{
  "fix": "Sequoia 15.7.8",
  "url": "https://patchblox.com/security/fix/macos/sequoia-15.7.8",
  "summary": "Sequoia 15.7.8, released July 27, 2026, fixes 138 CVEs in Sequoia. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "macos",
  "type": "os-version",
  "title": "Sequoia 15.7.8",
  "released": "2026-07-27T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-64767, rated Critical",
  "supported": true,
  "cveCount": 138,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.49727,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://support.apple.com/en-us/128071",
  "appliesTo": [
    {
      "product": "Sequoia",
      "productUrl": "https://patchblox.com/security/product/macos/sequoia",
      "fixedVersion": "15.7.8",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-64767",
      "url": "https://patchblox.com/security/cve/CVE-2026-64767",
      "title": "afpfs: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "afpfs",
      "impact": "A remote attacker may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00895,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64771",
      "url": "https://patchblox.com/security/cve/CVE-2026-64771",
      "title": "Model I/O: A remote attacker may be able to cause unexpected application termination or heap corruption",
      "component": "Model I/O",
      "impact": "A remote attacker may be able to cause unexpected application termination or heap corruption",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00847,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43803",
      "url": "https://patchblox.com/security/cve/CVE-2026-43803",
      "title": "CoreAudio: A remote attacker may be able to cause unexpected system termination",
      "component": "CoreAudio",
      "impact": "A remote attacker may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.0082,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43810",
      "url": "https://patchblox.com/security/cve/CVE-2026-43810",
      "title": "Kernel: A remote user may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "Kernel",
      "impact": "A remote user may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.0082,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64770",
      "url": "https://patchblox.com/security/cve/CVE-2026-64770",
      "title": "Model I/O: A remote attacker may be able to cause unexpected application termination or heap corruption",
      "component": "Model I/O",
      "impact": "A remote attacker may be able to cause unexpected application termination or heap corruption",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00801,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64774",
      "url": "https://patchblox.com/security/cve/CVE-2026-64774",
      "title": "Model I/O: A remote attacker may be able to cause unexpected application termination or heap corruption",
      "component": "Model I/O",
      "impact": "A remote attacker may be able to cause unexpected application termination or heap corruption",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00801,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64772",
      "url": "https://patchblox.com/security/cve/CVE-2026-64772",
      "title": "Model I/O: A remote attacker may be able to cause unexpected application termination or heap corruption",
      "component": "Model I/O",
      "impact": "A remote attacker may be able to cause unexpected application termination or heap corruption",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00783,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43750",
      "url": "https://patchblox.com/security/cve/CVE-2026-43750",
      "title": "Wi\u2011Fi: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges",
      "component": "Wi\u2011Fi",
      "impact": "An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00766,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43807",
      "url": "https://patchblox.com/security/cve/CVE-2026-43807",
      "title": "MobileAccessoryUpdater: A malicious accessory may be able to cause unexpected app termination",
      "component": "MobileAccessoryUpdater",
      "impact": "A malicious accessory may be able to cause unexpected app termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00736,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64695",
      "url": "https://patchblox.com/security/cve/CVE-2026-64695",
      "title": "APFS: A remote user may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "APFS",
      "impact": "A remote user may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00729,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43682",
      "url": "https://patchblox.com/security/cve/CVE-2026-43682",
      "title": "HFS: A remote user may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "HFS",
      "impact": "A remote user may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00721,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-39868",
      "url": "https://patchblox.com/security/cve/CVE-2026-39868",
      "title": "Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.1,
      "epss": 0.00685,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43769",
      "url": "https://patchblox.com/security/cve/CVE-2026-43769",
      "title": "Kernel: An app may be able to cause unexpected system termination",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.0068,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64775",
      "url": "https://patchblox.com/security/cve/CVE-2026-64775",
      "title": "Kernel: An app may be able to cause unexpected system termination",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00665,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43778",
      "url": "https://patchblox.com/security/cve/CVE-2026-43778",
      "title": "Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00661,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43822",
      "url": "https://patchblox.com/security/cve/CVE-2026-43822",
      "title": "Kernel: An app may be able to cause unexpected system termination",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00661,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43812",
      "url": "https://patchblox.com/security/cve/CVE-2026-43812",
      "title": "Pro Res: An app may be able to cause unexpected system termination",
      "component": "Pro Res",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00632,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64731",
      "url": "https://patchblox.com/security/cve/CVE-2026-64731",
      "title": "Printing: A malicious app may be able to break out of its sandbox",
      "component": "Printing",
      "impact": "A malicious app may be able to break out of its sandbox",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00611,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43802",
      "url": "https://patchblox.com/security/cve/CVE-2026-43802",
      "title": "CoreVideo: An app may be able to cause unexpected system termination",
      "component": "CoreVideo",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00605,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43809",
      "url": "https://patchblox.com/security/cve/CVE-2026-43809",
      "title": "Kernel: An app may be able to cause unexpected system termination",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00605,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64762",
      "url": "https://patchblox.com/security/cve/CVE-2026-64762",
      "title": "AVEVideoEncoder: An app may be able to cause unexpected system termination",
      "component": "AVEVideoEncoder",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00605,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-39873",
      "url": "https://patchblox.com/security/cve/CVE-2026-39873",
      "title": "SMB: Connecting to a malicious SMB server may lead to unexpected system termination",
      "component": "SMB",
      "impact": "Connecting to a malicious SMB server may lead to unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43694",
      "url": "https://patchblox.com/security/cve/CVE-2026-43694",
      "title": "quarantine: An app may be able to cause unexpected system termination or write kernel memory",
      "component": "quarantine",
      "impact": "An app may be able to cause unexpected system termination or write kernel memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43710",
      "url": "https://patchblox.com/security/cve/CVE-2026-43710",
      "title": "HFS: An attacker may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "HFS",
      "impact": "An attacker may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43748",
      "url": "https://patchblox.com/security/cve/CVE-2026-43748",
      "title": "Apple Neural Engine: An app may be able to cause unexpected system termination",
      "component": "Apple Neural Engine",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43764",
      "url": "https://patchblox.com/security/cve/CVE-2026-43764",
      "title": "HFS: An app may be able to cause unexpected system termination",
      "component": "HFS",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43773",
      "url": "https://patchblox.com/security/cve/CVE-2026-43773",
      "title": "HFS: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory",
      "component": "HFS",
      "impact": "Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43793",
      "url": "https://patchblox.com/security/cve/CVE-2026-43793",
      "title": "DriverKit: An app may be able to cause unexpected system termination",
      "component": "DriverKit",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64694",
      "url": "https://patchblox.com/security/cve/CVE-2026-64694",
      "title": "Disk Images: An app may be able to cause unexpected system termination",
      "component": "Disk Images",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64697",
      "url": "https://patchblox.com/security/cve/CVE-2026-64697",
      "title": "HFS: An app may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "HFS",
      "impact": "An app may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64698",
      "url": "https://patchblox.com/security/cve/CVE-2026-64698",
      "title": "cd9660: An app may be able to cause unexpected system termination or read kernel memory",
      "component": "cd9660",
      "impact": "An app may be able to cause unexpected system termination or read kernel memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64704",
      "url": "https://patchblox.com/security/cve/CVE-2026-64704",
      "title": "SMB: An app may be able to cause unexpected system termination",
      "component": "SMB",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64703",
      "url": "https://patchblox.com/security/cve/CVE-2026-64703",
      "title": "WebDAV: An app may be able to cause a denial-of-service",
      "component": "WebDAV",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00569,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64738",
      "url": "https://patchblox.com/security/cve/CVE-2026-64738",
      "title": "Maps: A malicious app may be able to break out of its sandbox",
      "component": "Maps",
      "impact": "A malicious app may be able to break out of its sandbox",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.0056,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28982",
      "url": "https://patchblox.com/security/cve/CVE-2026-28982",
      "title": "Kernel: A remote user may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "Kernel",
      "impact": "A remote user may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00557,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43779",
      "url": "https://patchblox.com/security/cve/CVE-2026-43779",
      "title": "Screen Sharing Server: An app may be able to intercept network connections intended for another process",
      "component": "Screen Sharing Server",
      "impact": "An app may be able to intercept network connections intended for another process",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00541,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64702",
      "url": "https://patchblox.com/security/cve/CVE-2026-64702",
      "title": "Audio: An app may be able to break out of its sandbox",
      "component": "Audio",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00541,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43805",
      "url": "https://patchblox.com/security/cve/CVE-2026-43805",
      "title": "IOKit: An app may be able to cause unexpected system termination or write kernel memory",
      "component": "IOKit",
      "impact": "An app may be able to cause unexpected system termination or write kernel memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64740",
      "url": "https://patchblox.com/security/cve/CVE-2026-64740",
      "title": "Game Center: A malicious app may be able to break out of its sandbox",
      "component": "Game Center",
      "impact": "A malicious app may be able to break out of its sandbox",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.3,
      "epss": 0.00209,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23918",
      "url": "https://patchblox.com/security/cve/CVE-2026-23918",
      "title": "Apache HTTP Server: http2: double free and possible RCE on early reset",
      "component": "apache",
      "impact": "A remote attacker may be able to cause a denial-of-service",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.49727,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4424",
      "url": "https://patchblox.com/security/cve/CVE-2026-4424",
      "title": "Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing",
      "component": "libarchive",
      "impact": "Processing a maliciously crafted file may result in disclosure of process memory",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01287,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43661",
      "url": "https://patchblox.com/security/cve/CVE-2026-43661",
      "title": "ImageIO: Processing a maliciously crafted image may corrupt process memory",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted image may corrupt process memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.0126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28983",
      "url": "https://patchblox.com/security/cve/CVE-2026-28983",
      "title": "LaunchServices: A remote attacker may be able to cause a denial of service",
      "component": "LaunchServices",
      "impact": "A remote attacker may be able to cause a denial of service",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00808,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43777",
      "url": "https://patchblox.com/security/cve/CVE-2026-43777",
      "title": "Screen Sharing Server: A remote attacker may be able to cause a denial of service",
      "component": "Screen Sharing Server",
      "impact": "A remote attacker may be able to cause a denial of service",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00698,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64768",
      "url": "https://patchblox.com/security/cve/CVE-2026-64768",
      "title": "Model I/O: A remote attacker may cause an unexpected app termination",
      "component": "Model I/O",
      "impact": "A remote attacker may cause an unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.1,
      "epss": 0.00574,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28936",
      "url": "https://patchblox.com/security/cve/CVE-2026-28936",
      "title": "CoreServices: Processing a maliciously crafted file may lead to unexpected app termination",
      "component": "CoreServices",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00556,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43818",
      "url": "https://patchblox.com/security/cve/CVE-2026-43818",
      "title": "ImageIO: Processing a maliciously crafted image may lead to arbitrary code execution",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted image may lead to arbitrary code execution",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00546,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64739",
      "url": "https://patchblox.com/security/cve/CVE-2026-64739",
      "title": "Libnotify: An attacker may be able to cause unexpected app termination",
      "component": "Libnotify",
      "impact": "An attacker may be able to cause unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00515,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-3783",
      "url": "https://patchblox.com/security/cve/CVE-2026-3783",
      "title": "token leak with redirect and netrc",
      "component": "curl",
      "impact": "Authentication credentials may be sent to a server on another origin",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00495,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43815",
      "url": "https://patchblox.com/security/cve/CVE-2026-43815",
      "title": "afpfs: Connecting to a malicious afpfs server may lead to kernel memory corruption",
      "component": "afpfs",
      "impact": "Connecting to a malicious afpfs server may lead to kernel memory corruption",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00479,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28912",
      "url": "https://patchblox.com/security/cve/CVE-2026-28912",
      "title": "PackageKit: A user may be able to elevate privileges",
      "component": "PackageKit",
      "impact": "A user may be able to elevate privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00257,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43698",
      "url": "https://patchblox.com/security/cve/CVE-2026-43698",
      "title": "CUPS: An app may be able to gain root privileges",
      "component": "CUPS",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0022,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28981",
      "url": "https://patchblox.com/security/cve/CVE-2026-28981",
      "title": "HFS: Processing a maliciously crafted image may lead to arbitrary code execution",
      "component": "HFS",
      "impact": "Processing a maliciously crafted image may lead to arbitrary code execution",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43776",
      "url": "https://patchblox.com/security/cve/CVE-2026-43776",
      "title": "AppleDouble: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution",
      "component": "AppleDouble",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64747",
      "url": "https://patchblox.com/security/cve/CVE-2026-64747",
      "title": "AVEVideoEncoder: An app may be able to execute arbitrary code with kernel privileges",
      "component": "AVEVideoEncoder",
      "impact": "An app may be able to execute arbitrary code with kernel privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43772",
      "url": "https://patchblox.com/security/cve/CVE-2026-43772",
      "title": "NetFSFramework: An app may be able to break out of its sandbox",
      "component": "NetFSFramework",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.2,
      "epss": 0.00188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43749",
      "url": "https://patchblox.com/security/cve/CVE-2026-43749",
      "title": "Accounts: An app may be able to gain root privileges",
      "component": "Accounts",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43723",
      "url": "https://patchblox.com/security/cve/CVE-2026-43723",
      "title": "MediaRemote: An app may be able to gain root privileges",
      "component": "MediaRemote",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28896",
      "url": "https://patchblox.com/security/cve/CVE-2026-28896",
      "title": "ppp: An attacker may be able to cause unexpected system termination or read kernel memory",
      "component": "ppp",
      "impact": "An attacker may be able to cause unexpected system termination or read kernel memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.7,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43771",
      "url": "https://patchblox.com/security/cve/CVE-2026-43771",
      "title": "Net-SNMP: An app may be able to cause a denial-of-service",
      "component": "Net-SNMP",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64763",
      "url": "https://patchblox.com/security/cve/CVE-2026-64763",
      "title": "SceneKit: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution",
      "component": "SceneKit",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64764",
      "url": "https://patchblox.com/security/cve/CVE-2026-64764",
      "title": "SceneKit: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution",
      "component": "SceneKit",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64766",
      "url": "https://patchblox.com/security/cve/CVE-2026-64766",
      "title": "SceneKit: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution",
      "component": "SceneKit",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28973",
      "url": "https://patchblox.com/security/cve/CVE-2026-28973",
      "title": "libc: A malicious app may be able to break out of its sandbox",
      "component": "libc",
      "impact": "A malicious app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.6,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43673",
      "url": "https://patchblox.com/security/cve/CVE-2026-43673",
      "title": "CoreAudio: Processing a maliciously crafted audio file may corrupt process memory",
      "component": "CoreAudio",
      "impact": "Processing a maliciously crafted audio file may corrupt process memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43711",
      "url": "https://patchblox.com/security/cve/CVE-2026-43711",
      "title": "CoreMedia: Processing a maliciously crafted video file may lead to unexpected app termination",
      "component": "CoreMedia",
      "impact": "Processing a maliciously crafted video file may lead to unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43733",
      "url": "https://patchblox.com/security/cve/CVE-2026-43733",
      "title": "Model I/O: Processing a maliciously crafted image may corrupt process memory",
      "component": "Model I/O",
      "impact": "Processing a maliciously crafted image may corrupt process memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43780",
      "url": "https://patchblox.com/security/cve/CVE-2026-43780",
      "title": "ImageIO: Processing a maliciously crafted texture may lead to unexpected app termination",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted texture may lead to unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64716",
      "url": "https://patchblox.com/security/cve/CVE-2026-64716",
      "title": "ImageIO: Processing a maliciously crafted image may corrupt process memory",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted image may corrupt process memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64749",
      "url": "https://patchblox.com/security/cve/CVE-2026-64749",
      "title": "Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43681",
      "url": "https://patchblox.com/security/cve/CVE-2026-43681",
      "title": "AppleRAID: A local user may be able to read kernel memory",
      "component": "AppleRAID",
      "impact": "A local user may be able to read kernel memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43747",
      "url": "https://patchblox.com/security/cve/CVE-2026-43747",
      "title": "Disk Images: Parsing a maliciously crafted file may lead to an unexpected app termination",
      "component": "Disk Images",
      "impact": "Parsing a maliciously crafted file may lead to an unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43724",
      "url": "https://patchblox.com/security/cve/CVE-2026-43724",
      "title": "Kernel: An app may be able to cause unexpected system termination or write kernel memory",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination or write kernel memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64692",
      "url": "https://patchblox.com/security/cve/CVE-2026-64692",
      "title": "Heimdal: An app may be able to cause a denial-of-service",
      "component": "Heimdal",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64725",
      "url": "https://patchblox.com/security/cve/CVE-2026-64725",
      "title": "Audio: An app may be able to cause a denial-of-service",
      "component": "Audio",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28945",
      "url": "https://patchblox.com/security/cve/CVE-2026-28945",
      "title": "Disk Images: An app may be able to bypass network restrictions",
      "component": "Disk Images",
      "impact": "An app may be able to bypass network restrictions",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43672",
      "url": "https://patchblox.com/security/cve/CVE-2026-43672",
      "title": "Assets: A malicious application may be able to bypass Privacy preferences",
      "component": "Assets",
      "impact": "A malicious application may be able to bypass Privacy preferences",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64737",
      "url": "https://patchblox.com/security/cve/CVE-2026-64737",
      "title": "Apple Account: A malicious app may be able to break out of its sandbox",
      "component": "Apple Account",
      "impact": "A malicious app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.2,
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-39874",
      "url": "https://patchblox.com/security/cve/CVE-2026-39874",
      "title": "Remote Management: A malicious app may be able to gain root privileges",
      "component": "Remote Management",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-39875",
      "url": "https://patchblox.com/security/cve/CVE-2026-39875",
      "title": "CUPS: A malicious app may be able to gain root privileges",
      "component": "CUPS",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28926",
      "url": "https://patchblox.com/security/cve/CVE-2026-28926",
      "title": "Disk Images: An app may be able to elevate privileges",
      "component": "Disk Images",
      "impact": "An app may be able to elevate privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43693",
      "url": "https://patchblox.com/security/cve/CVE-2026-43693",
      "title": "Core Services: An app may be able to gain root privileges",
      "component": "Core Services",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-14819",
      "url": "https://patchblox.com/security/cve/CVE-2025-14819",
      "title": "OpenSSL partial chain store policy bypass",
      "component": "curl",
      "impact": "Multiple issues in curl",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.8,
      "epss": 0.00756,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64735",
      "url": "https://patchblox.com/security/cve/CVE-2026-64735",
      "title": "Kernel: A remote attacker may be able to bypass network filters",
      "component": "Kernel",
      "impact": "A remote attacker may be able to bypass network filters",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00546,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-3784",
      "url": "https://patchblox.com/security/cve/CVE-2026-3784",
      "title": "wrong proxy connection reuse with credentials",
      "component": "curl",
      "impact": "Authentication credentials may be sent to a server on another origin",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.00448,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43761",
      "url": "https://patchblox.com/security/cve/CVE-2026-43761",
      "title": "AppleRAID: Mounting a malicious disk image may cause unexpected system termination",
      "component": "AppleRAID",
      "impact": "Mounting a malicious disk image may cause unexpected system termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00404,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43703",
      "url": "https://patchblox.com/security/cve/CVE-2026-43703",
      "title": "libxslt: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "libxslt",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00389,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43706",
      "url": "https://patchblox.com/security/cve/CVE-2026-43706",
      "title": "libxslt: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "libxslt",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00389,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28961",
      "url": "https://patchblox.com/security/cve/CVE-2026-28961",
      "title": "Network Extensions: An attacker with physical access to a locked device may be able to view sensitive user information",
      "component": "Network Extensions",
      "impact": "An attacker with physical access to a locked device may be able to view sensitive user information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.6,
      "epss": 0.00236,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43753",
      "url": "https://patchblox.com/security/cve/CVE-2026-43753",
      "title": "DriverKit: An attacker with physical access to a locked device may be able to view sensitive user information",
      "component": "DriverKit",
      "impact": "An attacker with physical access to a locked device may be able to view sensitive user information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.6,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43325",
      "url": "https://patchblox.com/security/cve/CVE-2025-43325",
      "title": "Icons: An app may be able to access sensitive user data",
      "component": "Icons",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43766",
      "url": "https://patchblox.com/security/cve/CVE-2026-43766",
      "title": "LoginWindow: An attacker with physical access to a locked device may be able to view sensitive user information",
      "component": "LoginWindow",
      "impact": "An attacker with physical access to a locked device may be able to view sensitive user information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.6,
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28914",
      "url": "https://patchblox.com/security/cve/CVE-2026-28914",
      "title": "zip: A maliciously crafted ZIP archive may bypass Gatekeeper checks",
      "component": "zip",
      "impact": "A maliciously crafted ZIP archive may bypass Gatekeeper checks",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43653",
      "url": "https://patchblox.com/security/cve/CVE-2026-43653",
      "title": "mDNSResponder: An attacker on the local network may be able to cause a denial-of-service",
      "component": "mDNSResponder",
      "impact": "An attacker on the local network may be able to cause a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.2,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43765",
      "url": "https://patchblox.com/security/cve/CVE-2026-43765",
      "title": "PackageKit: An app may be able to modify protected parts of the file system",
      "component": "PackageKit",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64714",
      "url": "https://patchblox.com/security/cve/CVE-2026-64714",
      "title": "ImageIO: Processing a maliciously crafted image may lead to a denial-of-service",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted image may lead to a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64722",
      "url": "https://patchblox.com/security/cve/CVE-2026-64722",
      "title": "Model I/O: Processing a 3D model may result in disclosure of process memory",
      "component": "Model I/O",
      "impact": "Processing a 3D model may result in disclosure of process memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64745",
      "url": "https://patchblox.com/security/cve/CVE-2026-64745",
      "title": "Siri: A person with physical access to a locked device may be able to access contacts and photos",
      "component": "Siri",
      "impact": "A person with physical access to a locked device may be able to access contacts and photos",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 2.4,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-84489",
      "url": "https://patchblox.com/security/cve/CVE-2026-84489",
      "title": "CoreUI: An app may be able to cause a denial of service",
      "component": "CoreUI",
      "impact": "An app may be able to cause a denial of service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-20672",
      "url": "https://patchblox.com/security/cve/CVE-2026-20672",
      "title": "LaunchServices: An app may be able to access sensitive user data",
      "component": "LaunchServices",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64708",
      "url": "https://patchblox.com/security/cve/CVE-2026-64708",
      "title": "DesktopServices: An app may bypass Gatekeeper checks",
      "component": "DesktopServices",
      "impact": "An app may bypass Gatekeeper checks",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43738",
      "url": "https://patchblox.com/security/cve/CVE-2026-43738",
      "title": "CoreUI: Processing a maliciously crafted asset catalog may result in disclosure of process memory",
      "component": "CoreUI",
      "impact": "Processing a maliciously crafted asset catalog may result in disclosure of process memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43774",
      "url": "https://patchblox.com/security/cve/CVE-2026-43774",
      "title": "Spotlight: An app may be able to access sensitive user data",
      "component": "Spotlight",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43782",
      "url": "https://patchblox.com/security/cve/CVE-2026-43782",
      "title": "Kernel: An app may be able to access sensitive user data",
      "component": "Kernel",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64699",
      "url": "https://patchblox.com/security/cve/CVE-2026-64699",
      "title": "WebDAV: An app may be able to disclose kernel memory",
      "component": "WebDAV",
      "impact": "An app may be able to disclose kernel memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64710",
      "url": "https://patchblox.com/security/cve/CVE-2026-64710",
      "title": "Crash Reporter: An app may be able to leak sensitive user information",
      "component": "Crash Reporter",
      "impact": "An app may be able to leak sensitive user information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64776",
      "url": "https://patchblox.com/security/cve/CVE-2026-64776",
      "title": "Disk Images: An app may be able to disclose kernel memory",
      "component": "Disk Images",
      "impact": "An app may be able to disclose kernel memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43714",
      "url": "https://patchblox.com/security/cve/CVE-2026-43714",
      "title": "Foundation: A malicious app may be able to access protected user data",
      "component": "Foundation",
      "impact": "A malicious app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43754",
      "url": "https://patchblox.com/security/cve/CVE-2026-43754",
      "title": "Kernel: An app may be able to leak sensitive kernel state",
      "component": "Kernel",
      "impact": "An app may be able to leak sensitive kernel state",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43758",
      "url": "https://patchblox.com/security/cve/CVE-2026-43758",
      "title": "Data Detectors UI: An app may be able to access sensitive user data",
      "component": "Data Detectors UI",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43796",
      "url": "https://patchblox.com/security/cve/CVE-2026-43796",
      "title": "Game Center: An app may be able to access sensitive user data",
      "component": "Game Center",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43801",
      "url": "https://patchblox.com/security/cve/CVE-2026-43801",
      "title": "App Store: An app may be able to access sensitive user data",
      "component": "App Store",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64709",
      "url": "https://patchblox.com/security/cve/CVE-2026-64709",
      "title": "Kernel: An app may be able to disclose kernel memory",
      "component": "Kernel",
      "impact": "An app may be able to disclose kernel memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64721",
      "url": "https://patchblox.com/security/cve/CVE-2026-64721",
      "title": "Kernel: An app may be able to access sensitive user data",
      "component": "Kernel",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64734",
      "url": "https://patchblox.com/security/cve/CVE-2026-64734",
      "title": "Contacts: Processing a maliciously crafted contact may leak sensitive data",
      "component": "Contacts",
      "impact": "Processing a maliciously crafted contact may leak sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64744",
      "url": "https://patchblox.com/security/cve/CVE-2026-64744",
      "title": "Kernel: An app may be able to disclose kernel memory",
      "component": "Kernel",
      "impact": "An app may be able to disclose kernel memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28932",
      "url": "https://patchblox.com/security/cve/CVE-2026-28932",
      "title": "xar: An app may be able to cause a denial of service",
      "component": "xar",
      "impact": "An app may be able to cause a denial of service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43768",
      "url": "https://patchblox.com/security/cve/CVE-2026-43768",
      "title": "udf: An app may be able to cause unexpected system termination",
      "component": "udf",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43744",
      "url": "https://patchblox.com/security/cve/CVE-2026-43744",
      "title": "CoreAudio: Processing an audio stream in a maliciously crafted media file may terminate the process",
      "component": "CoreAudio",
      "impact": "Processing an audio stream in a maliciously crafted media file may terminate the process",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64693",
      "url": "https://patchblox.com/security/cve/CVE-2026-64693",
      "title": "ImageIO: Processing a maliciously crafted image may lead to a denial-of-service",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted image may lead to a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64754",
      "url": "https://patchblox.com/security/cve/CVE-2026-64754",
      "title": "ImageIO: Processing a maliciously crafted file may lead to a denial-of-service",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted file may lead to a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28849",
      "url": "https://patchblox.com/security/cve/CVE-2026-28849",
      "title": "BOM: A maliciously crafted ZIP archive may bypass Gatekeeper checks",
      "component": "BOM",
      "impact": "A maliciously crafted ZIP archive may bypass Gatekeeper checks",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28900",
      "url": "https://patchblox.com/security/cve/CVE-2026-28900",
      "title": "libarchive: A maliciously crafted ZIP archive may bypass Gatekeeper checks",
      "component": "libarchive",
      "impact": "A maliciously crafted ZIP archive may bypass Gatekeeper checks",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43756",
      "url": "https://patchblox.com/security/cve/CVE-2026-43756",
      "title": "Control Center: An app may be able to access user-sensitive data",
      "component": "Control Center",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-28933",
      "url": "https://patchblox.com/security/cve/CVE-2026-28933",
      "title": "ppp: An app may be able to cause unexpected system termination",
      "component": "ppp",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43763",
      "url": "https://patchblox.com/security/cve/CVE-2026-43763",
      "title": "ATS: An app may be able to read files outside of its sandbox",
      "component": "ATS",
      "impact": "An app may be able to read files outside of its sandbox",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43775",
      "url": "https://patchblox.com/security/cve/CVE-2026-43775",
      "title": "CoreMedia: An app may be able to access sensitive user data",
      "component": "CoreMedia",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64707",
      "url": "https://patchblox.com/security/cve/CVE-2026-64707",
      "title": "BackgroundAssets: An app may be able to delete files for which it does not have permission",
      "component": "BackgroundAssets",
      "impact": "An app may be able to delete files for which it does not have permission",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64711",
      "url": "https://patchblox.com/security/cve/CVE-2026-64711",
      "title": "NSColorPanel: An app may be able to leak sensitive user information",
      "component": "NSColorPanel",
      "impact": "An app may be able to leak sensitive user information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64723",
      "url": "https://patchblox.com/security/cve/CVE-2026-64723",
      "title": "Kernel: An app may be able to access sensitive user data",
      "component": "Kernel",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43722",
      "url": "https://patchblox.com/security/cve/CVE-2026-43722",
      "title": "Kernel: An app may be able to leak sensitive kernel state",
      "component": "Kernel",
      "impact": "An app may be able to leak sensitive kernel state",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43767",
      "url": "https://patchblox.com/security/cve/CVE-2026-43767",
      "title": "HFS: An app may be able to cause unexpected system termination",
      "component": "HFS",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-65404",
      "url": "https://patchblox.com/security/cve/CVE-2026-65404",
      "title": "Accounts: A malicious application may be able to bypass Privacy preferences",
      "component": "Accounts",
      "impact": "A malicious application may be able to bypass Privacy preferences",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43665",
      "url": "https://patchblox.com/security/cve/CVE-2026-43665",
      "title": "Screen Sharing Server: A local attacker may be able to determine the legacy VNC password configured for Screen Sharing",
      "component": "Screen Sharing Server",
      "impact": "A local attacker may be able to determine the legacy VNC password configured for Screen Sharing",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64717",
      "url": "https://patchblox.com/security/cve/CVE-2026-64717",
      "title": "Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.3,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43781",
      "url": "https://patchblox.com/security/cve/CVE-2026-43781",
      "title": "Apple Account: An app may be able to access sensitive user data",
      "component": "Apple Account",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.7,
      "epss": 0.00115,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-14017",
      "url": "https://patchblox.com/security/cve/CVE-2025-14017",
      "title": "broken TLS options for threaded LDAPS",
      "component": "curl",
      "impact": "Multiple issues in curl",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.3,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43770",
      "url": "https://patchblox.com/security/cve/CVE-2026-43770",
      "title": "StorageKit: An app may be able to access sensitive user data",
      "component": "StorageKit",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.7,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}