# Sequoia 15.7.8 Sequoia 15.7.8, released July 27, 2026, fixes 138 CVEs in Sequoia. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/macos/sequoia-15.7.8 - Platform: macOS - Released: Jul 27, 2026 - Priority: Urgent (Closes CVE-2026-64767, rated Critical) - CVEs: 138, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://support.apple.com/en-us/128071 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Sequoia](https://patchblox.com/security/data/product/macos/sequoia.md) | | 15.7.8 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-64767](https://patchblox.com/security/data/cve/CVE-2026-64767.md) | Urgent | afpfs: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0090 | | | [CVE-2026-64771](https://patchblox.com/security/data/cve/CVE-2026-64771.md) | Urgent | Model I/O: A remote attacker may be able to cause unexpected application termination or heap corruption | 9.8 | 0.0085 | | | [CVE-2026-43803](https://patchblox.com/security/data/cve/CVE-2026-43803.md) | Urgent | CoreAudio: A remote attacker may be able to cause unexpected system termination | 9.8 | 0.0082 | | | [CVE-2026-43810](https://patchblox.com/security/data/cve/CVE-2026-43810.md) | Urgent | Kernel: A remote user may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0082 | | | [CVE-2026-64770](https://patchblox.com/security/data/cve/CVE-2026-64770.md) | Urgent | Model I/O: A remote attacker may be able to cause unexpected application termination or heap corruption | 9.8 | 0.0080 | | | [CVE-2026-64774](https://patchblox.com/security/data/cve/CVE-2026-64774.md) | Urgent | Model I/O: A remote attacker may be able to cause unexpected application termination or heap corruption | 9.8 | 0.0080 | | | [CVE-2026-64772](https://patchblox.com/security/data/cve/CVE-2026-64772.md) | Urgent | Model I/O: A remote attacker may be able to cause unexpected application termination or heap corruption | 9.8 | 0.0078 | | | [CVE-2026-43750](https://patchblox.com/security/data/cve/CVE-2026-43750.md) | Urgent | Wi‑Fi: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges | 9.8 | 0.0077 | | | [CVE-2026-43807](https://patchblox.com/security/data/cve/CVE-2026-43807.md) | Urgent | MobileAccessoryUpdater: A malicious accessory may be able to cause unexpected app termination | 9.8 | 0.0074 | | | [CVE-2026-64695](https://patchblox.com/security/data/cve/CVE-2026-64695.md) | Urgent | APFS: A remote user may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0073 | | | [CVE-2026-43682](https://patchblox.com/security/data/cve/CVE-2026-43682.md) | Urgent | HFS: A remote user may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0072 | | | [CVE-2026-39868](https://patchblox.com/security/data/cve/CVE-2026-39868.md) | Urgent | Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory | 9.1 | 0.0069 | | | [CVE-2026-43769](https://patchblox.com/security/data/cve/CVE-2026-43769.md) | Urgent | Kernel: An app may be able to cause unexpected system termination | 9.8 | 0.0068 | | | [CVE-2026-64775](https://patchblox.com/security/data/cve/CVE-2026-64775.md) | Urgent | Kernel: An app may be able to cause unexpected system termination | 9.8 | 0.0067 | | | [CVE-2026-43778](https://patchblox.com/security/data/cve/CVE-2026-43778.md) | Urgent | Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0066 | | | [CVE-2026-43822](https://patchblox.com/security/data/cve/CVE-2026-43822.md) | Urgent | Kernel: An app may be able to cause unexpected system termination | 9.8 | 0.0066 | | | [CVE-2026-43812](https://patchblox.com/security/data/cve/CVE-2026-43812.md) | Urgent | Pro Res: An app may be able to cause unexpected system termination | 9.8 | 0.0063 | | | [CVE-2026-64731](https://patchblox.com/security/data/cve/CVE-2026-64731.md) | Urgent | Printing: A malicious app may be able to break out of its sandbox | 9.8 | 0.0061 | | | [CVE-2026-43802](https://patchblox.com/security/data/cve/CVE-2026-43802.md) | Urgent | CoreVideo: An app may be able to cause unexpected system termination | 9.8 | 0.0061 | | | [CVE-2026-43809](https://patchblox.com/security/data/cve/CVE-2026-43809.md) | Urgent | Kernel: An app may be able to cause unexpected system termination | 9.8 | 0.0061 | | | [CVE-2026-64762](https://patchblox.com/security/data/cve/CVE-2026-64762.md) | Urgent | AVEVideoEncoder: An app may be able to cause unexpected system termination | 9.8 | 0.0061 | | | [CVE-2026-39873](https://patchblox.com/security/data/cve/CVE-2026-39873.md) | Urgent | SMB: Connecting to a malicious SMB server may lead to unexpected system termination | 9.8 | 0.0059 | | | [CVE-2026-43694](https://patchblox.com/security/data/cve/CVE-2026-43694.md) | Urgent | quarantine: An app may be able to cause unexpected system termination or write kernel memory | 9.8 | 0.0059 | | | [CVE-2026-43710](https://patchblox.com/security/data/cve/CVE-2026-43710.md) | Urgent | HFS: An attacker may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0059 | | | [CVE-2026-43748](https://patchblox.com/security/data/cve/CVE-2026-43748.md) | Urgent | Apple Neural Engine: An app may be able to cause unexpected system termination | 9.8 | 0.0059 | | | [CVE-2026-43764](https://patchblox.com/security/data/cve/CVE-2026-43764.md) | Urgent | HFS: An app may be able to cause unexpected system termination | 9.8 | 0.0059 | | | [CVE-2026-43773](https://patchblox.com/security/data/cve/CVE-2026-43773.md) | Urgent | HFS: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0059 | | | [CVE-2026-43793](https://patchblox.com/security/data/cve/CVE-2026-43793.md) | Urgent | DriverKit: An app may be able to cause unexpected system termination | 9.8 | 0.0059 | | | [CVE-2026-64694](https://patchblox.com/security/data/cve/CVE-2026-64694.md) | Urgent | Disk Images: An app may be able to cause unexpected system termination | 9.8 | 0.0059 | | | [CVE-2026-64697](https://patchblox.com/security/data/cve/CVE-2026-64697.md) | Urgent | HFS: An app may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0059 | | | [CVE-2026-64698](https://patchblox.com/security/data/cve/CVE-2026-64698.md) | Urgent | cd9660: An app may be able to cause unexpected system termination or read kernel memory | 9.8 | 0.0059 | | | [CVE-2026-64704](https://patchblox.com/security/data/cve/CVE-2026-64704.md) | Urgent | SMB: An app may be able to cause unexpected system termination | 9.8 | 0.0059 | | | [CVE-2026-64703](https://patchblox.com/security/data/cve/CVE-2026-64703.md) | Urgent | WebDAV: An app may be able to cause a denial-of-service | 9.8 | 0.0057 | | | [CVE-2026-64738](https://patchblox.com/security/data/cve/CVE-2026-64738.md) | Urgent | Maps: A malicious app may be able to break out of its sandbox | 9.8 | 0.0056 | | | [CVE-2026-28982](https://patchblox.com/security/data/cve/CVE-2026-28982.md) | Urgent | Kernel: A remote user may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0056 | | | [CVE-2026-43779](https://patchblox.com/security/data/cve/CVE-2026-43779.md) | Urgent | Screen Sharing Server: An app may be able to intercept network connections intended for another process | 9.8 | 0.0054 | | | [CVE-2026-64702](https://patchblox.com/security/data/cve/CVE-2026-64702.md) | Urgent | Audio: An app may be able to break out of its sandbox | 9.8 | 0.0054 | | | [CVE-2026-43805](https://patchblox.com/security/data/cve/CVE-2026-43805.md) | Urgent | IOKit: An app may be able to cause unexpected system termination or write kernel memory | 9.8 | 0.0047 | | | [CVE-2026-64740](https://patchblox.com/security/data/cve/CVE-2026-64740.md) | Urgent | Game Center: A malicious app may be able to break out of its sandbox | 9.3 | 0.0021 | | | [CVE-2026-23918](https://patchblox.com/security/data/cve/CVE-2026-23918.md) | High | Apache HTTP Server: http2: double free and possible RCE on early reset | 8.8 | 0.4973 | | | [CVE-2026-4424](https://patchblox.com/security/data/cve/CVE-2026-4424.md) | High | Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing | 7.5 | 0.0129 | | | [CVE-2026-43661](https://patchblox.com/security/data/cve/CVE-2026-43661.md) | High | ImageIO: Processing a maliciously crafted image may corrupt process memory | 7.5 | 0.0126 | | | [CVE-2026-28983](https://patchblox.com/security/data/cve/CVE-2026-28983.md) | High | LaunchServices: A remote attacker may be able to cause a denial of service | 7.5 | 0.0081 | | | [CVE-2026-43777](https://patchblox.com/security/data/cve/CVE-2026-43777.md) | High | Screen Sharing Server: A remote attacker may be able to cause a denial of service | 7.5 | 0.0070 | | | [CVE-2026-64768](https://patchblox.com/security/data/cve/CVE-2026-64768.md) | High | Model I/O: A remote attacker may cause an unexpected app termination | 8.1 | 0.0057 | | | [CVE-2026-28936](https://patchblox.com/security/data/cve/CVE-2026-28936.md) | High | CoreServices: Processing a maliciously crafted file may lead to unexpected app termination | 7.5 | 0.0056 | | | [CVE-2026-43818](https://patchblox.com/security/data/cve/CVE-2026-43818.md) | High | ImageIO: Processing a maliciously crafted image may lead to arbitrary code execution | 8.8 | 0.0055 | | | [CVE-2026-64739](https://patchblox.com/security/data/cve/CVE-2026-64739.md) | High | Libnotify: An attacker may be able to cause unexpected app termination | 8.8 | 0.0052 | | | [CVE-2026-3783](https://patchblox.com/security/data/cve/CVE-2026-3783.md) | High | token leak with redirect and netrc | 8.1 | 0.0050 | | | [CVE-2026-43815](https://patchblox.com/security/data/cve/CVE-2026-43815.md) | High | afpfs: Connecting to a malicious afpfs server may lead to kernel memory corruption | 8.8 | 0.0048 | | | [CVE-2026-28912](https://patchblox.com/security/data/cve/CVE-2026-28912.md) | High | PackageKit: A user may be able to elevate privileges | 7.8 | 0.0026 | | | [CVE-2026-43698](https://patchblox.com/security/data/cve/CVE-2026-43698.md) | High | CUPS: An app may be able to gain root privileges | 7.8 | 0.0022 | | | [CVE-2026-28981](https://patchblox.com/security/data/cve/CVE-2026-28981.md) | High | HFS: Processing a maliciously crafted image may lead to arbitrary code execution | 7.8 | 0.0020 | | | [CVE-2026-43776](https://patchblox.com/security/data/cve/CVE-2026-43776.md) | High | AppleDouble: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution | 7.8 | 0.0019 | | | [CVE-2026-64747](https://patchblox.com/security/data/cve/CVE-2026-64747.md) | High | AVEVideoEncoder: An app may be able to execute arbitrary code with kernel privileges | 7.8 | 0.0019 | | | [CVE-2026-43772](https://patchblox.com/security/data/cve/CVE-2026-43772.md) | High | NetFSFramework: An app may be able to break out of its sandbox | 8.2 | 0.0019 | | | [CVE-2026-43749](https://patchblox.com/security/data/cve/CVE-2026-43749.md) | High | Accounts: An app may be able to gain root privileges | 7.8 | 0.0019 | | | [CVE-2026-43723](https://patchblox.com/security/data/cve/CVE-2026-43723.md) | High | MediaRemote: An app may be able to gain root privileges | 7.8 | 0.0019 | | | [CVE-2026-28896](https://patchblox.com/security/data/cve/CVE-2026-28896.md) | High | ppp: An attacker may be able to cause unexpected system termination or read kernel memory | 7.7 | 0.0019 | | | [CVE-2026-43771](https://patchblox.com/security/data/cve/CVE-2026-43771.md) | High | Net-SNMP: An app may be able to cause a denial-of-service | 7.1 | 0.0018 | | | [CVE-2026-64763](https://patchblox.com/security/data/cve/CVE-2026-64763.md) | High | SceneKit: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution | 7.8 | 0.0018 | | | [CVE-2026-64764](https://patchblox.com/security/data/cve/CVE-2026-64764.md) | High | SceneKit: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution | 7.8 | 0.0018 | | | [CVE-2026-64766](https://patchblox.com/security/data/cve/CVE-2026-64766.md) | High | SceneKit: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution | 7.8 | 0.0018 | | | [CVE-2026-28973](https://patchblox.com/security/data/cve/CVE-2026-28973.md) | High | libc: A malicious app may be able to break out of its sandbox | 8.6 | 0.0017 | | | [CVE-2026-43673](https://patchblox.com/security/data/cve/CVE-2026-43673.md) | High | CoreAudio: Processing a maliciously crafted audio file may corrupt process memory | 7.8 | 0.0017 | | | [CVE-2026-43711](https://patchblox.com/security/data/cve/CVE-2026-43711.md) | High | CoreMedia: Processing a maliciously crafted video file may lead to unexpected app termination | 7.8 | 0.0017 | | | [CVE-2026-43733](https://patchblox.com/security/data/cve/CVE-2026-43733.md) | High | Model I/O: Processing a maliciously crafted image may corrupt process memory | 7.8 | 0.0017 | | | [CVE-2026-43780](https://patchblox.com/security/data/cve/CVE-2026-43780.md) | High | ImageIO: Processing a maliciously crafted texture may lead to unexpected app termination | 7.8 | 0.0017 | | | [CVE-2026-64716](https://patchblox.com/security/data/cve/CVE-2026-64716.md) | High | ImageIO: Processing a maliciously crafted image may corrupt process memory | 7.8 | 0.0017 | | | [CVE-2026-64749](https://patchblox.com/security/data/cve/CVE-2026-64749.md) | High | Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory | 7.8 | 0.0017 | | | [CVE-2026-43681](https://patchblox.com/security/data/cve/CVE-2026-43681.md) | High | AppleRAID: A local user may be able to read kernel memory | 7.1 | 0.0017 | | | [CVE-2026-43747](https://patchblox.com/security/data/cve/CVE-2026-43747.md) | High | Disk Images: Parsing a maliciously crafted file may lead to an unexpected app termination | 7.1 | 0.0017 | | | [CVE-2026-43724](https://patchblox.com/security/data/cve/CVE-2026-43724.md) | High | Kernel: An app may be able to cause unexpected system termination or write kernel memory | 7.8 | 0.0017 | | | [CVE-2026-64692](https://patchblox.com/security/data/cve/CVE-2026-64692.md) | High | Heimdal: An app may be able to cause a denial-of-service | 7.1 | 0.0016 | | | [CVE-2026-64725](https://patchblox.com/security/data/cve/CVE-2026-64725.md) | High | Audio: An app may be able to cause a denial-of-service | 7.1 | 0.0016 | | | [CVE-2026-28945](https://patchblox.com/security/data/cve/CVE-2026-28945.md) | High | Disk Images: An app may be able to bypass network restrictions | 7.1 | 0.0016 | | | [CVE-2026-43672](https://patchblox.com/security/data/cve/CVE-2026-43672.md) | High | Assets: A malicious application may be able to bypass Privacy preferences | 7.1 | 0.0016 | | | [CVE-2026-64737](https://patchblox.com/security/data/cve/CVE-2026-64737.md) | High | Apple Account: A malicious app may be able to break out of its sandbox | 8.2 | 0.0016 | | | [CVE-2026-39874](https://patchblox.com/security/data/cve/CVE-2026-39874.md) | High | Remote Management: A malicious app may be able to gain root privileges | 7.8 | 0.0015 | | | [CVE-2026-39875](https://patchblox.com/security/data/cve/CVE-2026-39875.md) | High | CUPS: A malicious app may be able to gain root privileges | 7.8 | 0.0015 | | | [CVE-2026-28926](https://patchblox.com/security/data/cve/CVE-2026-28926.md) | High | Disk Images: An app may be able to elevate privileges | 7.0 | 0.0012 | | | [CVE-2026-43693](https://patchblox.com/security/data/cve/CVE-2026-43693.md) | High | Core Services: An app may be able to gain root privileges | 7.0 | 0.0012 | | | [CVE-2025-14819](https://patchblox.com/security/data/cve/CVE-2025-14819.md) | Routine | OpenSSL partial chain store policy bypass | 6.8 | 0.0076 | | | [CVE-2026-64735](https://patchblox.com/security/data/cve/CVE-2026-64735.md) | Routine | Kernel: A remote attacker may be able to bypass network filters | 6.5 | 0.0055 | | | [CVE-2026-3784](https://patchblox.com/security/data/cve/CVE-2026-3784.md) | Routine | wrong proxy connection reuse with credentials | 6.5 | 0.0045 | | | [CVE-2026-43761](https://patchblox.com/security/data/cve/CVE-2026-43761.md) | Routine | AppleRAID: Mounting a malicious disk image may cause unexpected system termination | 6.5 | 0.0040 | | | [CVE-2026-43703](https://patchblox.com/security/data/cve/CVE-2026-43703.md) | Routine | libxslt: Processing maliciously crafted web content may lead to an unexpected process crash | 6.5 | 0.0039 | | | [CVE-2026-43706](https://patchblox.com/security/data/cve/CVE-2026-43706.md) | Routine | libxslt: Processing maliciously crafted web content may lead to an unexpected process crash | 6.5 | 0.0039 | | | [CVE-2026-28961](https://patchblox.com/security/data/cve/CVE-2026-28961.md) | Routine | Network Extensions: An attacker with physical access to a locked device may be able to view sensitive user information | 4.6 | 0.0024 | | | [CVE-2026-43753](https://patchblox.com/security/data/cve/CVE-2026-43753.md) | Routine | DriverKit: An attacker with physical access to a locked device may be able to view sensitive user information | 4.6 | 0.0022 | | | [CVE-2025-43325](https://patchblox.com/security/data/cve/CVE-2025-43325.md) | Routine | Icons: An app may be able to access sensitive user data | 5.5 | 0.0021 | | | [CVE-2026-43766](https://patchblox.com/security/data/cve/CVE-2026-43766.md) | Routine | LoginWindow: An attacker with physical access to a locked device may be able to view sensitive user information | 4.6 | 0.0020 | | | [CVE-2026-28914](https://patchblox.com/security/data/cve/CVE-2026-28914.md) | Routine | zip: A maliciously crafted ZIP archive may bypass Gatekeeper checks | 5.5 | 0.0020 | | | [CVE-2026-43653](https://patchblox.com/security/data/cve/CVE-2026-43653.md) | Routine | mDNSResponder: An attacker on the local network may be able to cause a denial-of-service | 6.2 | 0.0019 | | | [CVE-2026-43765](https://patchblox.com/security/data/cve/CVE-2026-43765.md) | Routine | PackageKit: An app may be able to modify protected parts of the file system | 5.5 | 0.0018 | | | [CVE-2026-64714](https://patchblox.com/security/data/cve/CVE-2026-64714.md) | Routine | ImageIO: Processing a maliciously crafted image may lead to a denial-of-service | 5.5 | 0.0018 | | | [CVE-2026-64722](https://patchblox.com/security/data/cve/CVE-2026-64722.md) | Routine | Model I/O: Processing a 3D model may result in disclosure of process memory | 5.5 | 0.0018 | | | [CVE-2026-64745](https://patchblox.com/security/data/cve/CVE-2026-64745.md) | Routine | Siri: A person with physical access to a locked device may be able to access contacts and photos | 2.4 | 0.0017 | | | [CVE-2026-84489](https://patchblox.com/security/data/cve/CVE-2026-84489.md) | Routine | CoreUI: An app may be able to cause a denial of service | 5.5 | 0.0017 | | | [CVE-2026-20672](https://patchblox.com/security/data/cve/CVE-2026-20672.md) | Routine | LaunchServices: An app may be able to access sensitive user data | 5.5 | 0.0017 | | | [CVE-2026-64708](https://patchblox.com/security/data/cve/CVE-2026-64708.md) | Routine | DesktopServices: An app may bypass Gatekeeper checks | 5.5 | 0.0017 | | | [CVE-2026-43738](https://patchblox.com/security/data/cve/CVE-2026-43738.md) | Routine | CoreUI: Processing a maliciously crafted asset catalog may result in disclosure of process memory | 5.5 | 0.0017 | | | [CVE-2026-43774](https://patchblox.com/security/data/cve/CVE-2026-43774.md) | Routine | Spotlight: An app may be able to access sensitive user data | 5.5 | 0.0017 | | | [CVE-2026-43782](https://patchblox.com/security/data/cve/CVE-2026-43782.md) | Routine | Kernel: An app may be able to access sensitive user data | 5.5 | 0.0017 | | | [CVE-2026-64699](https://patchblox.com/security/data/cve/CVE-2026-64699.md) | Routine | WebDAV: An app may be able to disclose kernel memory | 5.5 | 0.0017 | | | [CVE-2026-64710](https://patchblox.com/security/data/cve/CVE-2026-64710.md) | Routine | Crash Reporter: An app may be able to leak sensitive user information | 5.5 | 0.0017 | | | [CVE-2026-64776](https://patchblox.com/security/data/cve/CVE-2026-64776.md) | Routine | Disk Images: An app may be able to disclose kernel memory | 5.5 | 0.0017 | | | [CVE-2026-43714](https://patchblox.com/security/data/cve/CVE-2026-43714.md) | Routine | Foundation: A malicious app may be able to access protected user data | 5.5 | 0.0016 | | | [CVE-2026-43754](https://patchblox.com/security/data/cve/CVE-2026-43754.md) | Routine | Kernel: An app may be able to leak sensitive kernel state | 5.5 | 0.0016 | | | [CVE-2026-43758](https://patchblox.com/security/data/cve/CVE-2026-43758.md) | Routine | Data Detectors UI: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-43796](https://patchblox.com/security/data/cve/CVE-2026-43796.md) | Routine | Game Center: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-43801](https://patchblox.com/security/data/cve/CVE-2026-43801.md) | Routine | App Store: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-64709](https://patchblox.com/security/data/cve/CVE-2026-64709.md) | Routine | Kernel: An app may be able to disclose kernel memory | 5.5 | 0.0016 | | | [CVE-2026-64721](https://patchblox.com/security/data/cve/CVE-2026-64721.md) | Routine | Kernel: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-64734](https://patchblox.com/security/data/cve/CVE-2026-64734.md) | Routine | Contacts: Processing a maliciously crafted contact may leak sensitive data | 5.5 | 0.0016 | | | [CVE-2026-64744](https://patchblox.com/security/data/cve/CVE-2026-64744.md) | Routine | Kernel: An app may be able to disclose kernel memory | 5.5 | 0.0016 | | | [CVE-2026-28932](https://patchblox.com/security/data/cve/CVE-2026-28932.md) | Routine | xar: An app may be able to cause a denial of service | 5.5 | 0.0016 | | | [CVE-2026-43768](https://patchblox.com/security/data/cve/CVE-2026-43768.md) | Routine | udf: An app may be able to cause unexpected system termination | 5.5 | 0.0016 | | | [CVE-2026-43744](https://patchblox.com/security/data/cve/CVE-2026-43744.md) | Routine | CoreAudio: Processing an audio stream in a maliciously crafted media file may terminate the process | 5.5 | 0.0016 | | | [CVE-2026-64693](https://patchblox.com/security/data/cve/CVE-2026-64693.md) | Routine | ImageIO: Processing a maliciously crafted image may lead to a denial-of-service | 5.5 | 0.0016 | | | [CVE-2026-64754](https://patchblox.com/security/data/cve/CVE-2026-64754.md) | Routine | ImageIO: Processing a maliciously crafted file may lead to a denial-of-service | 5.5 | 0.0016 | | | [CVE-2026-28849](https://patchblox.com/security/data/cve/CVE-2026-28849.md) | Routine | BOM: A maliciously crafted ZIP archive may bypass Gatekeeper checks | 5.5 | 0.0016 | | | [CVE-2026-28900](https://patchblox.com/security/data/cve/CVE-2026-28900.md) | Routine | libarchive: A maliciously crafted ZIP archive may bypass Gatekeeper checks | 5.5 | 0.0016 | | | [CVE-2026-43756](https://patchblox.com/security/data/cve/CVE-2026-43756.md) | Routine | Control Center: An app may be able to access user-sensitive data | 5.5 | 0.0016 | | | [CVE-2026-28933](https://patchblox.com/security/data/cve/CVE-2026-28933.md) | Routine | ppp: An app may be able to cause unexpected system termination | 5.5 | 0.0016 | | | [CVE-2026-43763](https://patchblox.com/security/data/cve/CVE-2026-43763.md) | Routine | ATS: An app may be able to read files outside of its sandbox | 5.5 | 0.0016 | | | [CVE-2026-43775](https://patchblox.com/security/data/cve/CVE-2026-43775.md) | Routine | CoreMedia: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-64707](https://patchblox.com/security/data/cve/CVE-2026-64707.md) | Routine | BackgroundAssets: An app may be able to delete files for which it does not have permission | 5.5 | 0.0016 | | | [CVE-2026-64711](https://patchblox.com/security/data/cve/CVE-2026-64711.md) | Routine | NSColorPanel: An app may be able to leak sensitive user information | 5.5 | 0.0016 | | | [CVE-2026-64723](https://patchblox.com/security/data/cve/CVE-2026-64723.md) | Routine | Kernel: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-43722](https://patchblox.com/security/data/cve/CVE-2026-43722.md) | Routine | Kernel: An app may be able to leak sensitive kernel state | 5.5 | 0.0015 | | | [CVE-2026-43767](https://patchblox.com/security/data/cve/CVE-2026-43767.md) | Routine | HFS: An app may be able to cause unexpected system termination | 5.0 | 0.0015 | | | [CVE-2026-65404](https://patchblox.com/security/data/cve/CVE-2026-65404.md) | Routine | Accounts: A malicious application may be able to bypass Privacy preferences | 5.5 | 0.0015 | | | [CVE-2026-43665](https://patchblox.com/security/data/cve/CVE-2026-43665.md) | Routine | Screen Sharing Server: A local attacker may be able to determine the legacy VNC password configured for Screen Sharing | 5.5 | 0.0013 | | | [CVE-2026-64717](https://patchblox.com/security/data/cve/CVE-2026-64717.md) | Routine | Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory | 6.3 | 0.0012 | | | [CVE-2026-43781](https://patchblox.com/security/data/cve/CVE-2026-43781.md) | Routine | Apple Account: An app may be able to access sensitive user data | 4.7 | 0.0012 | | | [CVE-2025-14017](https://patchblox.com/security/data/cve/CVE-2025-14017.md) | Routine | broken TLS options for threaded LDAPS | 6.3 | 0.0011 | | | [CVE-2026-43770](https://patchblox.com/security/data/cve/CVE-2026-43770.md) | Routine | StorageKit: An app may be able to access sensitive user data | 4.7 | 0.0011 | | --- Data as of 2026-11-09T07:25:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.