macOS Tahoe 26.7.2

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-86971: an anonymous researcher

Available for: macOS Tahoe

Impact: A malicious application may be able to bypass Privacy preferences

Description: A logging issue was addressed with improved data redaction.

CVE-2026-113898: Bhaswanth Chigurupati

Available for: macOS Tahoe

Impact: An app may be able to read sensitive location information

Description: An authorization issue was addressed with improved state management.

CVE-2026-112551: Nguyen Duc Anh of Noventiq, Sindre Sorhus

Available for: macOS Tahoe

Impact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84496: 준우 이, Maher Azzouzi, Jonathan Bar Or (@yo_yo_yo_jbo), Marco Schmitt, Nathaniel Oh (@calysteon), Aswin Kumar Gokulakannan, Narendra Singh (@_3P1C), Thanatos Tian (HKPolyU) & wgg with Diffract, Jakob Pammer, an anonymous researcher, Bhuwan Bhetwal, Kwak kiyong (@Pwnkai23) , Song nuri

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan Dautov, Peter Malone

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or write kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112536: Ruslan Dautov, Thomas Guillem, Narendra Singh (@_3P1C), Kwak Kiyong (@Pwnkai23), Song Nuri, Thanatos Tian (HKPolyU) & wgg with Diffract

Available for: macOS Tahoe

Impact: An app may be able to bypass network restrictions

Description: This issue was addressed with improved checks.

CVE-2026-112467: Sindre Sorhus

Available for: macOS Tahoe

Impact: A remote attacker may be able to break out of the WebContent sandbox

Description: This issue was addressed with improved input validation.

CVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-86920: Johan Wahyudi

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84595: tamdao

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112696: Jaeyeong Lee

Available for: macOS Tahoe

Impact: Processing a maliciously crafted video file may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112416: an anonymous researcher, Meta Red Team X - Nik Tsytsarkin, Narendra Singh (@_3P1C), Hcamael and 章鱼哥@aipy (aipyaipy.com), Dohyeon An @PILAB Technology, Inc

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt process memory

Description: An out-of-bounds write was addressed with improved input validation.

CVE-2026-112415: Rahul Raj, Hcamael and 章鱼哥@aipy (aipyaipy.com)

Available for: macOS Tahoe

Impact: A malicious app may be able to break out of its sandbox

Description: An information leakage was addressed with additional validation.

CVE-2026-112704: Josh Maine of Calif.io

Available for: macOS Tahoe

Impact: A malicious app may be able to read or write to protected files

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: A use after free issue was addressed with improved memory management.

CVE-2026-112531: Chanwit Muenprakoddee (ChemIndy)

Available for: macOS Tahoe

Impact: An attacker with root privileges may be able to access protected user data

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-86939: Lance Cain - Senior Security Researcher at SpecterOps Inc.

Available for: macOS Tahoe

Impact: An app may bypass Gatekeeper checks

Description: A logic issue was addressed with improved state management.

CVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul Montgomery (@nullevent)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may bypass Gatekeeper checks

Description: A logic issue was addressed with improved checks.

CVE-2026-112568: an anonymous researcher

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112546: lunar815, Nathaniel Oh (@calysteon), Piotr Jerzy Duszynski, an anonymous researcher, Surej Sekhar, r3pwnx (@r3pwnx), Lily Cohl (@GenericCoding)

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with additional entitlement checks.

CVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2026-112689: Franco Belman at Blackwing Intelligence

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112470: Hcamael and 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112468: Hcamael and 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112469: Hcamael and 章鱼哥@aipy (aipyaipy.com)

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2026-112466: Hcamael and 章鱼哥@aipy (aipyaipy.com)

Available for: macOS Tahoe

Impact: An attacker in physical proximity may be able to cause a denial-of-service

Description: A null pointer dereference was addressed with improved validation.

CVE-2026-112566: Chris Bailey - Short Circuit

Available for: macOS Tahoe

Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks

Description: A file quarantine bypass was addressed with additional checks.

CVE-2026-84610: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Murray Mike

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to heap corruption

Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2026-112670: Bhaswanth Chigurupati

Available for: macOS Tahoe

Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks

Description: The issue was addressed with improved checks.

CVE-2026-112672: 준우 이, Pasquale Scola

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re)

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: A logging issue was addressed with improved data redaction.

CVE-2026-84528: zenith

Available for: macOS Tahoe

Impact: An app may bypass Gatekeeper checks

Description: A file quarantine bypass was addressed with additional checks.

CVE-2026-86941: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Available for: macOS Tahoe

Impact: A malicious app may be able to gain root privileges

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-86896: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may disclose process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112429: Mateusz Jurczyk of Google Project Zero

Available for: macOS Tahoe

Impact: An app may be able to disclose kernel memory

Description: A memory initialization issue was addressed with improved memory handling.

CVE-2026-113910: Tucker Willenborg

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-112545: Frederick Kaludis (Coiffeur0x90), Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Available for: macOS Tahoe

Impact: A malicious application may be able to bypass Privacy preferences

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-112462: DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat Srisutham, Yejun Kim, an anonymous researcher, Zwei Tasse Kaffee, Lakshay Sharma (MrW0r57)

Available for: macOS Tahoe

Impact: An app may be able to modify protected parts of the file system

Description: This issue was addressed with improved handling of symlinks.

CVE-2026-86966: Jihwan Yoon

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may lead to unexpected process termination

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-112471: Meta Red Team X - Nik Tsytsarkin

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt process memory

Description: A race condition was addressed with improved locking.

CVE-2026-112708: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write was addressed with improved input validation.

CVE-2026-86969: Meta Red Team X - Nik Tsytsarkin

Available for: macOS Tahoe

Impact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory

Description: An out-of-bounds access issue was addressed with improved bounds checking.

CVE-2026-113912: an anonymous researcher, 章鱼哥@aipy (aipyaipy.com), Roman Zabicki, Anna Groza (@pwnlambda) of Calif.io

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt process memory

Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2026-113907: Meta Red Team X - Nik Tsytsarkin

Available for: macOS Tahoe

Impact: An attacker in radio range may be able to cause unexpected system termination

Description: A heap buffer overflow was addressed with improved bounds checking.

CVE-2026-112638: Altin Gashi, Përparim Mjeku, Altin Gashi

Available for: macOS Tahoe

Impact: Processing a maliciously crafted audio file may lead to memory corruption

Description: A buffer overflow was addressed with improved size validation.

CVE-2026-86972: an anonymous researcher, Meta Product Security

Available for: macOS Tahoe

Impact: Processing a maliciously crafted PDF file may lead to memory corruption

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112611: f4&Zhiniang Peng with HUST, Aobo Wang (@M4x_1997), Xiang Chen, Jakob Pammer, Anna Groza (@pwnlambda) of Calif.io, Piotr Jerzy Duszynski, an anonymous researcher

CVE-2026-112610: Meta Red Team X - Nik Tsytsarkin

Available for: macOS Tahoe

Impact: Processing a maliciously crafted video file may lead to unexpected app termination

Description: The issue was addressed with improved memory handling.

CVE-2026-86992: Niels Hofmans

Available for: macOS Tahoe

Impact: Parsing a file may lead to an unexpected app termination or arbitrary code execution

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2026-112688: 정우 하 (@0xfa11babe), Chris Bailey - Short Circuit

Available for: macOS Tahoe

Impact: A malicious app may be able to access the camera without user permission

Description: An access issue was addressed with improved access restrictions.

CVE-2026-86990: Mustafa Calap (@ordinal0, dbg.re)

Available for: macOS Tahoe

Impact: A maliciously crafted disk image may bypass Gatekeeper checks

Description: A logic issue was addressed with improved validation.

CVE-2026-65368: an anonymous researcher

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112604: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted font may result in the disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112656: Nurihan Kim (HanTul) working with TrendAI Zero Day Initiative

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A race condition was addressed with improved state handling.

CVE-2026-113900: Frederick Kaludis (Coiffeur0x90), YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab, Lakshay Sharma (MrW0r57)/WorstCase Labs., Ashish Kavishwar, Csaba Fitzl (@theevilbit) of Iru and Gergely Kalman (@gergely_kalman)

Available for: macOS Tahoe

Impact: An app with App Sandbox restrictions may be able to escape the sandbox and execute code with root privileges

Description: A use after free issue was addressed with improved memory management.

CVE-2026-84545: Jurre van Bergen - Threatnotify, Mathis Mansière, 章鱼哥@aipy (aipyaipy.com）, Redon Gashi (Sentry)

Available for: macOS Tahoe

Impact: A local attacker may be able to elevate their privileges

Description: A logic issue was addressed with improved checks.

CVE-2026-65327: Sanny Mitra

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A logic issue was addressed with improved checks.

CVE-2026-112530: Alfredo Pesoli (@__rev) of Bynar.io, Claudio Bozzato and Francesco Benvenuto of Cisco Talos

Available for: macOS Tahoe

Impact: An app may be able to bypass Gatekeeper checks

Description: This issue was addressed with improved checks.

CVE-2026-112444: Paul Montgomery (@nullevent)

Available for: macOS Tahoe

Impact: An app may bypass Gatekeeper checks

Description: A logic issue was addressed with improved checks.

CVE-2026-112428: Koh M. Nakagawa (@tsunek0h) of FFRI Security, Inc., Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Available for: macOS Tahoe

Impact: An app may be able to modify protected parts of the file system

Description: A path handling issue was addressed with improved validation.

CVE-2026-112483: Csaba Fitzl (@theevilbit) of Iru, Lyutoon

Available for: macOS Tahoe

Impact: An app may be able to cause a denial-of-service

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-112502: Narendra Singh (@_3P1C)

Available for: macOS Tahoe

Impact: An app may be able to break out of its sandbox

Description: An access issue was addressed with additional sandbox restrictions.

CVE-2026-112570: Andrey Chernykh (BypassLabs.ai), Keisuke Hosoda

Available for: macOS Tahoe

Impact: An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code

Description: The issue was addressed with improved memory handling.

CVE-2026-86958: oxsignal

Available for: macOS Tahoe

Impact: An app may be able to bypass sandbox restrictions

Description: This issue was addressed with improved access restrictions.

CVE-2026-112534: an anonymous researcher

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: A race condition was addressed with additional validation.

CVE-2026-113896: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, R4mbb

Available for: macOS Tahoe

Impact: Processing a maliciously crafted font may result in the disclosure of process memory

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2026-86970: Hcamael and 章鱼哥@aipy (aipyaipy.com)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112683: Hcamael and 章鱼哥@aipy (aipyaipy.com)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted font may result in the disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112642: Meta Red Team X - Nik Tsytsarkin

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84539: Ye Zhang (@VAR10CK) of Baidu Security

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or write kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112593: f00l (@PPPF00L) and 3ndy1(@_3ndy1)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to arbitrary code execution

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-86929: Anand (anandsreekumar.com)

Available for: macOS Tahoe

Impact: A remote attacker may cause an unexpected process termination

Description: A double free issue was addressed with improved memory management.

CVE-2026-112410: Piotr Jerzy Duszynski

Available for: macOS Tahoe

Impact: An app may be able to cause a denial-of-service

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-86942: He Wei (ギカク)

Available for: macOS Tahoe

Impact: An app may be able to access user-sensitive data

Description: This issue was addressed with improved handling of symlinks.

CVE-2026-112523: powerprove, Michael Benich, Niels Hofmans, Christian Niel Angel of Protectiv IT Security Inc. (protectiv.ph), Lyutoon, Seung Je Seong, R4mbb, Wojciech Regula of SecuRing (wojciechregula.blog)

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112424: Peter Malone

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112475: Aswin Kumar Gokulakannan, Minseok Kim, Dave G., Thanatos Tian (HKPolyU) & wgg & xmr, Marco Schmitt

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to heap corruption

Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2026-112456: Jihwan Yoon, Yash Pandya, Parth Raval

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: An access issue was addressed with additional sandbox restrictions.

CVE-2026-112647: Sattyam Yadav, onetwo, Christian Niel Angel of Protectiv IT Security Inc. (protectiv.ph), Robert Tran, Merrick Hare

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may lead to heap corruption

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-84627: ธนกฤต ทัฬหะ, Rahul Raj, Piotr Jerzy Duszynski, PETOWORKS의 Bugeun Choi (@Bugeun), Mateusz Jurczyk of Google Project Zero, f0r of MurphySec

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may result in memory corruption

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-64750: Mateusz Jurczyk of Google Project Zero, Eddy Tsalolikhin, Johann Rehberger

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may corrupt process memory

Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2026-112488: an anonymous researcher, Mateusz Jurczyk of Google Project Zero, Nik Tsytsarkin

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may result in disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112560: Wout van der Ploeg (woutvanderploeg.nl)

CVE-2026-112561: Meta Red Team X - Nik Tsytsarkin

CVE-2026-112627: Mateusz Jurczyk of Google Project Zero

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may result in disclosure of process memory

Description: A memory initialization issue was addressed with improved memory handling.

CVE-2026-112571: sh3rlock (김보겸)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-86954: Mateusz Jurczyk of Google Project Zero

CVE-2026-112634: Mateusz Jurczyk of Google Project Zero

CVE-2026-112629: Mateusz Jurczyk of Google Project Zero

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112633: Mateusz Jurczyk of Google Project Zero

CVE-2026-112614: Mateusz Jurczyk of Google Project Zero, PETOWORKS의 Bugeun Choi (@Bugeun), Rahul Raj, Piotr Jerzy Duszynski

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may result in memory corruption

Description: An integer underflow was addressed with improved input validation.

CVE-2026-112625: Mateusz Jurczyk of Google Project Zero

Available for: macOS Tahoe

Impact: Processing a maliciously crafted image may result in disclosure of process memory

Description: An uninitialized memory issue was addressed with improved memory handling.

CVE-2026-112630: Mateusz Jurczyk of Google Project Zero

CVE-2026-112632: Mateusz Jurczyk of Google Project Zero

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-112533: Andrey Chernykh, Sihyun Roh (Compsec, SNU)

Available for: macOS Tahoe

Impact: An attacker may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112515: Charles Stevenson, Mathis Mansière, Seung Je Seong

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read issue was addressed by removing the vulnerable code.

CVE-2026-112478: Nord0x, Narendra Singh (@_3P1C), Marco Schmitt, an anonymous researcher

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112554: Bhuwan Bhetwal, Kwak Kiyong (@Pwnkai23), Song Nuri, Nicolas Seriot, Tommy DeVoss from Braze Security Team (@thedawgyg), Tucker Willenborg, Navapon Premkasem, Aswin Kumar Gokulakannan, Peter Malone, Richard Zana

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A race condition was addressed with improved locking.

CVE-2026-112477: an anonymous researcher

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected changes to copy-on-write memory

Description: A memory integrity issue was addressed with improved handling of copy-on-write pages.

CVE-2026-112576: Pedro Pinho

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: A type confusion issue was addressed with improved memory handling.

CVE-2026-112606: Wang Yu

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-112532: Peter Malone

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A use after free issue was addressed with improved memory management.

CVE-2026-112517: Pasquale Scola, Cem Onat Karagun, Wout van der Ploeg (woutvanderploeg.nl), John Lussier, an anonymous researcher

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-112516: an anonymous researcher, greenbynox

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: The issue was addressed with improved memory handling.

CVE-2026-112698: OpenAI, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Available for: macOS Tahoe

Impact: An attacker may be able to cause unexpected system termination or corrupt kernel memory

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-112514: Marc Newlin of SkySafe, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., greenbynox

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or write kernel memory

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-84495: Wang Yu

Available for: macOS Tahoe

Impact: An app may be able to execute arbitrary code with kernel privileges

Description: A use after free issue was addressed with improved memory management.

CVE-2026-86916: Wang Yu

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-65350: Xinru Chi of Pangu Lab, Tim Michaud (@TimGMichaud) of Aginor.ai, Nebula Security (@nebusecurity)

Available for: macOS Tahoe

Impact: A malicious app may be able to break out of its sandbox

Description: A race condition was addressed with additional validation.

CVE-2026-112543: f0r of MurphySec

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112476: Arnold Cartagena, Matt Suiche (@msuiche) of Tolmo

Available for: macOS Tahoe

Impact: An unprivileged attacker may be able to execute arbitrary code as root

Description: A logic issue was addressed with improved state management.

CVE-2026-112438: Jakob Pammer

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: A null pointer dereference was addressed with improved input validation.

CVE-2026-86964: Ryan Hileman via Xint Code (xint.io)

Available for: macOS Tahoe

Impact: An app may be able to determine kernel memory layout

Description: An information disclosure issue was addressed with improved state management.

CVE-2026-112665: Will Estes

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: A race condition was addressed with improved state handling.

CVE-2026-112501: Cem Onat Karagun

Available for: macOS Tahoe

Impact: An app may be able to bypass Privacy preferences

Description: This issue was addressed with improved checks.

CVE-2026-112624: Jerry L. Knot

Available for: macOS Tahoe

Impact: An app may bypass Gatekeeper checks

Description: A file quarantine bypass was addressed with additional checks.

CVE-2026-112494: Yiğit Can YILMAZ (@yilmazcanyigit)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112522: Eliya M., Viacheslav Radiukov, Tristan Madani (Talence Security), Robert Tran

Available for: macOS Tahoe

Impact: An malicious app may be able to create files in protected directories

Description: This issue was addressed with improved checks.

CVE-2026-86945: an anonymous researcher, Andrey Chernykh

Available for: macOS Tahoe

Impact: An app may be able to break out of its sandbox

Description: This issue was addressed with improved permissions checking.

CVE-2026-112497: Claudio Bozzato and Francesco Benvenuto of Cisco Talos

Available for: macOS Tahoe

Impact: Processing a maliciously crafted message may lead to a denial-of-service

Description: A stack overflow was addressed with improved input validation.

CVE-2026-112414: Daniel Rodríguez, Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: A remote attacker may be able to cause a denial-of-service

Description: A resource exhaustion issue was addressed with improved input validation.

CVE-2026-112671: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: A race condition was addressed with additional validation.

CVE-2026-113915: Abodi Dawoud, Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Ilya Andr (andrd3v) of Positive Technologies, Zhongquan Li (@Guluisacat)

Available for: macOS Tahoe

Impact: A remote attacker may be able to cause unexpected app termination

Description: An input validation issue was addressed with improved input validation.

CVE-2026-112682: Mahmoud Abdelmoniem

Available for: macOS Tahoe

Impact: An app may be able to read files outside of its sandbox

Description: An access issue was addressed with improved access restrictions.

CVE-2026-84542: Mustafa Ahmed, an anonymous researcher

Available for: macOS Tahoe

Impact: Processing a maliciously crafted 3D model may lead to memory corruption

Description: An integer overflow was addressed with improved input validation.

CVE-2026-112565: Musaab Khan (@bxff), Hcamael and 章鱼哥@aipy (aipyaipy.com), Saoud Khalifah, stratan (@5tratan), Niels Hofmans

CVE-2026-112449: ret2happy (@ret2happy)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112413: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112553: stratan (@5tratan)

CVE-2026-112563: stratan (@5tratan)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted 3D model may lead to memory corruption

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112461: 진규정 (Gyujeong Jin, @G1uN4sh), Lucas Parnell, Nathaniel Oh (@calysteon), Meta Red Team X - Nik Tsytsarkin, YingMuo (@YingMuo) of DEVCORE Research Team, ret2happy (@ret2happy)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted 3D model may lead to memory corruption

Description: The issue was addressed with improved memory handling.

CVE-2026-112485: Nik Tsytsarkin

Available for: macOS Tahoe

Impact: Processing a 3D model may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112486: Md Rasel Bhuyan (www.linkedin.com/in/rasel-bhuyan), Musaab Khan (@bxff)

Available for: macOS Tahoe

Impact: An app may be able to cause a denial-of-service

Description: A type confusion issue was addressed with improved memory handling.

CVE-2026-112550: Jonathan Bar Or (@yo_yo_yo_jbo)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted audit file may corrupt process memory

Description: A stack buffer overflow was addressed through improved input validation.

CVE-2026-84604: Tristan Madani (Talence Security)

Available for: macOS Tahoe

Impact: An app may be able to modify protected parts of the file system

Description: A race condition was addressed with improved handling of symbolic links.

CVE-2026-112421: Csaba Fitzl (@theevilbit) of Iru and Gergely Kalman (@gergely_kalman)

Available for: macOS Tahoe

Impact: An app may be able to modify protected parts of the file system

Description: A race condition was addressed with additional validation.

CVE-2026-112442: Mickey Jin (@patch1t)

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-65397: Varik Matevosyan (@D4RK7ET), an anonymous researcher

Available for: macOS Tahoe

Impact: An app may be able to bypass certain Privacy preferences

Description: An authorization issue was addressed with improved state management.

CVE-2026-112660: Prafull Dhiman, Alto_00000

Available for: macOS Tahoe

Impact: An app may be able to access a user's Photos Library

Description: This issue was addressed with additional entitlement checks.

CVE-2026-112676: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: The issue was addressed with improved checks.

CVE-2026-113899: Siddharth Aeri

Available for: macOS Tahoe

Impact: A malicious app may be able to intercept network traffic

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-112542: Gabriel '0xv1n' Cardona, Mrunal Chawda, Kujtim Kryeziu (Sentry), Tristan Madani (Talence Security)

Available for: macOS Tahoe

Impact: A malicious app may be able to break out of its sandbox

Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-112562: 도현 김, Ithrael, YEONGJAE SHIN, an anonymous researcher

Available for: macOS Tahoe

Impact: A malicious application may bypass Gatekeeper checks

Description: This issue was addressed with improved validation of file attributes.

CVE-2026-64789: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs (nosebeard.co), an anonymous researcher

Available for: macOS Tahoe

Impact: An app may be able to break out of its sandbox

Description: An access issue was addressed with additional sandbox restrictions.

CVE-2026-112569: Csaba Fitzl (@theevilbit) of Iru, an anonymous researcher

CVE-2026-112498: an anonymous researcher

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112491: Hongsik Kim (mnur)

Available for: macOS Tahoe

Impact: An attacker on the local network may be able to cause unexpected system termination or corrupt process memory

Description: A double free issue was addressed with improved memory management.

CVE-2026-112457: Efstratios Kaplanellis (@5tratan) of Almamater Technologies, Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: A user with screen sharing access may be able to view another user's screen

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-112480: Andrey Chernykh, ruitong (@abstract)

Available for: macOS Tahoe

Impact: An application may be able to execute arbitrary code with system privileges

Description: An authorization issue was addressed with improved access control.

CVE-2026-112677: an anonymous researcher, Niels Hofmans, 도현 김, Junyeong Lee (jylab.github.io), Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Jonghoon Han (Aegis)

Available for: macOS Tahoe

Impact: Processing a 3D model may result in disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112425: stratan (@5tratan)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112423: Rahul Raj

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An integer overflow was addressed with improved input validation.

CVE-2026-112540: f4&Zhiniang Peng with HUST, Geonha Lee (@leegn4a), Kwak Kiyong (@Pwnkai23), Song Nuri, Wout van der Ploeg (woutvanderploeg.nl), Substrate, Piotr Jerzy Duszynski, Tristan Madani (Talence Security), Arni Hardarson (Neonix Security), an anonymous researcher

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to heap corruption

Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2026-112464: 정우 하 (@0xfa11babe), Narendra Singh (@_3P1C)

Available for: macOS Tahoe

Impact: Processing a maliciously crafted file may lead to unexpected process termination

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-86991: Cem Onat Karagun, Yujung Choi (@Dusker), Mathis Mansière, Rahul Raj

Available for: macOS Tahoe

Impact: Connecting to a malicious VNC server may cause a denial-of-service

Description: An integer overflow was addressed with improved input validation.

CVE-2026-112519: Piotr Jerzy Duszynski, Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: A malicious app may be able to gain root privileges

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-65373: Stefan Esser (Calif), Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io), Anon Tuttu Venus, Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: An attacker with the legacy VNC password for Screen Sharing may be able to copy files to the Mac

Description: An authorization issue was addressed with improved state management.

CVE-2026-112473: Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)

Available for: macOS Tahoe

Impact: An attacker on the local network may be able to corrupt process memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112482: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: A malicious Screen Sharing peer may be able to create arbitrary symlinks as root

Description: A path handling issue was addressed with improved logic.

CVE-2026-112511: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: A malicious application may be able to execute arbitrary code with system privileges

Description: This issue was addressed with improved file handling.

CVE-2026-112484: Mahmoud Abdelmoniem

Available for: macOS Tahoe

Impact: A remote attacker may be able to cause unexpected app termination or heap corruption

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84590: Nathaniel Oh (@calysteon), Narendra Singh (@_3P1C), koocolb, Tristan Madani (Talence Security)

Available for: macOS Tahoe

Impact: An attacker on the local network may be able to cause unexpected process termination or disclose process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112481: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: Processing web content may disclose sensitive information

Description: An input validation issue was addressed with improved input validation.

CVE-2026-113913: Niels Hofmans, Stav Nir and Vladimir Tokarev

Available for: macOS Tahoe

Impact: An app may be able to break out of its sandbox

Description: The issue was addressed with improved checks.

CVE-2026-65363: Arni Hardarson (Neonix Security), Csaba Fitzl (@theevilbit) of Iru and Gergely Kalman (@gergely_kalman)

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: A privacy issue was addressed with improved memory management.

CVE-2026-86931: Pranav Gopalkrishnan, Alan Wang, Ailsa Sun, Hovav Shacham, Riccardo Paccagnella, Chris Fletcher, David Kohlbrenner

Available for: macOS Tahoe

Impact: A sandboxed process may be able to circumvent sandbox restrictions

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-112521: Richard Hyunho Im (@richeeta) at Route Zero Security, Efstratios Kaplanellis (@5tratan) of Almamater Technologies

Available for: macOS Tahoe

Impact: A local attacker may gain access to user's Keychain items

Description: This issue was addressed with improved permissions checking.

CVE-2026-28864: Alex Radocea

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A logic issue was addressed with improved checks.

CVE-2026-112668: cnitlrt (@abstract), Roman Belovitskiy, Lyutoon, Art Pllana, Redon Gashi of Sentry, ruitong (@abstract), Surej Sekhar, Teodor Sorescu (@teodorsorescu), Eddy Tsalolikhin, Franco Belman at Blackwing Intelligence, Phillip Groves, Sihyun Roh (Compsec, SNU), lokerxx

CVE-2026-86936: cnitlrt (@abstract), lokerxx

CVE-2026-112437: lokerxx

CVE-2026-112434: ruitong (@abstract), lokerxx

Available for: macOS Tahoe

Impact: An malicious app may be able to bypass certificate validation

Description: A logic issue was addressed with improved state management.

CVE-2026-112652: Aditya Kumar

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: An authentication issue was addressed with improved validation of user attributes.

CVE-2026-112430: ruitong (@abstract)

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A downgrade issue was addressed with additional version checks.

CVE-2026-112493: Mickey Jin (@patch1t)

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-112559: Lucas Lammer, Stuart Wallace

CVE-2026-112455: Rahul Raj, Chris Bailey - Short Circuit

Available for: macOS Tahoe

Impact: An app may be able to access information about a user's contacts

Description: A file access issue existed with certain home folder files. This was addressed with improved access restrictions.

CVE-2026-86984: Albin Haliti

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: An information disclosure issue was addressed with improved privacy controls.

CVE-2026-86923: Sindre Sorhus, Asaf Cohen

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-43736: Guilherme Rambo of Best Buddy Apps (rambo.codes), Abodi Dawoud

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-86946: Jakob Pammer

Available for: macOS Tahoe

Impact: An attacker with control of a network file server may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112552: Bhuwan Bhetwal, Feng Xue and XGPT of ThreatBook, Claudio Bozzato and Francesco Benvenuto of Cisco Talos

Available for: macOS Tahoe

Impact: A remote attacker may be able to cause unexpected app termination

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-112526: Nathaniel Oh (@calysteon), Narendra Singh (@_3P1C), Tristan Madani (@TristanInSec) from Talence Security, an anonymous researcher

Available for: macOS Tahoe

Impact: A remote attacker may be able to cause a denial-of-service or disclose process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112451: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: A remote attacker may be able to cause a denial-of-service

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112510: Efstratios Kaplanellis (@5tratan) of Almamater Technologies, Andrey Chernykh

Available for: macOS Tahoe

Impact: A malicious Screen Sharing peer may be able to corrupt process memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-112505: an anonymous researcher, Narendra Singh (@_3P1C), Andrey Chernykh

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112495: Lyutoon

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: A permissions issue was addressed with additional sandbox restrictions.

CVE-2026-112558: D4rthL

Available for: macOS Tahoe

Impact: A malicious application may be able to bypass Privacy preferences

Description: The issue was addressed with improved checks.

CVE-2026-112557: D4rthL

Available for: macOS Tahoe

Impact: A malicious application may be able to bypass Privacy preferences

Description: This issue was addressed with improved checks.

CVE-2026-112567: zenith

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with improved data access restriction.

CVE-2026-112628: Santiago Albertengo, Chris Bailey - Short Circuit

Available for: macOS Tahoe

Impact: An app may be able to access sensitive user data

Description: This issue was addressed by removing the vulnerable code.

CVE-2026-112441: Pan ZhenPeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A path handling issue was addressed with improved validation.

CVE-2026-112487: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab, Junyeong Lee (jylab.github.io), Gergely Kalman (@gergely_kalman), Lyutoon, Jaeyeong Lee, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-112541: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs (nosebeard.co), Maher Azzouzi, Sindre Sorhus, Paul Montgomery (@nullevent), Mickey Jin (@patch1t), Frederick Kaludis (Coiffeur0x90)

Available for: macOS Tahoe

Impact: An app may be able to modify protected parts of the file system

Description: A race condition was addressed with improved handling of symbolic links.

CVE-2026-112535: Sindre Sorhus

Available for: macOS Tahoe

Impact: An app may be able to modify protected parts of the file system

Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-112504: Mickey Jin (@patch1t)

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A race condition was addressed with additional validation.

CVE-2026-112492: Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)

Available for: macOS Tahoe

Impact: An app may be able to gain root privileges

Description: A use after free issue was addressed with improved memory management.

CVE-2026-112548: Surej Sekhar

Available for: macOS Tahoe

Impact: An attacker may tamper with code-signed applications to execute arbitrary code in the application's context

Description: A race condition was addressed with additional validation.

CVE-2026-112556: Paul Montgomery (@nullevent), Mickey Jin (@patch1t)

Available for: macOS Tahoe

Impact: An app may be able to break out of its sandbox

Description: A path handling issue was addressed with improved validation.

CVE-2026-112453: Sindre Sorhus

Available for: macOS Tahoe

Impact: An app may be able to bypass Gatekeeper checks

Description: A path handling issue was addressed with improved validation.

CVE-2026-112512: Mufeed VH of Winfunc Research (winfunc.com), YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab, Mathis Mansière

Available for: macOS Tahoe

Impact: An app may be able to bypass Privacy preferences

Description: An authorization issue was addressed with improved state management.

CVE-2026-112447: 云开 江, Joshua Maina, Ithrael, Mahmoud Gamal (@Zombiehelp54)

Available for: macOS Tahoe

Impact: An app may be able to disclose kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-84498: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112529: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-112524: Thanatos Tian (HKPolyU) & wgg & 2st with Diffract, Peter Malone, Tim Michaud (@TimGMichaud) of Aginor.ai

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112508: Aditya Kumar, Aswin Kumar Gokula Kannan, David Krehwinkel

Available for: macOS Tahoe

Impact: A malicious USB device may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112479: Rotce, Sandeep Wawdane (thecybersandeep), Marc Newlin of SkySafe, Ankur Saini of Volexity, Kwak Kiyong (@Pwnkai23), Song nuri

Available for: macOS Tahoe

Impact: An app may be able to read sensitive location information

Description: This issue was addressed with improved data protection.

CVE-2026-112537: Sindre Sorhus

Available for: macOS Tahoe

Impact: An app may be able to cause unexpected system termination or corrupt process memory

Description: The issue was addressed with improved memory handling.

CVE-2026-112443: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: An attacker in radio range may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112622: Nathaniel Oh (@calysteon)

Available for: macOS Tahoe

Impact: An app may be able to monitor keystrokes without user permission

Description: The issue was addressed with improved handling of secure input state.

CVE-2026-112575: Ricardo Prado

Available for: macOS Tahoe

Impact: A malicious app may be able to break out of its sandbox

Description: A validation issue was addressed with improved input sanitization.

CVE-2026-112555: Phillip Groves