{
  "fix": "Sequoia 15.7.7",
  "url": "https://patchblox.com/security/fix/macos/sequoia-15.7.7",
  "summary": "Sequoia 15.7.7, released May 11, 2026, fixes 46 CVEs in Sequoia. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "macos",
  "type": "os-version",
  "title": "Sequoia 15.7.7",
  "released": "2026-05-11T00:00:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2026-43668, high severity",
  "supported": true,
  "cveCount": 46,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.06498,
  "maxCvss": 8.8,
  "vendorAdvisory": "https://support.apple.com/en-us/127116",
  "appliesTo": [
    {
      "product": "Sequoia",
      "productUrl": "https://patchblox.com/security/product/macos/sequoia",
      "fixedVersion": "15.7.7",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-43668",
      "url": "https://patchblox.com/security/cve/CVE-2026-43668",
      "title": "mDNSResponder: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "mDNSResponder",
      "impact": "A remote attacker may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.01115,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28952",
      "url": "https://patchblox.com/security/cve/CVE-2026-28952",
      "title": "Kernel: An app may be able to cause unexpected system termination",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.008,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28846",
      "url": "https://patchblox.com/security/cve/CVE-2026-28846",
      "title": "SceneKit: A remote attacker may be able to cause unexpected app termination",
      "component": "SceneKit",
      "impact": "A remote attacker may be able to cause unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00729,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28959",
      "url": "https://patchblox.com/security/cve/CVE-2026-28959",
      "title": "APFS: An app may be able to cause unexpected system termination",
      "component": "APFS",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00605,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28940",
      "url": "https://patchblox.com/security/cve/CVE-2026-28940",
      "title": "Model I/O: Processing a maliciously crafted image may corrupt process memory",
      "component": "Model I/O",
      "impact": "Processing a maliciously crafted image may corrupt process memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00597,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28848",
      "url": "https://patchblox.com/security/cve/CVE-2026-28848",
      "title": "SMB: A remote attacker may be able to cause unexpected system termination",
      "component": "SMB",
      "impact": "A remote attacker may be able to cause unexpected system termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00541,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28969",
      "url": "https://patchblox.com/security/cve/CVE-2026-28969",
      "title": "IOKit: An app may be able to cause unexpected system termination",
      "component": "IOKit",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.0053,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28908",
      "url": "https://patchblox.com/security/cve/CVE-2026-28908",
      "title": "Kernel: An app may be able to modify protected parts of the file system",
      "component": "Kernel",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00483,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28941",
      "url": "https://patchblox.com/security/cve/CVE-2026-28941",
      "title": "Model I/O: Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents",
      "component": "Model I/O",
      "impact": "Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00458,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28943",
      "url": "https://patchblox.com/security/cve/CVE-2026-28943",
      "title": "IOHIDFamily: An app may be able to determine kernel memory layout",
      "component": "IOHIDFamily",
      "impact": "An app may be able to determine kernel memory layout",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.0044,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28987",
      "url": "https://patchblox.com/security/cve/CVE-2026-28987",
      "title": "Kernel: An app may be able to leak sensitive kernel state",
      "component": "Kernel",
      "impact": "An app may be able to leak sensitive kernel state",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.0044,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28906",
      "url": "https://patchblox.com/security/cve/CVE-2026-28906",
      "title": "Networking: An attacker may be able to track users through their IP address",
      "component": "Networking",
      "impact": "An attacker may be able to track users through their IP address",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.0043,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28986",
      "url": "https://patchblox.com/security/cve/CVE-2026-28986",
      "title": "Kernel: An app may be able to cause unexpected system termination",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00413,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28929",
      "url": "https://patchblox.com/security/cve/CVE-2026-28929",
      "title": "Mail Drafts: Replying to an email could display remote images in Mail in Lockdown Mode",
      "component": "Mail Drafts",
      "impact": "Replying to an email could display remote images in Mail in Lockdown Mode",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.0041,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28974",
      "url": "https://patchblox.com/security/cve/CVE-2026-28974",
      "title": "Spotlight: An app may be able to cause a denial-of-service",
      "component": "Spotlight",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00407,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28954",
      "url": "https://patchblox.com/security/cve/CVE-2026-28954",
      "title": "Kernel: A maliciously crafted disk image may bypass Gatekeeper checks",
      "component": "Kernel",
      "impact": "A maliciously crafted disk image may bypass Gatekeeper checks",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00387,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28990",
      "url": "https://patchblox.com/security/cve/CVE-2026-28990",
      "title": "ImageIO: Processing a maliciously crafted image may corrupt process memory",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted image may corrupt process memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00348,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43654",
      "url": "https://patchblox.com/security/cve/CVE-2026-43654",
      "title": "Kernel: An app may be able to disclose kernel memory",
      "component": "Kernel",
      "impact": "An app may be able to disclose kernel memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00348,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-39870",
      "url": "https://patchblox.com/security/cve/CVE-2026-39870",
      "title": "SceneKit: Processing a maliciously crafted image may corrupt process memory",
      "component": "SceneKit",
      "impact": "Processing a maliciously crafted image may corrupt process memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00311,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-39871",
      "url": "https://patchblox.com/security/cve/CVE-2026-39871",
      "title": "TV App: An app may be able to observe unprotected user data",
      "component": "TV App",
      "impact": "An app may be able to observe unprotected user data",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00311,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28924",
      "url": "https://patchblox.com/security/cve/CVE-2026-28924",
      "title": "Sync Services: An app may be able to access Contacts without user consent",
      "component": "Sync Services",
      "impact": "An app may be able to access Contacts without user consent",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00306,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43656",
      "url": "https://patchblox.com/security/cve/CVE-2026-43656",
      "title": "Quick Look: Parsing a maliciously crafted file may lead to an unexpected app termination",
      "component": "Quick Look",
      "impact": "Parsing a maliciously crafted file may lead to an unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.3,
      "epss": 0.00265,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28915",
      "url": "https://patchblox.com/security/cve/CVE-2026-28915",
      "title": "CUPS: An app may be able to gain root privileges",
      "component": "CUPS",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28923",
      "url": "https://patchblox.com/security/cve/CVE-2026-28923",
      "title": "GPU Drivers: A malicious app may be able to break out of its sandbox",
      "component": "GPU Drivers",
      "impact": "A malicious app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28919",
      "url": "https://patchblox.com/security/cve/CVE-2026-28919",
      "title": "StorageKit: An app may be able to gain root privileges",
      "component": "StorageKit",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00149,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28840",
      "url": "https://patchblox.com/security/cve/CVE-2026-28840",
      "title": "PackageKit: An app may be able to gain root privileges",
      "component": "PackageKit",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28978",
      "url": "https://patchblox.com/security/cve/CVE-2026-28978",
      "title": "Installer: A malicious app may be able to break out of its sandbox",
      "component": "Installer",
      "impact": "A malicious app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28951",
      "url": "https://patchblox.com/security/cve/CVE-2026-28951",
      "title": "Kernel: An app may be able to gain root privileges",
      "component": "Kernel",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43524",
      "url": "https://patchblox.com/security/cve/CVE-2025-43524",
      "title": "Icons: An app may be able to break out of its sandbox",
      "component": "Icons",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28819",
      "url": "https://patchblox.com/security/cve/CVE-2026-28819",
      "title": "Wi-Fi: An app may be able to execute arbitrary code with kernel privileges",
      "component": "Wi-Fi",
      "impact": "An app may be able to execute arbitrary code with kernel privileges",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.4,
      "epss": 0.06498,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28972",
      "url": "https://patchblox.com/security/cve/CVE-2026-28972",
      "title": "Kernel: An app may be able to cause unexpected system termination or write kernel memory",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination or write kernel memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.01385,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28878",
      "url": "https://patchblox.com/security/cve/CVE-2026-28878",
      "title": "Crash Reporter: An app may be able to enumerate a user\u0027s installed apps",
      "component": "Crash Reporter",
      "impact": "An app may be able to enumerate a user\u0027s installed apps",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00898,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28956",
      "url": "https://patchblox.com/security/cve/CVE-2026-28956",
      "title": "AppleJPEG: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory",
      "component": "AppleJPEG",
      "impact": "Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00521,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28920",
      "url": "https://patchblox.com/security/cve/CVE-2026-28920",
      "title": "zlib: Visiting a maliciously crafted website may leak sensitive data",
      "component": "zlib",
      "impact": "Visiting a maliciously crafted website may leak sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00323,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28922",
      "url": "https://patchblox.com/security/cve/CVE-2026-28922",
      "title": "CoreMedia: An app may be able to access private information",
      "component": "CoreMedia",
      "impact": "An app may be able to access private information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00322,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-39869",
      "url": "https://patchblox.com/security/cve/CVE-2026-39869",
      "title": "Audio: Processing an audio stream in a maliciously crafted media file may terminate the process",
      "component": "Audio",
      "impact": "Processing an audio stream in a maliciously crafted media file may terminate the process",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.3,
      "epss": 0.0028,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28994",
      "url": "https://patchblox.com/security/cve/CVE-2026-28994",
      "title": "Wi-Fi: An attacker in a privileged network position may be able to perform denial-of-service attack using crafted Wi-Fi packets",
      "component": "Wi-Fi",
      "impact": "An attacker in a privileged network position may be able to perform denial-of-service attack using crafted Wi-Fi packets",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.3,
      "epss": 0.00242,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64732",
      "url": "https://patchblox.com/security/cve/CVE-2026-64732",
      "title": "Accessibility: An attacker with physical access may be able to access sensitive user data during iPhone Mirroring",
      "component": "Accessibility",
      "impact": "An attacker with physical access may be able to access sensitive user data during iPhone Mirroring",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.6,
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64705",
      "url": "https://patchblox.com/security/cve/CVE-2026-64705",
      "title": "HFS: An app may be able to cause unexpected system termination or write kernel memory",
      "component": "HFS",
      "impact": "An app may be able to cause unexpected system termination or write kernel memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28897",
      "url": "https://patchblox.com/security/cve/CVE-2026-28897",
      "title": "Kernel: A local user may be able to cause unexpected system termination or read kernel memory",
      "component": "Kernel",
      "impact": "A local user may be able to cause unexpected system termination or read kernel memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.2,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28977",
      "url": "https://patchblox.com/security/cve/CVE-2026-28977",
      "title": "ImageIO: Processing a maliciously crafted file may lead to unexpected app termination",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.2,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43666",
      "url": "https://patchblox.com/security/cve/CVE-2026-43666",
      "title": "mDNSResponder: An attacker on the local network may be able to cause a denial-of-service",
      "component": "mDNSResponder",
      "impact": "An attacker on the local network may be able to cause a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.2,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28992",
      "url": "https://patchblox.com/security/cve/CVE-2026-28992",
      "title": "IOHIDFamily: An attacker may be able to cause unexpected app termination",
      "component": "IOHIDFamily",
      "impact": "An attacker may be able to cause unexpected app termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.7,
      "epss": 0.00143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28993",
      "url": "https://patchblox.com/security/cve/CVE-2026-28993",
      "title": "Shortcuts: An app may be able to access user-sensitive data",
      "component": "Shortcuts",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28996",
      "url": "https://patchblox.com/security/cve/CVE-2026-28996",
      "title": "Storage: An app may be able to access sensitive user data",
      "component": "Storage",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00108,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43659",
      "url": "https://patchblox.com/security/cve/CVE-2026-43659",
      "title": "FileProvider: An app may be able to access sensitive user data",
      "component": "FileProvider",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.7,
      "epss": 0.00099,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}