data protection across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.6 and later.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

Apple fixed an issue in iOS 26.6, iPadOS 26.6, and macOS Tahoe 26.6 that allowed apps to improperly access user contact information by implementing enhanced verification checks.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A use after free vulnerability causing unexpected system termination was addressed through improved memory management in iOS 26.6, iPadOS 26.6, multiple macOS versions, tvOS 26.6, visionOS 26.6, and watchOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An information disclosure vulnerability in iOS, iPadOS, macOS Tahoe, tvOS, and watchOS was addressed by removing the vulnerable code in version 26.6 of each operating system.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

Improved security checks were implemented in iOS 26.6 and macOS Sequoia 15.7.8 to prevent apps from unauthorized access to sensitive user data, addressing a significant privacy vulnerability.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds write vulnerability causing unexpected system termination was addressed by enhanced bounds checking in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds write vulnerability in multiple Apple operating systems was addressed by enhancing bounds checking to prevent remote attackers from causing unexpected system termination.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An app denial-of-service issue triggered by visiting a website was resolved through improved state management in Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, and visionOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A race condition causing potential system termination or kernel memory corruption was resolved by enhanced state handling in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6, and watchOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A denial of service vulnerability in macOS Tahoe was resolved in version 26.6 by removing the exploitable code that allowed local attackers to cause service disruption.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

Apple fixed a buffer overflow vulnerability causing unexpected app termination via malicious accessories through improved bounds checking in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS updates 26.x and 15.x.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds read vulnerability causing unexpected system termination was addressed through enhanced bounds checking in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory handling vulnerability in multiple Apple operating systems including iOS 26.6, macOS Sequoia 15.7.8, and others has been fixed, which could have allowed remote users to cause system termination or kernel memory corruption.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A use-after-free vulnerability causing unexpected system termination was resolved via enhanced memory management in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A validation issue in iOS 26.6 and related versions was fixed by enhancing input sanitization to prevent malicious applications from bypassing code signing enforcement.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A use-after-free vulnerability causing unexpected system termination was resolved via enhanced memory management in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds write vulnerability causing unexpected system termination was resolved by improving memory handling and implementing enhanced bounds checking across multiple OS versions.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds read vulnerability causing unexpected system termination was addressed through improved bounds checking in iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS version 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An integer overflow vulnerability enabling arbitrary code execution via crafted images was addressed through enhanced input validation in iOS 26.6, iPadOS 26.6, and macOS versions including Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

macOS Tahoe 26.6 introduced additional sandbox restrictions to resolve an access issue that could allow an application to potentially access sensitive user data.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An access control vulnerability allowing applications to read files outside their sandbox was resolved through enhanced access restrictions in Safari 26.6, iOS 26.6, and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A use after free vulnerability in multiple Apple operating systems was addressed through improved memory management, preventing applications from causing unexpected system termination.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A buffer overflow vulnerability in macOS Tahoe 26.6 has been addressed through enhanced size validation to prevent unexpected system termination.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds read vulnerability affecting multiple Apple OS versions was fixed by improving bounds checking to prevent potential denial-of-service attacks caused by malicious applications.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A type confusion vulnerability in multiple Apple operating systems was fixed by implementing improved checks to prevent denial-of-service caused by processing maliciously crafted images.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An integer overflow vulnerability causing unexpected system termination was addressed via enhanced input validation in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

The issue was resolved in specific macOS versions by improving memory handling to prevent remote users from causing unexpected system termination or kernel memory corruption.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

The issue was resolved in specific macOS versions by improving memory handling to prevent remote users from causing unexpected system termination or kernel memory corruption.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory handling flaw causing unexpected system termination or kernel memory corruption has been resolved in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An issue causing unexpected system termination and unauthorized kernel memory access by apps was resolved through improved memory handling in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory initialization flaw in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 was resolved by enhancing memory handling to prevent applications from potentially disclosing kernel memory.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A use after free vulnerability causing unexpected system termination was addressed through improved memory management in iOS 26.6, iPadOS 26.6, multiple macOS versions, tvOS 26.6, visionOS 26.6, and watchOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An access issue allowing an application to escape its sandbox was resolved by implementing additional sandbox restrictions in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A use after free vulnerability causing potential denial-of-service was resolved by enhancing memory management in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A type confusion vulnerability causing potential unexpected system termination was resolved through improved memory handling in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A permissions vulnerability allowing unauthorized deletion of files without proper permission was fixed through improved validation in multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A file quarantine bypass vulnerability in macOS was addressed by enhancing Gatekeeper checks in versions Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory handling issue that could allow an app to disclose kernel memory was resolved through improvements in multiple OS versions including iOS 16.6 and macOS Sequoia 15.7.8.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A privacy vulnerability allowing sensitive user data leakage was addressed by removing such data in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A vulnerability allowing apps to potentially leak sensitive user information was addressed through additional entitlement checks in iOS 26.6, iPadOS 26.6, and macOS versions including Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

Safari 26.6 and related OS versions implemented improved checks to fix the issue where websites could detect if a user had previously visited a link, enhancing user privacy.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory corruption vulnerability caused by processing a maliciously crafted image was resolved through improved memory handling in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.6 and related releases.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A use-after-free vulnerability in Safari causing crashes when processing malicious web content was fixed through improved memory management in multiple Apple OS versions including Safari 26.6 and iOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds access vulnerability in Safari 26.6 and related OS versions was addressed by implementing improved bounds checking to prevent crashes triggered by malicious web content.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A race condition causing potential unexpected system termination was resolved by enhancing state handling in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A vulnerability allowing apps to potentially access sensitive user data was addressed through improved state management in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.6 and related updates.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A buffer overflow vulnerability in processing 3D models was addressed through improved memory handling in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6, preventing potential disclosure of process memory.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A logic flaw allowing unauthorized app access to sensitive user data was resolved through enhanced validation in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A denial-of-service vulnerability caused by improper memory handling was resolved in multiple Apple operating systems including iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds write vulnerability in multiple Apple OS versions was fixed by improving bounds checking, preventing an app from causing a denial-of-service condition.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory corruption vulnerability exploitable by an attacker in physical proximity was addressed through enhanced memory handling in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A type confusion vulnerability causing unexpected system termination was resolved by enhancing memory handling in macOS Tahoe 26.6 and tvOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A permissions issue in Safari 26.6 and related OS versions was fixed by improving validation to prevent malicious web content from violating iframe sandboxing policy.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A use after free vulnerability in iOS 26.6 and related OS versions was resolved by improving memory handling to prevent apps from causing unexpected system termination.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

Safari 26.6 and related Apple operating systems addressed UI spoofing vulnerabilities caused by malicious website framing through improved user interface protections.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A path handling vulnerability allowing sandbox escape was addressed through enhanced validation in macOS Sequoia 15.7.8 and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A user fingerprinting vulnerability in multiple Apple operating systems was addressed by enhancing data protection in versions 26.6 to prevent privacy risks.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

Multiple Apple operating systems including iOS, iPadOS, macOS, visionOS, and watchOS were updated with improved checks to fix sensitive data leakage caused by processing maliciously crafted contacts.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An inconsistent user interface issue in multiple Apple OS versions was fixed by improving state management to prevent remote attackers from bypassing network filters.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An authorization vulnerability allowing malicious applications to escape their sandbox was resolved through improved state management in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A permissions vulnerability allowing malicious apps to escape their sandbox was addressed with enhanced restrictions in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds write vulnerability causing unexpected application termination was resolved by enhanced bounds checking across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS 26.6 and related updates.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A parsing issue in directory path handling was fixed with improved validation in multiple Apple operating systems to prevent malicious apps from escaping their sandbox environments.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An authorization vulnerability allowing unauthorized app access to sensitive user data was resolved via enhanced state management in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An information leakage vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 was addressed by implementing additional validation to prevent apps from disclosing kernel memory.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

The issue allowing access to contacts and photos on a locked device was resolved by implementing additional lock screen restrictions in macOS Sequoia 15.7.8 and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An authorization vulnerability allowing applications to add contacts without user consent was resolved through enhanced validation in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, and watchOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A buffer overflow vulnerability allowing arbitrary code execution with kernel privileges was fixed by enhancing size validation across multiple OS versions.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory handling vulnerability fixed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, and visionOS 26.6 could allow apps to cause unexpected system termination or kernel memory corruption.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A use-after-free vulnerability causing potential system termination or kernel memory corruption has been addressed in iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS version 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds write vulnerability in multiple Apple operating systems was fixed by enhancing bounds checking to prevent denial-of-service attacks from maliciously crafted files.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory corruption vulnerability causing unexpected Safari crashes when processing malicious web content was fixed in Safari 26.6 and related OS versions through improved state management.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An issue causing unexpected application termination when processing maliciously crafted files was resolved through improved bounds checks in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds read vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 was fixed by implementing improved bounds checking to prevent unexpected system termination caused by applications.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds write vulnerability in multiple Apple OS versions could allow arbitrary code execution or cause unexpected app termination when processing maliciously crafted files.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds write vulnerability in multiple Apple operating systems was addressed by enhanced bounds checking, preventing potential application crashes or arbitrary code execution from maliciously crafted files.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An integer overflow vulnerability in multiple Apple operating systems was fixed by enhancing input validation to prevent unexpected application termination or arbitrary code execution from maliciously crafted files.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An integer overflow vulnerability in multiple Apple operating systems was fixed by enhancing input validation to prevent unexpected application termination or arbitrary code execution from maliciously crafted files.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A buffer overflow vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 was fixed by improved bounds checking to prevent remote attackers from causing system termination or kernel memory corruption.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds read vulnerability in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS 26.6 was fixed by improving input validation to prevent unexpected application termination.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds write vulnerability affecting multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS 26.6 and later was fixed by implementing improved bounds checking to prevent application crashes and heap corruption.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds write vulnerability affecting multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS 26.6 and later was fixed by implementing improved bounds checking to prevent application crashes and heap corruption.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A buffer overflow vulnerability allowing remote attackers to cause application termination or heap corruption was fixed with improved bounds checking in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS versions 26.6 and 15.7.8.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An out-of-bounds write vulnerability allowing remote attackers to cause application crashes or heap corruption was addressed via improved input validation in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS versions 26.6 and 15.7.8.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An integer overflow vulnerability affecting multiple Apple operating systems was fixed by improved input validation to prevent application termination or heap corruption.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A memory initialization flaw causing unexpected system termination was resolved in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6 via enhanced memory management.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

An issue allowing an application to potentially disclose kernel memory was resolved through enhanced bounds checking in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*

A use-after-free vulnerability in Safari causing crashes when processing malicious web content was fixed in Safari 26.6 and related OS versions through improved memory management.

Affected products
Product Identifier Version Remediation
vers:unknown/*
Apple / Mac OS
vers:unknown/*
vers:unknown/*
Apple / macOS Sequoia
vers:unknown/*
vers:unknown/*
Apple / macOS Sonoma
vers:unknown/*
vers:unknown/*
Apple / macOS Tahoe
vers:unknown/*
References
URL Category
https://support.apple.com/en-us/128067 external
https://support.apple.com/en-us/128071 external
https://support.apple.com/en-us/128072 external
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Apple heeft meerdere kwetsbaarheden verholpen in MacOS, specifiek in de versies Sequoia 15.7.8, Sonoma 14.8.8 en Tahoe 26.x.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden betreffen diverse beveiligingsproblemen in macOS, waaronder onvoldoende sandbox restricties waardoor applicaties mogelijk ongeautoriseerd toegang kunnen krijgen tot gevoelige gebruikersdata. Er zijn problemen opgelost met betrekking tot onjuiste geheugenafhandeling, zoals use-after-free, buffer overflows, out-of-bounds reads en writes, integer overflows, race conditions en type confusion. Deze kunnen leiden tot onverwachte systeem- of applicatie-terminaties, privilege escalatie, ongeautoriseerde toegang tot kernel geheugen, en in sommige gevallen remote code execution. \n\nDaarnaast zijn er fixes voor bypasses van Gatekeeper beveiliging via gemanipuleerde ZIP-archieven, verbeterde validatie van bestands- en padverwerking, en versterkte autorisatie- en toestemmingscontroles. Ook zijn er verbeteringen doorgevoerd in de netwerkbeveiliging, zoals het voorkomen van het onderscheppen van netwerkverbindingen en het beperken van applicatie permissies.\n\nDe updates richten zich op het versterken van geheugenbeheer, inputvalidatie, state management en sandbox isolatie om ongeautoriseerde toegang en systeeminstabiliteit te voorkomen. De kwetsbaarheden zijn opgelost in de genoemde macOS versies en sommige fixes zijn ook doorgevoerd in gerelateerde Apple besturingssystemen zoals iOS, iPadOS, tvOS, visionOS en watchOS.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Apple heeft updates uitgebracht voor macOS Sequoia 15.7.8, Sonoma 14.8.8 en Tahoe 26.x die deze kwetsbaarheden verhelpen door verbeterde sandbox restricties, geheugenbeheer, inputvalidatie, autorisatiecontroles en andere beveiligingsmechanismen te implementeren. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      },
      {
        "category": "general",
        "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
        "title": "CWE-22"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
        "title": "CWE-88"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
        "title": "CWE-119"
      },
      {
        "category": "general",
        "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
        "title": "CWE-120"
      },
      {
        "category": "general",
        "text": "Stack-based Buffer Overflow",
        "title": "CWE-121"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information to an Unauthorized Actor",
        "title": "CWE-200"
      },
      {
        "category": "general",
        "text": "Insertion of Sensitive Information Into Sent Data",
        "title": "CWE-201"
      },
      {
        "category": "general",
        "text": "Incorrect Default Permissions",
        "title": "CWE-276"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Authentication Bypass by Primary Weakness",
        "title": "CWE-305"
      },
      {
        "category": "general",
        "text": "Improperly Implemented Security Check for Standard",
        "title": "CWE-358"
      },
      {
        "category": "general",
        "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
        "title": "CWE-362"
      },
      {
        "category": "general",
        "text": "Uncontrolled Resource Consumption",
        "title": "CWE-400"
      },
      {
        "category": "general",
        "text": "Improper Resource Shutdown or Release",
        "title": "CWE-404"
      },
      {
        "category": "general",
        "text": "Double Free",
        "title": "CWE-415"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "Insufficiently Protected Credentials",
        "title": "CWE-522"
      },
      {
        "category": "general",
        "text": "Protection Mechanism Failure",
        "title": "CWE-693"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      },
      {
        "category": "general",
        "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
        "title": "CWE-843"
      },
      {
        "category": "general",
        "text": "Multiple Releases of Same Resource or Handle",
        "title": "CWE-1341"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/128067"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/128071"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/128072"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Apple MacOS",
    "tracking": {
      "current_release_date": "2026-07-28T08:57:31.500513Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2026-0267",
      "initial_release_date": "2026-07-28T08:57:31.500513Z",
      "revision_history": [
        {
          "date": "2026-07-28T08:57:31.500513Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "Mac OS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-2"
                }
              }
            ],
            "category": "product_name",
            "name": "macOS Sequoia"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-3"
                }
              }
            ],
            "category": "product_name",
            "name": "macOS Sonoma"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-4"
                }
              }
            ],
            "category": "product_name",
            "name": "macOS Tahoe"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-43325",
      "notes": [
        {
          "category": "description",
          "text": "An access issue in macOS Tahoe 26 that could allow unauthorized app access to sensitive user data was resolved by implementing additional sandbox restrictions.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43325 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43325.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-43325"
    },
    {
      "cve": "CVE-2026-3783",
      "cwe": {
        "id": "CWE-522",
        "name": "Insufficiently Protected Credentials"
      },
      "notes": [
        {
          "category": "other",
          "text": "Insufficiently Protected Credentials",
          "title": "CWE-522"
        },
        {
          "category": "other",
          "text": "Insertion of Sensitive Information Into Sent Data",
          "title": "CWE-201"
        },
        {
          "category": "description",
          "text": "A curl vulnerability in versions 7.33.0 to before 8.19.0 allows OAuth2 bearer tokens to be leaked to redirected hosts with .netrc entries, affecting multiple NetApp products and Apple software, risking sensitive information disclosure.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-3783 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-3783.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-3783"
    },
    {
      "cve": "CVE-2026-3784",
      "cwe": {
        "id": "CWE-305",
        "name": "Authentication Bypass by Primary Weakness"
      },
      "notes": [
        {
          "category": "other",
          "text": "Authentication Bypass by Primary Weakness",
          "title": "CWE-305"
        },
        {
          "category": "description",
          "text": "Curl versions prior to 8.19.0 contain vulnerabilities including improper reuse of HTTP proxy connections with different credentials during CONNECT requests, leading to potential unauthorized access and sensitive information disclosure.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-3784 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-3784.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-3784"
    },
    {
      "cve": "CVE-2026-4424",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "Libarchive contains multiple vulnerabilities including a heap out-of-bounds read in RAR archive processing that can disclose sensitive memory, memory allocation errors in ISO files causing denial of service, and a heap buffer overflow in zisofs potentially enabling arbitrary code execution.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-4424 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-4424.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-4424"
    },
    {
      "cve": "CVE-2026-20672",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8 address an information disclosure vulnerability that previously allowed applications to access sensitive user data through enhanced privacy controls.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20672 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20672.json"
        }
      ],
      "title": "CVE-2026-20672"
    },
    {
      "cve": "CVE-2026-23918",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Double Free",
          "title": "CWE-415"
        },
        {
          "category": "other",
          "text": "Multiple Releases of Same Resource or Handle",
          "title": "CWE-1341"
        },
        {
          "category": "description",
          "text": "Apache HTTP Server 2.4.66 contains a critical double free vulnerability in its HTTP/2 implementation that allows remote code execution, along with multiple other security flaws including privilege escalation, denial of service, and information disclosure.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-23918 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-23918.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-23918"
    },
    {
      "cve": "CVE-2026-28849",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability allowing maliciously crafted ZIP archives to bypass Gatekeeper checks was fixed with improved validation in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28849 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28849.json"
        }
      ],
      "title": "CVE-2026-28849"
    },
    {
      "cve": "CVE-2026-28896",
      "notes": [
        {
          "category": "description",
          "text": "An issue allowing potential unexpected system termination or kernel memory reading by attackers was addressed through enhanced memory handling in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28896 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28896.json"
        }
      ],
      "title": "CVE-2026-28896"
    },
    {
      "cve": "CVE-2026-28900",
      "notes": [
        {
          "category": "description",
          "text": "A file quarantine bypass vulnerability in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8 involving maliciously crafted ZIP archives that could circumvent Gatekeeper checks was addressed with enhanced security measures.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28900 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28900.json"
        }
      ],
      "title": "CVE-2026-28900"
    },
    {
      "cve": "CVE-2026-28911",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.8 and macOS Tahoe 26.6 addressed a memory corruption vulnerability caused by malicious applications targeting system processes through enhanced memory handling.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28911 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28911.json"
        }
      ],
      "title": "CVE-2026-28911"
    },
    {
      "cve": "CVE-2026-28912",
      "notes": [
        {
          "category": "description",
          "text": "A logic flaw enabling privilege escalation was addressed through enhanced restrictions in macOS Sequoia 15.7.8 and macOS Tahoe 26.6 updates.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28912 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28912.json"
        }
      ],
      "title": "CVE-2026-28912"
    },
    {
      "cve": "CVE-2026-28914",
      "cwe": {
        "id": "CWE-358",
        "name": "Improperly Implemented Security Check for Standard"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improperly Implemented Security Check for Standard",
          "title": "CWE-358"
        },
        {
          "category": "description",
          "text": "A logic flaw in file handling was fixed in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.5 to prevent maliciously crafted ZIP archives from bypassing Gatekeeper security checks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28914 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28914.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-28914"
    },
    {
      "cve": "CVE-2026-28926",
      "notes": [
        {
          "category": "description",
          "text": "A race condition vulnerability allowing privilege escalation was addressed by Apple through enhanced state management in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28926 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28926.json"
        }
      ],
      "title": "CVE-2026-28926"
    },
    {
      "cve": "CVE-2026-28928",
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability in iOS 26.6 and related OS versions was addressed through improved memory management to prevent apps from causing unexpected system termination.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28928 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28928.json"
        }
      ],
      "title": "CVE-2026-28928"
    },
    {
      "cve": "CVE-2026-28931",
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability causing kernel memory corruption via malicious NFS server connections was fixed with improved bounds checking in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28931 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28931.json"
        }
      ],
      "title": "CVE-2026-28931"
    },
    {
      "cve": "CVE-2026-28932",
      "notes": [
        {
          "category": "description",
          "text": "A logic flaw causing memory corruption was resolved through enhanced state management in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6, preventing potential denial of service by an application.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28932 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28932.json"
        }
      ],
      "title": "CVE-2026-28932"
    },
    {
      "cve": "CVE-2026-28936",
      "notes": [
        {
          "category": "description",
          "text": "An issue causing unexpected application termination when processing maliciously crafted files was resolved through enhanced validation checks across multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28936 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28936.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-28936"
    },
    {
      "cve": "CVE-2026-28945",
      "notes": [
        {
          "category": "description",
          "text": "A permissions vulnerability allowing an application to bypass network restrictions was addressed through enhanced sandbox restrictions in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28945 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28945.json"
        }
      ],
      "title": "CVE-2026-28945"
    },
    {
      "cve": "CVE-2026-28961",
      "cwe": {
        "id": "CWE-522",
        "name": "Insufficiently Protected Credentials"
      },
      "notes": [
        {
          "category": "other",
          "text": "Insufficiently Protected Credentials",
          "title": "CWE-522"
        },
        {
          "category": "description",
          "text": "A vulnerability allowing attackers with physical access to locked devices to view sensitive user information was addressed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.5 through enhanced security checks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28961 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28961.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-28961"
    },
    {
      "cve": "CVE-2026-28973",
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow vulnerability allowing sandbox escape was addressed via improved input validation in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28973 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28973.json"
        }
      ],
      "title": "CVE-2026-28973"
    },
    {
      "cve": "CVE-2026-28981",
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability enabling arbitrary code execution via crafted images has been addressed with enhanced bounds checking in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28981 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28981.json"
        }
      ],
      "title": "CVE-2026-28981"
    },
    {
      "cve": "CVE-2026-28982",
      "notes": [
        {
          "category": "description",
          "text": "A race condition vulnerability allowing remote users to cause unexpected system termination or kernel memory corruption has been fixed with improved locking in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28982 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28982.json"
        }
      ],
      "title": "CVE-2026-28982"
    },
    {
      "cve": "CVE-2026-28983",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
          "title": "CWE-843"
        },
        {
          "category": "description",
          "text": "A type confusion vulnerability causing potential denial of service was addressed with enhanced validation checks across multiple Apple operating systems including iOS 18.7.9, iPadOS 18.7.9, and macOS Sequoia 15.7.8.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28983 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28983.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-28983"
    },
    {
      "cve": "CVE-2026-39868",
      "notes": [
        {
          "category": "description",
          "text": "An input validation vulnerability in multiple OS versions, including iOS 26.5.2 and macOS Sequoia 15.7.8, was fixed to prevent apps from causing unexpected system termination or corrupting kernel memory.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-39868 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-39868.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-39868"
    },
    {
      "cve": "CVE-2026-39873",
      "notes": [
        {
          "category": "description",
          "text": "An issue causing unexpected system termination when connecting to a malicious SMB server was resolved through improved memory handling in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-39873 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-39873.json"
        }
      ],
      "title": "CVE-2026-39873"
    },
    {
      "cve": "CVE-2026-39874",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Default Permissions",
          "title": "CWE-276"
        },
        {
          "category": "description",
          "text": "A permissions vulnerability allowing malicious applications to gain root privileges has been addressed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6 through enhanced restrictions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-39874 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-39874.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-39874"
    },
    {
      "cve": "CVE-2026-39875",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Default Permissions",
          "title": "CWE-276"
        },
        {
          "category": "description",
          "text": "A permissions vulnerability allowing malicious applications to gain root privileges has been addressed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6 through enhanced restrictions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-39875 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-39875.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-39875"
    },
    {
      "cve": "CVE-2026-39877",
      "notes": [
        {
          "category": "description",
          "text": "A memory corruption vulnerability in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8 was addressed by improving memory handling to prevent unauthorized disclosure of kernel memory by applications.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-39877 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-39877.json"
        }
      ],
      "title": "CVE-2026-39877"
    },
    {
      "cve": "CVE-2026-43653",
      "notes": [
        {
          "category": "description",
          "text": "A denial-of-service vulnerability caused by improper memory handling was fixed in multiple Apple operating systems including iOS 18.7.9, iPadOS 18.7.9, and macOS Sequoia 15.7.8, exploitable by an attacker on the local network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43653 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43653.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-43653"
    },
    {
      "cve": "CVE-2026-43661",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Stack-based Buffer Overflow",
          "title": "CWE-121"
        },
        {
          "category": "description",
          "text": "A buffer overflow vulnerability in multiple Apple operating systems, including iOS 26.5 and macOS Sequoia 15.7.8, was fixed by improving memory handling to prevent process memory corruption from maliciously crafted images.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43661 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43661.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-43661"
    },
    {
      "cve": "CVE-2026-43665",
      "notes": [
        {
          "category": "description",
          "text": "A local vulnerability in macOS Screen Sharing allowed attackers to determine the legacy VNC password, which was mitigated by adding entitlement checks in macOS Sequoia 15.7.8 and Sonoma 14.8.8.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43665 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43665.json"
        }
      ],
      "title": "CVE-2026-43665"
    },
    {
      "cve": "CVE-2026-43672",
      "notes": [
        {
          "category": "description",
          "text": "An authorization vulnerability allowing malicious applications to bypass Privacy preferences was resolved through improved state management in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43672 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43672.json"
        }
      ],
      "title": "CVE-2026-43672"
    },
    {
      "cve": "CVE-2026-43673",
      "notes": [
        {
          "category": "description",
          "text": "A memory corruption vulnerability caused by processing a maliciously crafted audio file was resolved through improved memory handling across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43673 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43673.json"
        }
      ],
      "title": "CVE-2026-43673"
    },
    {
      "cve": "CVE-2026-43681",
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 was fixed by improving bounds checking to prevent local users from reading kernel memory.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43681 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43681.json"
        }
      ],
      "title": "CVE-2026-43681"
    },
    {
      "cve": "CVE-2026-43682",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling vulnerability allowing remote users to cause unexpected system termination or kernel memory corruption has been addressed in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43682 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43682.json"
        }
      ],
      "title": "CVE-2026-43682"
    },
    {
      "cve": "CVE-2026-43693",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "description",
          "text": "A race condition vulnerability allowing privilege escalation to root was resolved by enhanced state management in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43693 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43693.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-43693"
    },
    {
      "cve": "CVE-2026-43694",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling flaw in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 was resolved to prevent apps from causing unexpected system termination or unauthorized kernel memory writes.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43694 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43694.json"
        }
      ],
      "title": "CVE-2026-43694"
    },
    {
      "cve": "CVE-2026-43698",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
          "title": "CWE-88"
        },
        {
          "category": "description",
          "text": "An injection vulnerability allowing privilege escalation to root has been addressed through enhanced validation in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43698 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43698.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-43698"
    },
    {
      "cve": "CVE-2026-43703",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        },
        {
          "category": "description",
          "text": "An issue causing unexpected process crashes from maliciously crafted web content was resolved through improved memory handling in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43703 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43703.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-43703"
    },
    {
      "cve": "CVE-2026-43706",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Double Free",
          "title": "CWE-415"
        },
        {
          "category": "description",
          "text": "A double free vulnerability in various Apple operating systems was fixed by enhancing memory management to prevent unexpected process crashes triggered by malicious web content.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43706 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43706.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-43706"
    },
    {
      "cve": "CVE-2026-43710",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 could allow attackers to cause unexpected system termination or kernel memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43710 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43710.json"
        }
      ],
      "title": "CVE-2026-43710"
    },
    {
      "cve": "CVE-2026-43711",
      "notes": [
        {
          "category": "description",
          "text": "A memory corruption vulnerability causing unexpected application termination when processing maliciously crafted video files was resolved through improved memory handling across multiple Apple operating systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43711 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43711.json"
        }
      ],
      "title": "CVE-2026-43711"
    },
    {
      "cve": "CVE-2026-43714",
      "notes": [
        {
          "category": "description",
          "text": "The vulnerability was addressed by enhancing input sanitization across multiple OS versions, including iOS 26.6 and macOS updates, to prevent malicious applications from accessing protected user data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43714 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43714.json"
        }
      ],
      "title": "CVE-2026-43714"
    },
    {
      "cve": "CVE-2026-43722",
      "notes": [
        {
          "category": "description",
          "text": "The issue was resolved by enhancing input sanitization in specific iOS, iPadOS, and macOS versions to prevent applications from leaking sensitive kernel state information.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43722 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43722.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-43722"
    },
    {
      "cve": "CVE-2026-43723",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        },
        {
          "category": "description",
          "text": "A path handling vulnerability allowing privilege escalation to root was addressed through improved validation in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.6 and macOS Sequoia 15.7.8.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43723 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43723.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-43723"
    },
    {
      "cve": "CVE-2026-43724",
      "notes": [
        {
          "category": "description",
          "text": "The issue was resolved across multiple OS versions by enhancing input sanitization to prevent applications from causing unexpected system termination or unauthorized kernel memory writes.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43724 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43724.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-43724"
    },
    {
      "cve": "CVE-2026-43728",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability involving potential Keychain state modification by an attacker was addressed through enhanced state management and resolved in macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43728 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43728.json"
        }
      ],
      "title": "CVE-2026-43728"
    },
    {
      "cve": "CVE-2026-43729",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling vulnerability causing potential process memory corruption when processing malicious images has been resolved in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43729 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43729.json"
        }
      ],
      "title": "CVE-2026-43729"
    },
    {
      "cve": "CVE-2026-43730",
      "notes": [
        {
          "category": "description",
          "text": "A permissions issue in iOS 26.6 and related versions was fixed by adding restrictions to prevent apps from fingerprinting users, addressing a potential privacy vulnerability.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43730 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43730.json"
        }
      ],
      "title": "CVE-2026-43730"
    },
    {
      "cve": "CVE-2026-43733",
      "notes": [
        {
          "category": "description",
          "text": "A memory corruption vulnerability caused by processing a maliciously crafted image was addressed through improved memory handling in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43733 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43733.json"
        }
      ],
      "title": "CVE-2026-43733"
    },
    {
      "cve": "CVE-2026-43738",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8 address a potential process memory disclosure vulnerability caused by processing maliciously crafted asset catalogs through improved memory handling.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43738 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43738.json"
        }
      ],
      "title": "CVE-2026-43738"
    },
    {
      "cve": "CVE-2026-43739",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability causing unexpected system termination was resolved by improving memory handling and implementing enhanced bounds checking across multiple OS versions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43739 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43739.json"
        }
      ],
      "title": "CVE-2026-43739"
    },
    {
      "cve": "CVE-2026-43740",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free memory handling flaw in WebKitGTK and multiple Apple software versions was fixed to prevent process memory disclosure when processing maliciously crafted web content.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43740 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43740.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-43740"
    },
    {
      "cve": "CVE-2026-43744",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability in multiple Apple operating systems was addressed by enhancing bounds checking to prevent process termination caused by maliciously crafted audio streams.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43744 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43744.json"
        }
      ],
      "title": "CVE-2026-43744"
    },
    {
      "cve": "CVE-2026-43747",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability causing unexpected application termination when parsing malicious files was addressed with improved bounds checking in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43747 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43747.json"
        }
      ],
      "title": "CVE-2026-43747"
    },
    {
      "cve": "CVE-2026-43748",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability was addressed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6 through enhanced bounds checking to prevent applications from causing unexpected system termination.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43748 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43748.json"
        }
      ],
      "title": "CVE-2026-43748"
    },
    {
      "cve": "CVE-2026-43749",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        },
        {
          "category": "description",
          "text": "A parsing issue in directory path handling was fixed with improved validation in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 to prevent apps from potentially gaining root privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43749 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43749.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-43749"
    },
    {
      "cve": "CVE-2026-43750",
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 was fixed by enhancing bounds checking to prevent arbitrary code execution outside app sandboxes or with elevated privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43750 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43750.json"
        }
      ],
      "title": "CVE-2026-43750"
    },
    {
      "cve": "CVE-2026-43753",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in iOS 26.6, iPadOS 26.6, and multiple macOS versions was addressed by Apple through enhanced bounds checking to prevent unauthorized access to sensitive user data on locked devices with physical access.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43753 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43753.json"
        }
      ],
      "title": "CVE-2026-43753"
    },
    {
      "cve": "CVE-2026-43754",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability allowing an application to potentially leak sensitive kernel state was addressed by enhanced redaction in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43754 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43754.json"
        }
      ],
      "title": "CVE-2026-43754"
    },
    {
      "cve": "CVE-2026-43755",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "description",
          "text": "A race condition vulnerability in macOS Sonoma 14.8.8 and macOS Tahoe 26.6 was fixed by improving state management to prevent an application from potentially gaining root privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43755 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43755.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-43755"
    },
    {
      "cve": "CVE-2026-43756",
      "notes": [
        {
          "category": "description",
          "text": "A logic flaw allowing unauthorized access to user-sensitive data was resolved through enhanced validation in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43756 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43756.json"
        }
      ],
      "title": "CVE-2026-43756"
    },
    {
      "cve": "CVE-2026-43757",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability causing unexpected system termination was addressed through enhanced bounds checking in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43757 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43757.json"
        }
      ],
      "title": "CVE-2026-43757"
    },
    {
      "cve": "CVE-2026-43758",
      "notes": [
        {
          "category": "description",
          "text": "An authorization vulnerability allowing unauthorized app access to sensitive user data was resolved via enhanced state management in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43758 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43758.json"
        }
      ],
      "title": "CVE-2026-43758"
    },
    {
      "cve": "CVE-2026-43759",
      "notes": [
        {
          "category": "description",
          "text": "An authorization flaw in macOS Tahoe 26.6 and watchOS 26.6 that could allow unauthorized access to sensitive user data was addressed by enhancing state management mechanisms.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43759 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43759.json"
        }
      ],
      "title": "CVE-2026-43759"
    },
    {
      "cve": "CVE-2026-43760",
      "notes": [
        {
          "category": "description",
          "text": "An access control vulnerability allowing applications to access user-sensitive data was addressed through enhanced access restrictions in macOS Sonoma 14.8.8 and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43760 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43760.json"
        }
      ],
      "title": "CVE-2026-43760"
    },
    {
      "cve": "CVE-2026-43763",
      "notes": [
        {
          "category": "description",
          "text": "A permissions vulnerability allowing an application to read files outside its sandbox was resolved by removing the vulnerable code, with fixes implemented in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43763 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43763.json"
        }
      ],
      "title": "CVE-2026-43763"
    },
    {
      "cve": "CVE-2026-43764",
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow vulnerability causing unexpected system termination was addressed via enhanced input validation in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43764 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43764.json"
        }
      ],
      "title": "CVE-2026-43764"
    },
    {
      "cve": "CVE-2026-43765",
      "notes": [
        {
          "category": "description",
          "text": "A symlink handling vulnerability allowing apps to modify protected file system areas has been fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43765 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43765.json"
        }
      ],
      "title": "CVE-2026-43765"
    },
    {
      "cve": "CVE-2026-43766",
      "notes": [
        {
          "category": "description",
          "text": "An authorization vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 allowed attackers with physical access to locked devices to view sensitive user information, which was resolved through improved state management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43766 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43766.json"
        }
      ],
      "title": "CVE-2026-43766"
    },
    {
      "cve": "CVE-2026-43767",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling issue causing unexpected system termination has been resolved in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43767 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43767.json"
        }
      ],
      "title": "CVE-2026-43767"
    },
    {
      "cve": "CVE-2026-43768",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling flaw that allowed applications to cause unexpected system termination was resolved in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43768 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43768.json"
        }
      ],
      "title": "CVE-2026-43768"
    },
    {
      "cve": "CVE-2026-43769",
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow vulnerability causing unexpected system termination was addressed via improved input validation across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.6 and macOS Sequoia 15.7.8 and Sonoma 14.8.8.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43769 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43769.json"
        }
      ],
      "title": "CVE-2026-43769"
    },
    {
      "cve": "CVE-2026-43770",
      "notes": [
        {
          "category": "description",
          "text": "A race condition vulnerability in specific macOS and tvOS versions was fixed by adding validation to prevent apps from potentially accessing sensitive user data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43770 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43770.json"
        }
      ],
      "title": "CVE-2026-43770"
    },
    {
      "cve": "CVE-2026-43771",
      "notes": [
        {
          "category": "description",
          "text": "A stack overflow vulnerability causing denial-of-service was addressed via enhanced input validation in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43771 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43771.json"
        }
      ],
      "title": "CVE-2026-43771"
    },
    {
      "cve": "CVE-2026-43772",
      "notes": [
        {
          "category": "description",
          "text": "A path traversal vulnerability allowing sandbox escape was addressed via enhanced input validation in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43772 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43772.json"
        }
      ],
      "title": "CVE-2026-43772"
    },
    {
      "cve": "CVE-2026-43773",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 that could cause system crashes or kernel memory corruption when mounting malicious disk images was fixed by improved bounds checking.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43773 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43773.json"
        }
      ],
      "title": "CVE-2026-43773"
    },
    {
      "cve": "CVE-2026-43774",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 was fixed by implementing improved bounds checking to prevent unauthorized access to sensitive user data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43774 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43774.json"
        }
      ],
      "title": "CVE-2026-43774"
    },
    {
      "cve": "CVE-2026-43775",
      "notes": [
        {
          "category": "description",
          "text": "An authorization vulnerability allowing potential access to sensitive user data was resolved by enhancing state management in macOS Sequoia 15.7.8 and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43775 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43775.json"
        }
      ],
      "title": "CVE-2026-43775"
    },
    {
      "cve": "CVE-2026-43776",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
          "title": "CWE-120"
        },
        {
          "category": "description",
          "text": "A buffer overflow vulnerability in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6 was fixed by improving bounds checking to prevent unexpected app termination or arbitrary code execution from maliciously crafted files.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43776 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43776.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2026-43776"
    },
    {
      "cve": "CVE-2026-43777",
      "notes": [
        {
          "category": "description",
          "text": "A denial of service vulnerability in specific macOS versions was resolved by implementing improved input validation to prevent remote attackers from exploiting the issue.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43777 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43777.json"
        }
      ],
      "title": "CVE-2026-43777"
    },
    {
      "cve": "CVE-2026-43778",
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability affecting multiple Apple OS versions was fixed by improving memory management to prevent unexpected system termination or kernel memory corruption caused by malicious applications.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43778 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43778.json"
        }
      ],
      "title": "CVE-2026-43778"
    },
    {
      "cve": "CVE-2026-43779",
      "notes": [
        {
          "category": "description",
          "text": "A logic issue allowing an app to intercept network connections intended for another process was fixed with improved restrictions in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43779 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43779.json"
        }
      ],
      "title": "CVE-2026-43779"
    },
    {
      "cve": "CVE-2026-43780",
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow vulnerability in multiple Apple operating systems was fixed by enhancing input validation to prevent unexpected application termination when processing maliciously crafted textures.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43780 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43780.json"
        }
      ],
      "title": "CVE-2026-43780"
    },
    {
      "cve": "CVE-2026-43781",
      "notes": [
        {
          "category": "description",
          "text": "A race condition vulnerability was resolved by enhancing state handling in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 to prevent unauthorized access to sensitive user data by applications.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43781 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43781.json"
        }
      ],
      "title": "CVE-2026-43781"
    },
    {
      "cve": "CVE-2026-43782",
      "notes": [
        {
          "category": "description",
          "text": "An issue allowing unauthorized app access to sensitive user data was resolved through enhanced validation checks in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43782 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43782.json"
        }
      ],
      "title": "CVE-2026-43782"
    },
    {
      "cve": "CVE-2026-43792",
      "notes": [
        {
          "category": "description",
          "text": "An authorization issue allowing potential access to sensitive user data was fixed through improved state management in Safari 26.6 and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43792 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43792.json"
        }
      ],
      "title": "CVE-2026-43792"
    },
    {
      "cve": "CVE-2026-43793",
      "notes": [
        {
          "category": "description",
          "text": "An environment variable handling issue causing unexpected system termination was resolved via enhanced validation in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43793 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43793.json"
        }
      ],
      "title": "CVE-2026-43793"
    },
    {
      "cve": "CVE-2026-43796",
      "notes": [
        {
          "category": "description",
          "text": "An app vulnerability allowing potential access to sensitive user data was addressed with enhanced data protection across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.6 and later.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43796 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43796.json"
        }
      ],
      "title": "CVE-2026-43796"
    },
    {
      "cve": "CVE-2026-43797",
      "notes": [
        {
          "category": "description",
          "text": "Apple fixed an issue in iOS 26.6, iPadOS 26.6, and macOS Tahoe 26.6 that allowed apps to improperly access user contact information by implementing enhanced verification checks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43797 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43797.json"
        }
      ],
      "title": "CVE-2026-43797"
    },
    {
      "cve": "CVE-2026-43799",
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability causing unexpected system termination was addressed through improved memory management in iOS 26.6, iPadOS 26.6, multiple macOS versions, tvOS 26.6, visionOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43799 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43799.json"
        }
      ],
      "title": "CVE-2026-43799"
    },
    {
      "cve": "CVE-2026-43800",
      "notes": [
        {
          "category": "description",
          "text": "An information disclosure vulnerability in iOS, iPadOS, macOS Tahoe, tvOS, and watchOS was addressed by removing the vulnerable code in version 26.6 of each operating system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43800 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43800.json"
        }
      ],
      "title": "CVE-2026-43800"
    },
    {
      "cve": "CVE-2026-43801",
      "notes": [
        {
          "category": "description",
          "text": "Improved security checks were implemented in iOS 26.6 and macOS Sequoia 15.7.8 to prevent apps from unauthorized access to sensitive user data, addressing a significant privacy vulnerability.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43801 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43801.json"
        }
      ],
      "title": "CVE-2026-43801"
    },
    {
      "cve": "CVE-2026-43802",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability causing unexpected system termination was addressed by enhanced bounds checking in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43802 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43802.json"
        }
      ],
      "title": "CVE-2026-43802"
    },
    {
      "cve": "CVE-2026-43803",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability in multiple Apple operating systems was addressed by enhancing bounds checking to prevent remote attackers from causing unexpected system termination.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43803 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43803.json"
        }
      ],
      "title": "CVE-2026-43803"
    },
    {
      "cve": "CVE-2026-43804",
      "notes": [
        {
          "category": "description",
          "text": "An app denial-of-service issue triggered by visiting a website was resolved through improved state management in Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, and visionOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43804 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43804.json"
        }
      ],
      "title": "CVE-2026-43804"
    },
    {
      "cve": "CVE-2026-43805",
      "notes": [
        {
          "category": "description",
          "text": "A race condition causing potential system termination or kernel memory corruption was resolved by enhanced state handling in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43805 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43805.json"
        }
      ],
      "title": "CVE-2026-43805"
    },
    {
      "cve": "CVE-2026-43806",
      "notes": [
        {
          "category": "description",
          "text": "A denial of service vulnerability in macOS Tahoe was resolved in version 26.6 by removing the exploitable code that allowed local attackers to cause service disruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43806 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43806.json"
        }
      ],
      "title": "CVE-2026-43806"
    },
    {
      "cve": "CVE-2026-43807",
      "notes": [
        {
          "category": "description",
          "text": "Apple fixed a buffer overflow vulnerability causing unexpected app termination via malicious accessories through improved bounds checking in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS updates 26.x and 15.x.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43807 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43807.json"
        }
      ],
      "title": "CVE-2026-43807"
    },
    {
      "cve": "CVE-2026-43809",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability causing unexpected system termination was addressed through enhanced bounds checking in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43809 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43809.json"
        }
      ],
      "title": "CVE-2026-43809"
    },
    {
      "cve": "CVE-2026-43810",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling vulnerability in multiple Apple operating systems including iOS 26.6, macOS Sequoia 15.7.8, and others has been fixed, which could have allowed remote users to cause system termination or kernel memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43810 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43810.json"
        }
      ],
      "title": "CVE-2026-43810"
    },
    {
      "cve": "CVE-2026-43812",
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability causing unexpected system termination was resolved via enhanced memory management in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43812 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43812.json"
        }
      ],
      "title": "CVE-2026-43812"
    },
    {
      "cve": "CVE-2026-43813",
      "notes": [
        {
          "category": "description",
          "text": "A validation issue in iOS 26.6 and related versions was fixed by enhancing input sanitization to prevent malicious applications from bypassing code signing enforcement.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43813 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43813.json"
        }
      ],
      "title": "CVE-2026-43813"
    },
    {
      "cve": "CVE-2026-43814",
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability causing unexpected system termination was resolved via enhanced memory management in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43814 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43814.json"
        }
      ],
      "title": "CVE-2026-43814"
    },
    {
      "cve": "CVE-2026-43816",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability causing unexpected system termination was resolved by improving memory handling and implementing enhanced bounds checking across multiple OS versions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43816 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43816.json"
        }
      ],
      "title": "CVE-2026-43816"
    },
    {
      "cve": "CVE-2026-43817",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability causing unexpected system termination was addressed through improved bounds checking in iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS version 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43817 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43817.json"
        }
      ],
      "title": "CVE-2026-43817"
    },
    {
      "cve": "CVE-2026-43818",
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow vulnerability enabling arbitrary code execution via crafted images was addressed through enhanced input validation in iOS 26.6, iPadOS 26.6, and macOS versions including Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43818 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43818.json"
        }
      ],
      "title": "CVE-2026-43818"
    },
    {
      "cve": "CVE-2026-43819",
      "notes": [
        {
          "category": "description",
          "text": "macOS Tahoe 26.6 introduced additional sandbox restrictions to resolve an access issue that could allow an application to potentially access sensitive user data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43819 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43819.json"
        }
      ],
      "title": "CVE-2026-43819"
    },
    {
      "cve": "CVE-2026-43821",
      "notes": [
        {
          "category": "description",
          "text": "An access control vulnerability allowing applications to read files outside their sandbox was resolved through enhanced access restrictions in Safari 26.6, iOS 26.6, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43821 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43821.json"
        }
      ],
      "title": "CVE-2026-43821"
    },
    {
      "cve": "CVE-2026-43822",
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability in multiple Apple operating systems was addressed through improved memory management, preventing applications from causing unexpected system termination.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43822 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43822.json"
        }
      ],
      "title": "CVE-2026-43822"
    },
    {
      "cve": "CVE-2026-64691",
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability in macOS Tahoe 26.6 has been addressed through enhanced size validation to prevent unexpected system termination.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64691 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64691.json"
        }
      ],
      "title": "CVE-2026-64691"
    },
    {
      "cve": "CVE-2026-64692",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability affecting multiple Apple OS versions was fixed by improving bounds checking to prevent potential denial-of-service attacks caused by malicious applications.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64692 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64692.json"
        }
      ],
      "title": "CVE-2026-64692"
    },
    {
      "cve": "CVE-2026-64693",
      "notes": [
        {
          "category": "description",
          "text": "A type confusion vulnerability in multiple Apple operating systems was fixed by implementing improved checks to prevent denial-of-service caused by processing maliciously crafted images.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64693 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64693.json"
        }
      ],
      "title": "CVE-2026-64693"
    },
    {
      "cve": "CVE-2026-64694",
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow vulnerability causing unexpected system termination was addressed via enhanced input validation in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64694 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64694.json"
        }
      ],
      "title": "CVE-2026-64694"
    },
    {
      "cve": "CVE-2026-64695",
      "notes": [
        {
          "category": "description",
          "text": "The issue was resolved in specific macOS versions by improving memory handling to prevent remote users from causing unexpected system termination or kernel memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64695 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64695.json"
        }
      ],
      "title": "CVE-2026-64695"
    },
    {
      "cve": "CVE-2026-64696",
      "notes": [
        {
          "category": "description",
          "text": "The issue was resolved in specific macOS versions by improving memory handling to prevent remote users from causing unexpected system termination or kernel memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64696 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64696.json"
        }
      ],
      "title": "CVE-2026-64696"
    },
    {
      "cve": "CVE-2026-64697",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling flaw causing unexpected system termination or kernel memory corruption has been resolved in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64697 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64697.json"
        }
      ],
      "title": "CVE-2026-64697"
    },
    {
      "cve": "CVE-2026-64698",
      "notes": [
        {
          "category": "description",
          "text": "An issue causing unexpected system termination and unauthorized kernel memory access by apps was resolved through improved memory handling in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64698 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64698.json"
        }
      ],
      "title": "CVE-2026-64698"
    },
    {
      "cve": "CVE-2026-64699",
      "notes": [
        {
          "category": "description",
          "text": "A memory initialization flaw in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 was resolved by enhancing memory handling to prevent applications from potentially disclosing kernel memory.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64699 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64699.json"
        }
      ],
      "title": "CVE-2026-64699"
    },
    {
      "cve": "CVE-2026-64700",
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability causing unexpected system termination was addressed through improved memory management in iOS 26.6, iPadOS 26.6, multiple macOS versions, tvOS 26.6, visionOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64700 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64700.json"
        }
      ],
      "title": "CVE-2026-64700"
    },
    {
      "cve": "CVE-2026-64702",
      "notes": [
        {
          "category": "description",
          "text": "An access issue allowing an application to escape its sandbox was resolved by implementing additional sandbox restrictions in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64702 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64702.json"
        }
      ],
      "title": "CVE-2026-64702"
    },
    {
      "cve": "CVE-2026-64703",
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability causing potential denial-of-service was resolved by enhancing memory management in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64703 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64703.json"
        }
      ],
      "title": "CVE-2026-64703"
    },
    {
      "cve": "CVE-2026-64704",
      "notes": [
        {
          "category": "description",
          "text": "A type confusion vulnerability causing potential unexpected system termination was resolved through improved memory handling in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64704 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64704.json"
        }
      ],
      "title": "CVE-2026-64704"
    },
    {
      "cve": "CVE-2026-64707",
      "notes": [
        {
          "category": "description",
          "text": "A permissions vulnerability allowing unauthorized deletion of files without proper permission was fixed through improved validation in multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64707 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64707.json"
        }
      ],
      "title": "CVE-2026-64707"
    },
    {
      "cve": "CVE-2026-64708",
      "notes": [
        {
          "category": "description",
          "text": "A file quarantine bypass vulnerability in macOS was addressed by enhancing Gatekeeper checks in versions Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64708 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64708.json"
        }
      ],
      "title": "CVE-2026-64708"
    },
    {
      "cve": "CVE-2026-64709",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling issue that could allow an app to disclose kernel memory was resolved through improvements in multiple OS versions including iOS 16.6 and macOS Sequoia 15.7.8.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64709 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64709.json"
        }
      ],
      "title": "CVE-2026-64709"
    },
    {
      "cve": "CVE-2026-64710",
      "notes": [
        {
          "category": "description",
          "text": "A privacy vulnerability allowing sensitive user data leakage was addressed by removing such data in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64710 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64710.json"
        }
      ],
      "title": "CVE-2026-64710"
    },
    {
      "cve": "CVE-2026-64711",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability allowing apps to potentially leak sensitive user information was addressed through additional entitlement checks in iOS 26.6, iPadOS 26.6, and macOS versions including Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64711 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64711.json"
        }
      ],
      "title": "CVE-2026-64711"
    },
    {
      "cve": "CVE-2026-64713",
      "notes": [
        {
          "category": "description",
          "text": "Safari 26.6 and related OS versions implemented improved checks to fix the issue where websites could detect if a user had previously visited a link, enhancing user privacy.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64713 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64713.json"
        }
      ],
      "title": "CVE-2026-64713"
    },
    {
      "cve": "CVE-2026-64716",
      "notes": [
        {
          "category": "description",
          "text": "A memory corruption vulnerability caused by processing a maliciously crafted image was resolved through improved memory handling in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.6 and related releases.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64716 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64716.json"
        }
      ],
      "title": "CVE-2026-64716"
    },
    {
      "cve": "CVE-2026-64718",
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Safari causing crashes when processing malicious web content was fixed through improved memory management in multiple Apple OS versions including Safari 26.6 and iOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64718 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64718.json"
        }
      ],
      "title": "CVE-2026-64718"
    },
    {
      "cve": "CVE-2026-64719",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds access vulnerability in Safari 26.6 and related OS versions was addressed by implementing improved bounds checking to prevent crashes triggered by malicious web content.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64719 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64719.json"
        }
      ],
      "title": "CVE-2026-64719"
    },
    {
      "cve": "CVE-2026-64720",
      "notes": [
        {
          "category": "description",
          "text": "A race condition causing potential unexpected system termination was resolved by enhancing state handling in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64720 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64720.json"
        }
      ],
      "title": "CVE-2026-64720"
    },
    {
      "cve": "CVE-2026-64721",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability allowing apps to potentially access sensitive user data was addressed through improved state management in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.6 and related updates.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64721 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64721.json"
        }
      ],
      "title": "CVE-2026-64721"
    },
    {
      "cve": "CVE-2026-64722",
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability in processing 3D models was addressed through improved memory handling in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6, preventing potential disclosure of process memory.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64722 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64722.json"
        }
      ],
      "title": "CVE-2026-64722"
    },
    {
      "cve": "CVE-2026-64723",
      "notes": [
        {
          "category": "description",
          "text": "A logic flaw allowing unauthorized app access to sensitive user data was resolved through enhanced validation in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64723 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64723.json"
        }
      ],
      "title": "CVE-2026-64723"
    },
    {
      "cve": "CVE-2026-64724",
      "notes": [
        {
          "category": "description",
          "text": "A denial-of-service vulnerability caused by improper memory handling was resolved in multiple Apple operating systems including iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64724 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64724.json"
        }
      ],
      "title": "CVE-2026-64724"
    },
    {
      "cve": "CVE-2026-64725",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability in multiple Apple OS versions was fixed by improving bounds checking, preventing an app from causing a denial-of-service condition.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64725 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64725.json"
        }
      ],
      "title": "CVE-2026-64725"
    },
    {
      "cve": "CVE-2026-64726",
      "notes": [
        {
          "category": "description",
          "text": "A memory corruption vulnerability exploitable by an attacker in physical proximity was addressed through enhanced memory handling in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64726 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64726.json"
        }
      ],
      "title": "CVE-2026-64726"
    },
    {
      "cve": "CVE-2026-64727",
      "notes": [
        {
          "category": "description",
          "text": "A type confusion vulnerability causing unexpected system termination was resolved by enhancing memory handling in macOS Tahoe 26.6 and tvOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64727 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64727.json"
        }
      ],
      "title": "CVE-2026-64727"
    },
    {
      "cve": "CVE-2026-64728",
      "notes": [
        {
          "category": "description",
          "text": "A permissions issue in Safari 26.6 and related OS versions was fixed by improving validation to prevent malicious web content from violating iframe sandboxing policy.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64728 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64728.json"
        }
      ],
      "title": "CVE-2026-64728"
    },
    {
      "cve": "CVE-2026-64729",
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability in iOS 26.6 and related OS versions was resolved by improving memory handling to prevent apps from causing unexpected system termination.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64729 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64729.json"
        }
      ],
      "title": "CVE-2026-64729"
    },
    {
      "cve": "CVE-2026-64730",
      "notes": [
        {
          "category": "description",
          "text": "Safari 26.6 and related Apple operating systems addressed UI spoofing vulnerabilities caused by malicious website framing through improved user interface protections.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64730 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64730.json"
        }
      ],
      "title": "CVE-2026-64730"
    },
    {
      "cve": "CVE-2026-64731",
      "notes": [
        {
          "category": "description",
          "text": "A path handling vulnerability allowing sandbox escape was addressed through enhanced validation in macOS Sequoia 15.7.8 and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64731 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64731.json"
        }
      ],
      "title": "CVE-2026-64731"
    },
    {
      "cve": "CVE-2026-64733",
      "notes": [
        {
          "category": "description",
          "text": "A user fingerprinting vulnerability in multiple Apple operating systems was addressed by enhancing data protection in versions 26.6 to prevent privacy risks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64733 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64733.json"
        }
      ],
      "title": "CVE-2026-64733"
    },
    {
      "cve": "CVE-2026-64734",
      "notes": [
        {
          "category": "description",
          "text": "Multiple Apple operating systems including iOS, iPadOS, macOS, visionOS, and watchOS were updated with improved checks to fix sensitive data leakage caused by processing maliciously crafted contacts.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64734 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64734.json"
        }
      ],
      "title": "CVE-2026-64734"
    },
    {
      "cve": "CVE-2026-64735",
      "notes": [
        {
          "category": "description",
          "text": "An inconsistent user interface issue in multiple Apple OS versions was fixed by improving state management to prevent remote attackers from bypassing network filters.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64735 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64735.json"
        }
      ],
      "title": "CVE-2026-64735"
    },
    {
      "cve": "CVE-2026-64737",
      "notes": [
        {
          "category": "description",
          "text": "An authorization vulnerability allowing malicious applications to escape their sandbox was resolved through improved state management in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64737 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64737.json"
        }
      ],
      "title": "CVE-2026-64737"
    },
    {
      "cve": "CVE-2026-64738",
      "notes": [
        {
          "category": "description",
          "text": "A permissions vulnerability allowing malicious apps to escape their sandbox was addressed with enhanced restrictions in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64738 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64738.json"
        }
      ],
      "title": "CVE-2026-64738"
    },
    {
      "cve": "CVE-2026-64739",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability causing unexpected application termination was resolved by enhanced bounds checking across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS 26.6 and related updates.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64739 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64739.json"
        }
      ],
      "title": "CVE-2026-64739"
    },
    {
      "cve": "CVE-2026-64740",
      "notes": [
        {
          "category": "description",
          "text": "A parsing issue in directory path handling was fixed with improved validation in multiple Apple operating systems to prevent malicious apps from escaping their sandbox environments.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64740 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64740.json"
        }
      ],
      "title": "CVE-2026-64740"
    },
    {
      "cve": "CVE-2026-64743",
      "notes": [
        {
          "category": "description",
          "text": "An authorization vulnerability allowing unauthorized app access to sensitive user data was resolved via enhanced state management in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64743 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64743.json"
        }
      ],
      "title": "CVE-2026-64743"
    },
    {
      "cve": "CVE-2026-64744",
      "notes": [
        {
          "category": "description",
          "text": "An information leakage vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 was addressed by implementing additional validation to prevent apps from disclosing kernel memory.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64744 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64744.json"
        }
      ],
      "title": "CVE-2026-64744"
    },
    {
      "cve": "CVE-2026-64745",
      "notes": [
        {
          "category": "description",
          "text": "The issue allowing access to contacts and photos on a locked device was resolved by implementing additional lock screen restrictions in macOS Sequoia 15.7.8 and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64745 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64745.json"
        }
      ],
      "title": "CVE-2026-64745"
    },
    {
      "cve": "CVE-2026-64746",
      "notes": [
        {
          "category": "description",
          "text": "An authorization vulnerability allowing applications to add contacts without user consent was resolved through enhanced validation in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64746 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64746.json"
        }
      ],
      "title": "CVE-2026-64746"
    },
    {
      "cve": "CVE-2026-64747",
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability allowing arbitrary code execution with kernel privileges was fixed by enhancing size validation across multiple OS versions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64747 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64747.json"
        }
      ],
      "title": "CVE-2026-64747"
    },
    {
      "cve": "CVE-2026-64749",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling vulnerability fixed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, and visionOS 26.6 could allow apps to cause unexpected system termination or kernel memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64749 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64749.json"
        }
      ],
      "title": "CVE-2026-64749"
    },
    {
      "cve": "CVE-2026-64751",
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability causing potential system termination or kernel memory corruption has been addressed in iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS version 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64751 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64751.json"
        }
      ],
      "title": "CVE-2026-64751"
    },
    {
      "cve": "CVE-2026-64754",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability in multiple Apple operating systems was fixed by enhancing bounds checking to prevent denial-of-service attacks from maliciously crafted files.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64754 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64754.json"
        }
      ],
      "title": "CVE-2026-64754"
    },
    {
      "cve": "CVE-2026-64757",
      "notes": [
        {
          "category": "description",
          "text": "A memory corruption vulnerability causing unexpected Safari crashes when processing malicious web content was fixed in Safari 26.6 and related OS versions through improved state management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64757 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64757.json"
        }
      ],
      "title": "CVE-2026-64757"
    },
    {
      "cve": "CVE-2026-64758",
      "notes": [
        {
          "category": "description",
          "text": "An issue causing unexpected application termination when processing maliciously crafted files was resolved through improved bounds checks in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64758 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64758.json"
        }
      ],
      "title": "CVE-2026-64758"
    },
    {
      "cve": "CVE-2026-64762",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 was fixed by implementing improved bounds checking to prevent unexpected system termination caused by applications.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64762 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64762.json"
        }
      ],
      "title": "CVE-2026-64762"
    },
    {
      "cve": "CVE-2026-64763",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability in multiple Apple OS versions could allow arbitrary code execution or cause unexpected app termination when processing maliciously crafted files.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64763 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64763.json"
        }
      ],
      "title": "CVE-2026-64763"
    },
    {
      "cve": "CVE-2026-64764",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability in multiple Apple operating systems was addressed by enhanced bounds checking, preventing potential application crashes or arbitrary code execution from maliciously crafted files.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64764 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64764.json"
        }
      ],
      "title": "CVE-2026-64764"
    },
    {
      "cve": "CVE-2026-64765",
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow vulnerability in multiple Apple operating systems was fixed by enhancing input validation to prevent unexpected application termination or arbitrary code execution from maliciously crafted files.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64765 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64765.json"
        }
      ],
      "title": "CVE-2026-64765"
    },
    {
      "cve": "CVE-2026-64766",
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow vulnerability in multiple Apple operating systems was fixed by enhancing input validation to prevent unexpected application termination or arbitrary code execution from maliciously crafted files.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64766 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64766.json"
        }
      ],
      "title": "CVE-2026-64766"
    },
    {
      "cve": "CVE-2026-64767",
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 was fixed by improved bounds checking to prevent remote attackers from causing system termination or kernel memory corruption.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64767 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64767.json"
        }
      ],
      "title": "CVE-2026-64767"
    },
    {
      "cve": "CVE-2026-64768",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS 26.6 was fixed by improving input validation to prevent unexpected application termination.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64768 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64768.json"
        }
      ],
      "title": "CVE-2026-64768"
    },
    {
      "cve": "CVE-2026-64769",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability affecting multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS 26.6 and later was fixed by implementing improved bounds checking to prevent application crashes and heap corruption.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64769 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64769.json"
        }
      ],
      "title": "CVE-2026-64769"
    },
    {
      "cve": "CVE-2026-64770",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability affecting multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS 26.6 and later was fixed by implementing improved bounds checking to prevent application crashes and heap corruption.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64770 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64770.json"
        }
      ],
      "title": "CVE-2026-64770"
    },
    {
      "cve": "CVE-2026-64771",
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability allowing remote attackers to cause application termination or heap corruption was fixed with improved bounds checking in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS versions 26.6 and 15.7.8.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64771 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64771.json"
        }
      ],
      "title": "CVE-2026-64771"
    },
    {
      "cve": "CVE-2026-64772",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability allowing remote attackers to cause application crashes or heap corruption was addressed via improved input validation in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS versions 26.6 and 15.7.8.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64772 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64772.json"
        }
      ],
      "title": "CVE-2026-64772"
    },
    {
      "cve": "CVE-2026-64774",
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow vulnerability affecting multiple Apple operating systems was fixed by improved input validation to prevent application termination or heap corruption.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64774 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64774.json"
        }
      ],
      "title": "CVE-2026-64774"
    },
    {
      "cve": "CVE-2026-64775",
      "notes": [
        {
          "category": "description",
          "text": "A memory initialization flaw causing unexpected system termination was resolved in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6 via enhanced memory management.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64775 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64775.json"
        }
      ],
      "title": "CVE-2026-64775"
    },
    {
      "cve": "CVE-2026-64776",
      "notes": [
        {
          "category": "description",
          "text": "An issue allowing an application to potentially disclose kernel memory was resolved through enhanced bounds checking in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64776 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64776.json"
        }
      ],
      "title": "CVE-2026-64776"
    },
    {
      "cve": "CVE-2026-64783",
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Safari causing crashes when processing malicious web content was fixed in Safari 26.6 and related OS versions through improved memory management.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64783 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64783.json"
        }
      ],
      "title": "CVE-2026-64783"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Loading…