# Sequoia 15.8.2 Sequoia 15.8.2, released October 26, 2026, fixes 180 CVEs in Sequoia. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/macos/sequoia-15.8.2 - Platform: macOS - Released: Oct 26, 2026 - Priority: Urgent (Closes CVE-2026-112690, rated Critical) - CVEs: 180, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://support.apple.com/en-us/149523 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Sequoia](https://patchblox.com/security/data/product/macos/sequoia.md) | | 15.8.2 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-112690](https://patchblox.com/security/data/cve/CVE-2026-112690.md) | Urgent | App Store: A remote attacker may be able to break out of the WebContent sandbox | 9.8 | 0.0099 | | | [CVE-2026-64767](https://patchblox.com/security/data/cve/CVE-2026-64767.md) | Urgent | afpfs: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0090 | | | [CVE-2026-112526](https://patchblox.com/security/data/cve/CVE-2026-112526.md) | Urgent | smbx: A remote attacker may be able to cause unexpected app termination | 9.8 | 0.0085 | | | [CVE-2026-112514](https://patchblox.com/security/data/cve/CVE-2026-112514.md) | Urgent | Kernel: An attacker may be able to cause unexpected system termination or corrupt kernel memory | 9.1 | 0.0068 | | | [CVE-2026-112552](https://patchblox.com/security/data/cve/CVE-2026-112552.md) | Urgent | SMB: An attacker with control of a network file server may be able to cause unexpected system termination | 9.8 | 0.0060 | | | [CVE-2026-112521](https://patchblox.com/security/data/cve/CVE-2026-112521.md) | Urgent | Security: A sandboxed process may be able to circumvent sandbox restrictions | 9.3 | 0.0022 | | | [CVE-2026-112497](https://patchblox.com/security/data/cve/CVE-2026-112497.md) | Urgent | libxpc: An app may be able to break out of its sandbox | 9.0 | 0.0020 | | | [CVE-2026-112671](https://patchblox.com/security/data/cve/CVE-2026-112671.md) | High | Mail: A remote attacker may be able to cause a denial-of-service | 7.5 | 0.0088 | | | [CVE-2026-86991](https://patchblox.com/security/data/cve/CVE-2026-86991.md) | High | SceneKit: Processing a maliciously crafted file may lead to unexpected process termination | 7.5 | 0.0078 | | | [CVE-2026-112410](https://patchblox.com/security/data/cve/CVE-2026-112410.md) | High | Heimdal: A remote attacker may cause an unexpected process termination | 7.5 | 0.0077 | | | [CVE-2026-112476](https://patchblox.com/security/data/cve/CVE-2026-112476.md) | High | Kernel: An app may be able to cause unexpected system termination | 7.5 | 0.0076 | | | [CVE-2026-112515](https://patchblox.com/security/data/cve/CVE-2026-112515.md) | High | IOHIDFamily: An attacker may be able to cause unexpected system termination or read kernel memory | 7.5 | 0.0076 | | | [CVE-2026-112510](https://patchblox.com/security/data/cve/CVE-2026-112510.md) | High | smbx: A remote attacker may be able to cause a denial-of-service | 7.5 | 0.0075 | | | [CVE-2026-112438](https://patchblox.com/security/data/cve/CVE-2026-112438.md) | High | Kernel: An unprivileged attacker may be able to execute arbitrary code as root | 8.8 | 0.0073 | | | [CVE-2026-112486](https://patchblox.com/security/data/cve/CVE-2026-112486.md) | High | Model I/O: Processing a 3D model may lead to unexpected app termination | 7.5 | 0.0073 | | | [CVE-2026-112638](https://patchblox.com/security/data/cve/CVE-2026-112638.md) | High | CoreAudio: An attacker in radio range may be able to cause unexpected system termination | 7.5 | 0.0073 | | | [CVE-2026-86992](https://patchblox.com/security/data/cve/CVE-2026-86992.md) | High | CoreMedia: Processing a maliciously crafted video file may lead to unexpected app termination | 7.5 | 0.0070 | | | [CVE-2026-112451](https://patchblox.com/security/data/cve/CVE-2026-112451.md) | High | smbx: A remote attacker may be able to cause a denial-of-service or disclose process memory | 8.2 | 0.0068 | | | [CVE-2026-112565](https://patchblox.com/security/data/cve/CVE-2026-112565.md) | High | Model I/O: Processing a maliciously crafted 3D model may lead to memory corruption | 7.5 | 0.0067 | | | [CVE-2026-112567](https://patchblox.com/security/data/cve/CVE-2026-112567.md) | High | Spotlight: A malicious application may be able to bypass Privacy preferences | 7.5 | 0.0066 | | | [CVE-2026-86929](https://patchblox.com/security/data/cve/CVE-2026-86929.md) | High | Grapher: Processing a maliciously crafted file may lead to arbitrary code execution | 8.8 | 0.0065 | | | [CVE-2026-86969](https://patchblox.com/security/data/cve/CVE-2026-86969.md) | High | CoreAudio: An app may be able to cause unexpected system termination or corrupt kernel memory | 7.5 | 0.0065 | | | [CVE-2026-112546](https://patchblox.com/security/data/cve/CVE-2026-112546.md) | High | Audio: Processing a maliciously crafted file may lead to unexpected app termination | 7.5 | 0.0064 | | | [CVE-2026-112688](https://patchblox.com/security/data/cve/CVE-2026-112688.md) | High | CoreMedia: Parsing a file may lead to an unexpected app termination or arbitrary code execution | 8.8 | 0.0064 | | | [CVE-2026-112531](https://patchblox.com/security/data/cve/CVE-2026-112531.md) | High | AppleRAID: An app may be able to cause unexpected system termination | 7.5 | 0.0061 | | | [CVE-2026-112519](https://patchblox.com/security/data/cve/CVE-2026-112519.md) | High | Screen Sharing: Connecting to a malicious VNC server may cause a denial-of-service | 7.5 | 0.0060 | | | [CVE-2026-112676](https://patchblox.com/security/data/cve/CVE-2026-112676.md) | High | Photos Storage: An app may be able to access a user's Photos Library | 7.5 | 0.0057 | | | [CVE-2026-28991](https://patchblox.com/security/data/cve/CVE-2026-28991.md) | High | Accelerate: An app may be able to cause a denial-of-service | 7.5 | 0.0056 | | | [CVE-2026-112625](https://patchblox.com/security/data/cve/CVE-2026-112625.md) | High | ImageIO: Processing a maliciously crafted image may result in memory corruption | 7.5 | 0.0055 | | | [CVE-2026-112606](https://patchblox.com/security/data/cve/CVE-2026-112606.md) | High | Kernel: An app may be able to cause unexpected system termination | 7.5 | 0.0052 | | | [CVE-2026-112480](https://patchblox.com/security/data/cve/CVE-2026-112480.md) | High | Remote Management: A user with screen sharing access may be able to view another user's screen | 7.5 | 0.0051 | | | [CVE-2026-112542](https://patchblox.com/security/data/cve/CVE-2026-112542.md) | High | ppp: A malicious app may be able to intercept network traffic | 7.5 | 0.0049 | | | [CVE-2026-112529](https://patchblox.com/security/data/cve/CVE-2026-112529.md) | High | udf: An app may be able to cause unexpected system termination | 7.5 | 0.0044 | | | [CVE-2026-112473](https://patchblox.com/security/data/cve/CVE-2026-112473.md) | High | Screen Sharing Server: An attacker with the legacy VNC password for Screen Sharing may be able to copy files to the Mac | 7.4 | 0.0043 | | | [CVE-2026-113912](https://patchblox.com/security/data/cve/CVE-2026-113912.md) | High | CoreAudio: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory | 7.1 | 0.0038 | | | [CVE-2026-112457](https://patchblox.com/security/data/cve/CVE-2026-112457.md) | High | Remote Management: An attacker on the local network may be able to cause unexpected system termination or corrupt process memory | 7.1 | 0.0035 | | | [CVE-2026-112482](https://patchblox.com/security/data/cve/CVE-2026-112482.md) | High | Screen Sharing Server: An attacker on the local network may be able to corrupt process memory | 8.1 | 0.0035 | | | [CVE-2026-65327](https://patchblox.com/security/data/cve/CVE-2026-65327.md) | High | CUPS: A local attacker may be able to elevate their privileges | 8.4 | 0.0025 | | | [CVE-2026-86958](https://patchblox.com/security/data/cve/CVE-2026-86958.md) | High | dyld: An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code | 7.8 | 0.0023 | | | [CVE-2026-112453](https://patchblox.com/security/data/cve/CVE-2026-112453.md) | High | System Settings: An app may be able to break out of its sandbox | 7.7 | 0.0023 | | | [CVE-2026-112689](https://patchblox.com/security/data/cve/CVE-2026-112689.md) | High | AVEVideoEncoder: An app may be able to cause unexpected system termination or corrupt kernel memory | 8.4 | 0.0022 | | | [CVE-2026-112562](https://patchblox.com/security/data/cve/CVE-2026-112562.md) | High | Printing: A malicious app may be able to break out of its sandbox | 8.2 | 0.0021 | | | [CVE-2026-112484](https://patchblox.com/security/data/cve/CVE-2026-112484.md) | High | Screen Sharing Server: A malicious application may be able to execute arbitrary code with system privileges | 7.8 | 0.0021 | | | [CVE-2026-84604](https://patchblox.com/security/data/cve/CVE-2026-84604.md) | High | OpenBSM: Processing a maliciously crafted audit file may corrupt process memory | 7.8 | 0.0021 | | | [CVE-2026-112430](https://patchblox.com/security/data/cve/CVE-2026-112430.md) | High | Security: An app may be able to gain root privileges | 8.4 | 0.0020 | | | [CVE-2026-112677](https://patchblox.com/security/data/cve/CVE-2026-112677.md) | High | RemoteManagement: An application may be able to execute arbitrary code with system privileges | 7.8 | 0.0020 | | | [CVE-2026-112487](https://patchblox.com/security/data/cve/CVE-2026-112487.md) | High | Storage: An app may be able to gain root privileges | 7.8 | 0.0020 | | | [CVE-2026-65350](https://patchblox.com/security/data/cve/CVE-2026-65350.md) | High | Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory | 7.1 | 0.0020 | | | [CVE-2026-112610](https://patchblox.com/security/data/cve/CVE-2026-112610.md) | High | CoreGraphics: Processing a maliciously crafted PDF file may lead to memory corruption | 7.8 | 0.0020 | | | [CVE-2026-112683](https://patchblox.com/security/data/cve/CVE-2026-112683.md) | High | FontParser: Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory | 7.8 | 0.0020 | | | [CVE-2026-86946](https://patchblox.com/security/data/cve/CVE-2026-86946.md) | High | SMB: An app may be able to cause unexpected system termination or corrupt kernel memory | 7.7 | 0.0020 | | | [CVE-2026-112545](https://patchblox.com/security/data/cve/CVE-2026-112545.md) | High | configd: An app may be able to gain root privileges | 7.8 | 0.0020 | | | [CVE-2026-86945](https://patchblox.com/security/data/cve/CVE-2026-86945.md) | High | libcryptex: An malicious app may be able to create files in protected directories | 7.1 | 0.0020 | | | [CVE-2026-84545](https://patchblox.com/security/data/cve/CVE-2026-84545.md) | High | CUPS: An app with App Sandbox restrictions may be able to escape the sandbox and execute code with root privileges | 8.8 | 0.0020 | | | [CVE-2026-112670](https://patchblox.com/security/data/cve/CVE-2026-112670.md) | High | BOM: Processing a maliciously crafted file may lead to heap corruption | 7.8 | 0.0020 | | | [CVE-2026-112485](https://patchblox.com/security/data/cve/CVE-2026-112485.md) | High | Model I/O: Processing a maliciously crafted 3D model may lead to memory corruption | 7.8 | 0.0019 | | | [CVE-2026-112536](https://patchblox.com/security/data/cve/CVE-2026-112536.md) | High | APFS: An app may be able to cause unexpected system termination or write kernel memory | 7.7 | 0.0019 | | | [CVE-2026-112464](https://patchblox.com/security/data/cve/CVE-2026-112464.md) | High | SceneKit: Processing a maliciously crafted file may lead to heap corruption | 7.8 | 0.0019 | | | [CVE-2026-84495](https://patchblox.com/security/data/cve/CVE-2026-84495.md) | High | Kernel: An app may be able to cause unexpected system termination or write kernel memory | 7.8 | 0.0019 | | | [CVE-2026-112517](https://patchblox.com/security/data/cve/CVE-2026-112517.md) | High | Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory | 7.7 | 0.0019 | | | [CVE-2026-112532](https://patchblox.com/security/data/cve/CVE-2026-112532.md) | High | Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory | 7.8 | 0.0019 | | | [CVE-2026-112524](https://patchblox.com/security/data/cve/CVE-2026-112524.md) | High | udf: An app may be able to cause unexpected system termination or corrupt kernel memory | 7.7 | 0.0019 | | | [CVE-2026-112534](https://patchblox.com/security/data/cve/CVE-2026-112534.md) | High | dyld: An app may be able to bypass sandbox restrictions | 8.2 | 0.0019 | | | [CVE-2026-112569](https://patchblox.com/security/data/cve/CVE-2026-112569.md) | High | quarantine: An app may be able to break out of its sandbox | 8.2 | 0.0019 | | | [CVE-2026-112570](https://patchblox.com/security/data/cve/CVE-2026-112570.md) | High | DiskArbitration: An app may be able to break out of its sandbox | 8.2 | 0.0019 | | | [CVE-2026-112461](https://patchblox.com/security/data/cve/CVE-2026-112461.md) | High | Model I/O: Processing a maliciously crafted 3D model may lead to memory corruption | 7.8 | 0.0019 | | | [CVE-2026-112530](https://patchblox.com/security/data/cve/CVE-2026-112530.md) | High | CVMS: An app may be able to gain root privileges | 7.8 | 0.0019 | | | [CVE-2026-112505](https://patchblox.com/security/data/cve/CVE-2026-112505.md) | High | smbx: A malicious Screen Sharing peer may be able to corrupt process memory | 7.8 | 0.0019 | | | [CVE-2026-112424](https://patchblox.com/security/data/cve/CVE-2026-112424.md) | High | HFS: An app may be able to cause unexpected system termination or read kernel memory | 7.1 | 0.0019 | | | [CVE-2026-112525](https://patchblox.com/security/data/cve/CVE-2026-112525.md) | High | APFS: An app may be able to cause unexpected system termination or read kernel memory | 7.1 | 0.0019 | | | [CVE-2026-112470](https://patchblox.com/security/data/cve/CVE-2026-112470.md) | High | AVEVideoEncoder: An app may be able to cause unexpected system termination or corrupt kernel memory | 7.8 | 0.0018 | | | [CVE-2026-112668](https://patchblox.com/security/data/cve/CVE-2026-112668.md) | High | Security: An app may be able to gain root privileges | 7.8 | 0.0018 | | | [CVE-2026-112495](https://patchblox.com/security/data/cve/CVE-2026-112495.md) | High | SoftRAID: An app may be able to cause unexpected system termination or read kernel memory | 7.1 | 0.0018 | | | [CVE-2026-112593](https://patchblox.com/security/data/cve/CVE-2026-112593.md) | High | GPU Drivers: An app may be able to cause unexpected system termination or write kernel memory | 7.7 | 0.0018 | | | [CVE-2026-112508](https://patchblox.com/security/data/cve/CVE-2026-112508.md) | High | udf: An app may be able to cause unexpected system termination or read kernel memory | 7.1 | 0.0018 | | | [CVE-2026-112555](https://patchblox.com/security/data/cve/CVE-2026-112555.md) | High | zsh: A malicious app may be able to break out of its sandbox | 8.2 | 0.0018 | | | [CVE-2026-112548](https://patchblox.com/security/data/cve/CVE-2026-112548.md) | High | StorageKit: An app may be able to gain root privileges | 7.8 | 0.0018 | | | [CVE-2026-112539](https://patchblox.com/security/data/cve/CVE-2026-112539.md) | High | AppleMobileFileIntegrity: A malicious app may be able to read or write to protected files | 7.1 | 0.0018 | | | [CVE-2026-112541](https://patchblox.com/security/data/cve/CVE-2026-112541.md) | High | StorageKit: An app may be able to gain root privileges | 7.8 | 0.0017 | | | [CVE-2026-112466](https://patchblox.com/security/data/cve/CVE-2026-112466.md) | High | AVEVideoEncoder: An app may be able to cause unexpected system termination or read kernel memory | 7.1 | 0.0017 | | | [CVE-2026-65363](https://patchblox.com/security/data/cve/CVE-2026-65363.md) | High | Security: An app may be able to break out of its sandbox | 8.4 | 0.0017 | | | [CVE-2026-112456](https://patchblox.com/security/data/cve/CVE-2026-112456.md) | High | HFS: Processing a maliciously crafted file may lead to heap corruption | 7.8 | 0.0017 | | | [CVE-2026-112493](https://patchblox.com/security/data/cve/CVE-2026-112493.md) | High | SecurityAgent: An app may be able to gain root privileges | 7.8 | 0.0016 | | | [CVE-2026-65373](https://patchblox.com/security/data/cve/CVE-2026-65373.md) | High | Screen Sharing Server: A malicious app may be able to gain root privileges | 7.8 | 0.0016 | | | [CVE-2026-86896](https://patchblox.com/security/data/cve/CVE-2026-86896.md) | High | CloudKit: A malicious app may be able to gain root privileges | 7.8 | 0.0016 | | | [CVE-2026-112696](https://patchblox.com/security/data/cve/CVE-2026-112696.md) | High | Apple Neural Engine: An app may be able to cause unexpected system termination or corrupt kernel memory | 7.8 | 0.0016 | | | [CVE-2026-112543](https://patchblox.com/security/data/cve/CVE-2026-112543.md) | High | Kernel: A malicious app may be able to break out of its sandbox | 7.8 | 0.0015 | | | [CVE-2026-113900](https://patchblox.com/security/data/cve/CVE-2026-113900.md) | High | Crash Reporter: An app may be able to gain root privileges | 7.0 | 0.0014 | | | [CVE-2026-112492](https://patchblox.com/security/data/cve/CVE-2026-112492.md) | High | StorageKit: An app may be able to gain root privileges | 7.0 | 0.0013 | | | [CVE-2026-84590](https://patchblox.com/security/data/cve/CVE-2026-84590.md) | Routine | Screen Sharing Server: A remote attacker may be able to cause unexpected app termination or heap corruption | 6.5 | 0.0094 | | | [CVE-2026-112502](https://patchblox.com/security/data/cve/CVE-2026-112502.md) | Routine | Disk Images: An app may be able to cause a denial-of-service | n/a | 0.0070 | | | [CVE-2026-113913](https://patchblox.com/security/data/cve/CVE-2026-113913.md) | Routine | Security: Processing web content may disclose sensitive information | 6.5 | 0.0061 | | | [CVE-2026-112414](https://patchblox.com/security/data/cve/CVE-2026-112414.md) | Routine | Mail: Processing a maliciously crafted message may lead to a denial-of-service | 6.5 | 0.0061 | | | [CVE-2026-86971](https://patchblox.com/security/data/cve/CVE-2026-86971.md) | Routine | Accelerate Framework: Processing a maliciously crafted image may lead to unexpected app termination | 6.5 | 0.0058 | | | [CVE-2026-112633](https://patchblox.com/security/data/cve/CVE-2026-112633.md) | Routine | ImageIO: Processing a maliciously crafted image may lead to unexpected app termination | 6.5 | 0.0055 | | | [CVE-2026-112415](https://patchblox.com/security/data/cve/CVE-2026-112415.md) | Routine | AppleAVD: An app may be able to cause unexpected system termination or corrupt process memory | 6.5 | 0.0055 | | | [CVE-2026-86954](https://patchblox.com/security/data/cve/CVE-2026-86954.md) | Routine | ImageIO: Processing a maliciously crafted image may lead to unexpected app termination | 6.5 | 0.0055 | | | [CVE-2026-112491](https://patchblox.com/security/data/cve/CVE-2026-112491.md) | Routine | RealityKit: Processing a maliciously crafted file may lead to unexpected app termination | 6.5 | 0.0054 | | | [CVE-2026-112642](https://patchblox.com/security/data/cve/CVE-2026-112642.md) | Routine | FontParser: Processing a maliciously crafted font may result in the disclosure of process memory | 6.5 | 0.0054 | | | [CVE-2026-112413](https://patchblox.com/security/data/cve/CVE-2026-112413.md) | Routine | Model I/O: Processing a maliciously crafted file may lead to unexpected app termination | 6.5 | 0.0053 | | | [CVE-2026-112522](https://patchblox.com/security/data/cve/CVE-2026-112522.md) | Routine | libarchive: Processing a maliciously crafted file may lead to unexpected app termination | 6.5 | 0.0049 | | | [CVE-2026-112563](https://patchblox.com/security/data/cve/CVE-2026-112563.md) | Routine | Model I/O: Processing a maliciously crafted file may lead to unexpected app termination | 6.5 | 0.0049 | | | [CVE-2026-112471](https://patchblox.com/security/data/cve/CVE-2026-112471.md) | Routine | Core Image: Processing a maliciously crafted image may lead to unexpected process termination | 4.3 | 0.0048 | | | [CVE-2026-112511](https://patchblox.com/security/data/cve/CVE-2026-112511.md) | Routine | Screen Sharing Server: A malicious Screen Sharing peer may be able to create arbitrary symlinks as root | 6.5 | 0.0048 | | | [CVE-2026-20649](https://patchblox.com/security/data/cve/CVE-2026-20649.md) | Routine | Game Center: A user may be able to view sensitive user information | 5.5 | 0.0045 | | | [CVE-2026-112576](https://patchblox.com/security/data/cve/CVE-2026-112576.md) | Routine | Kernel: An app may be able to cause unexpected changes to copy-on-write memory | 6.5 | 0.0045 | | | [CVE-2026-112447](https://patchblox.com/security/data/cve/CVE-2026-112447.md) | Routine | Time Machine: An app may be able to bypass Privacy preferences | n/a | 0.0043 | | | [CVE-2026-112556](https://patchblox.com/security/data/cve/CVE-2026-112556.md) | Routine | System Settings: An attacker may tamper with code-signed applications to execute arbitrary code in the application's context | 4.8 | 0.0037 | | | [CVE-2026-112479](https://patchblox.com/security/data/cve/CVE-2026-112479.md) | Routine | USB: A malicious USB device may be able to cause unexpected system termination or read kernel memory | 5.2 | 0.0030 | | | [CVE-2026-20648](https://patchblox.com/security/data/cve/CVE-2026-20648.md) | Routine | Siri: A malicious app may be able to access notifications from other iCloud devices | 5.5 | 0.0024 | | | [CVE-2026-113907](https://patchblox.com/security/data/cve/CVE-2026-113907.md) | Routine | CoreAudio: An app may be able to cause unexpected system termination or corrupt process memory | 6.1 | 0.0023 | | | [CVE-2026-112481](https://patchblox.com/security/data/cve/CVE-2026-112481.md) | Routine | Screen Sharing Server: An attacker on the local network may be able to cause unexpected process termination or disclose process memory | 6.8 | 0.0022 | | | [CVE-2026-112512](https://patchblox.com/security/data/cve/CVE-2026-112512.md) | Routine | System Settings: An app may be able to bypass Gatekeeper checks | 5.5 | 0.0021 | | | [CVE-2026-112571](https://patchblox.com/security/data/cve/CVE-2026-112571.md) | Routine | ImageIO: Processing a maliciously crafted image may result in disclosure of process memory | 5.5 | 0.0021 | | | [CVE-2026-86966](https://patchblox.com/security/data/cve/CVE-2026-86966.md) | Routine | copyfile: An app may be able to modify protected parts of the file system | 5.5 | 0.0021 | | | [CVE-2026-112575](https://patchblox.com/security/data/cve/CVE-2026-112575.md) | Routine | WindowServer: An app may be able to monitor keystrokes without user permission | 6.2 | 0.0020 | | | [CVE-2026-86941](https://patchblox.com/security/data/cve/CVE-2026-86941.md) | Routine | Carbon Core: An app may bypass Gatekeeper checks | 6.2 | 0.0020 | | | [CVE-2026-84498](https://patchblox.com/security/data/cve/CVE-2026-84498.md) | Routine | udf: An app may be able to disclose kernel memory | 5.5 | 0.0020 | | | [CVE-2026-86937](https://patchblox.com/security/data/cve/CVE-2026-86937.md) | Routine | ArchiveService: An app may bypass Gatekeeper checks | 5.5 | 0.0020 | | | [CVE-2026-112504](https://patchblox.com/security/data/cve/CVE-2026-112504.md) | Routine | StorageKit: An app may be able to modify protected parts of the file system | 5.5 | 0.0020 | | | [CVE-2026-112516](https://patchblox.com/security/data/cve/CVE-2026-112516.md) | Routine | Kernel: An app may be able to cause unexpected system termination | 6.2 | 0.0020 | | | [CVE-2026-64750](https://patchblox.com/security/data/cve/CVE-2026-64750.md) | Routine | ImageIO: Processing a maliciously crafted image may result in memory corruption | 5.5 | 0.0020 | | | [CVE-2026-86942](https://patchblox.com/security/data/cve/CVE-2026-86942.md) | Routine | Heimdal: An app may be able to cause a denial-of-service | 5.5 | 0.0020 | | | [CVE-2026-112483](https://patchblox.com/security/data/cve/CVE-2026-112483.md) | Routine | Directory Utility: An app may be able to modify protected parts of the file system | 5.5 | 0.0020 | | | [CVE-2026-112561](https://patchblox.com/security/data/cve/CVE-2026-112561.md) | Routine | ImageIO: Processing a maliciously crafted image may result in disclosure of process memory | 5.5 | 0.0020 | | | [CVE-2026-112628](https://patchblox.com/security/data/cve/CVE-2026-112628.md) | Routine | Spotlight: An app may be able to access sensitive user data | 5.5 | 0.0020 | | | [CVE-2026-86970](https://patchblox.com/security/data/cve/CVE-2026-86970.md) | Routine | FontParser: Processing a maliciously crafted font may result in the disclosure of process memory | 5.5 | 0.0020 | | | [CVE-2026-84528](https://patchblox.com/security/data/cve/CVE-2026-84528.md) | Routine | Carbon Core: An app may be able to access sensitive user data | 3.3 | 0.0020 | | | [CVE-2026-86923](https://patchblox.com/security/data/cve/CVE-2026-86923.md) | Routine | Siri: An app may be able to access sensitive user data | 3.3 | 0.0020 | | | [CVE-2026-112632](https://patchblox.com/security/data/cve/CVE-2026-112632.md) | Routine | ImageIO: Processing a maliciously crafted image may result in disclosure of process memory | 3.3 | 0.0019 | | | [CVE-2026-64789](https://patchblox.com/security/data/cve/CVE-2026-64789.md) | Routine | quarantine: A malicious application may bypass Gatekeeper checks | 5.5 | 0.0019 | | | [CVE-2026-84542](https://patchblox.com/security/data/cve/CVE-2026-84542.md) | Routine | Metal: An app may be able to read files outside of its sandbox | 5.5 | 0.0019 | | | [CVE-2026-84610](https://patchblox.com/security/data/cve/CVE-2026-84610.md) | Routine | BOM: A maliciously crafted ZIP archive may bypass Gatekeeper checks | 5.5 | 0.0019 | | | [CVE-2026-86931](https://patchblox.com/security/data/cve/CVE-2026-86931.md) | Routine | Security: An app may be able to access sensitive user data | 6.2 | 0.0019 | | | [CVE-2026-112423](https://patchblox.com/security/data/cve/CVE-2026-112423.md) | Routine | SceneKit: Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents | 6.1 | 0.0019 | | | [CVE-2026-112475](https://patchblox.com/security/data/cve/CVE-2026-112475.md) | Routine | HFS: An app may be able to cause unexpected system termination | 5.5 | 0.0019 | | | [CVE-2026-65368](https://patchblox.com/security/data/cve/CVE-2026-65368.md) | Routine | CoreServicesUIAgent: A maliciously crafted disk image may bypass Gatekeeper checks | 5.5 | 0.0019 | | | [CVE-2026-112537](https://patchblox.com/security/data/cve/CVE-2026-112537.md) | Routine | Wi-Fi: An app may be able to read sensitive location information | 4.0 | 0.0019 | | | [CVE-2026-112429](https://patchblox.com/security/data/cve/CVE-2026-112429.md) | Routine | ColorSync: Processing a maliciously crafted file may disclose process memory | 5.5 | 0.0018 | | | [CVE-2026-112416](https://patchblox.com/security/data/cve/CVE-2026-112416.md) | Routine | AppleAVD: Processing a maliciously crafted video file may lead to unexpected app termination | 5.5 | 0.0018 | | | [CVE-2026-86984](https://patchblox.com/security/data/cve/CVE-2026-86984.md) | Routine | Siri: An app may be able to access information about a user's contacts | 5.5 | 0.0018 | | | [CVE-2026-65392](https://patchblox.com/security/data/cve/CVE-2026-65392.md) | Routine | Sandbox: An app with root privileges may be able to access private information | 4.4 | 0.0018 | | | [CVE-2026-28864](https://patchblox.com/security/data/cve/CVE-2026-28864.md) | Routine | Security: A local attacker may gain access to user's Keychain items | 3.3 | 0.0018 | | | [CVE-2026-112523](https://patchblox.com/security/data/cve/CVE-2026-112523.md) | Routine | Help Viewer: An app may be able to access user-sensitive data | 5.5 | 0.0018 | | | [CVE-2026-112425](https://patchblox.com/security/data/cve/CVE-2026-112425.md) | Routine | SceneKit: Processing a 3D model may result in disclosure of process memory | 3.3 | 0.0018 | | | [CVE-2026-112540](https://patchblox.com/security/data/cve/CVE-2026-112540.md) | Routine | SceneKit: Processing a maliciously crafted file may lead to unexpected app termination | 5.5 | 0.0018 | | | [CVE-2026-112441](https://patchblox.com/security/data/cve/CVE-2026-112441.md) | Routine | Spotlight: An app may be able to access sensitive user data | 3.3 | 0.0018 | | | [CVE-2026-112672](https://patchblox.com/security/data/cve/CVE-2026-112672.md) | Routine | BOM: A maliciously crafted ZIP archive may bypass Gatekeeper checks | n/a | 0.0018 | | | [CVE-2026-112557](https://patchblox.com/security/data/cve/CVE-2026-112557.md) | Routine | Spotlight: A malicious application may be able to bypass Privacy preferences | 5.5 | 0.0018 | | | [CVE-2026-112656](https://patchblox.com/security/data/cve/CVE-2026-112656.md) | Routine | CoreText: Processing a maliciously crafted font may result in the disclosure of process memory | 3.3 | 0.0018 | | | [CVE-2026-112428](https://patchblox.com/security/data/cve/CVE-2026-112428.md) | Routine | DesktopServices: An app may bypass Gatekeeper checks | 5.5 | 0.0017 | | | [CVE-2026-112698](https://patchblox.com/security/data/cve/CVE-2026-112698.md) | Routine | Kernel: An app may be able to cause unexpected system termination | 5.5 | 0.0017 | | | [CVE-2026-112705](https://patchblox.com/security/data/cve/CVE-2026-112705.md) | Routine | AVEVideoEncoder: An app may be able to cause unexpected system termination | 5.5 | 0.0017 | | | [CVE-2026-113899](https://patchblox.com/security/data/cve/CVE-2026-113899.md) | Routine | ppp: An app may be able to cause unexpected system termination | 5.5 | 0.0017 | | | [CVE-2026-112568](https://patchblox.com/security/data/cve/CVE-2026-112568.md) | Routine | ArchiveService: Processing a maliciously crafted file may bypass Gatekeeper checks | 5.5 | 0.0017 | | | [CVE-2026-113898](https://patchblox.com/security/data/cve/CVE-2026-113898.md) | Routine | Accounts: A malicious application may be able to bypass Privacy preferences | 3.3 | 0.0017 | | | [CVE-2026-112550](https://patchblox.com/security/data/cve/CVE-2026-112550.md) | Routine | ncurses: An app may be able to cause a denial-of-service | 5.5 | 0.0017 | | | [CVE-2026-113910](https://patchblox.com/security/data/cve/CVE-2026-113910.md) | Routine | Compression: An app may be able to disclose kernel memory | 5.5 | 0.0017 | | | [CVE-2026-112624](https://patchblox.com/security/data/cve/CVE-2026-112624.md) | Routine | Kernel: An app may be able to bypass Privacy preferences | 5.1 | 0.0017 | | | [CVE-2026-84595](https://patchblox.com/security/data/cve/CVE-2026-84595.md) | Routine | Apple Neural Engine: An app may be able to cause unexpected system termination | 5.5 | 0.0016 | | | [CVE-2026-112601](https://patchblox.com/security/data/cve/CVE-2026-112601.md) | Routine | Shortcuts: An app may be able to cause a denial-of-service | 5.5 | 0.0016 | | | [CVE-2026-112708](https://patchblox.com/security/data/cve/CVE-2026-112708.md) | Routine | CoreAudio: An app may be able to cause unexpected system termination or corrupt process memory | 5.3 | 0.0016 | | | [CVE-2026-112678](https://patchblox.com/security/data/cve/CVE-2026-112678.md) | Routine | Calendar: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-112533](https://patchblox.com/security/data/cve/CVE-2026-112533.md) | Routine | IOGPUFamily: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-112675](https://patchblox.com/security/data/cve/CVE-2026-112675.md) | Routine | Audio: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-112704](https://patchblox.com/security/data/cve/CVE-2026-112704.md) | Routine | AppleAVD: A malicious app may be able to break out of its sandbox | 6.5 | 0.0016 | | | [CVE-2026-112559](https://patchblox.com/security/data/cve/CVE-2026-112559.md) | Routine | Shortcuts: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-65397](https://patchblox.com/security/data/cve/CVE-2026-65397.md) | Routine | Photos Storage: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-86920](https://patchblox.com/security/data/cve/CVE-2026-86920.md) | Routine | Apple Intelligence: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-112647](https://patchblox.com/security/data/cve/CVE-2026-112647.md) | Routine | iCloud: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-112660](https://patchblox.com/security/data/cve/CVE-2026-112660.md) | Routine | Photos Storage: An app may be able to bypass certain Privacy preferences | 3.3 | 0.0016 | | | [CVE-2026-112462](https://patchblox.com/security/data/cve/CVE-2026-112462.md) | Routine | Control Center: A malicious application may be able to bypass Privacy preferences | 3.3 | 0.0016 | | | [CVE-2026-112501](https://patchblox.com/security/data/cve/CVE-2026-112501.md) | Routine | Kernel: An app may be able to cause unexpected system termination | 6.2 | 0.0015 | | | [CVE-2026-112558](https://patchblox.com/security/data/cve/CVE-2026-112558.md) | Routine | Spotlight: An app may be able to access sensitive user data | 3.3 | 0.0014 | | | [CVE-2026-112442](https://patchblox.com/security/data/cve/CVE-2026-112442.md) | Routine | PackageKit: An app may be able to modify protected parts of the file system | 4.7 | 0.0013 | | | [CVE-2026-112535](https://patchblox.com/security/data/cve/CVE-2026-112535.md) | Routine | StorageKit: An app may be able to modify protected parts of the file system | 4.7 | 0.0013 | | | [CVE-2026-113915](https://patchblox.com/security/data/cve/CVE-2026-113915.md) | Routine | MediaAnalysis: An app may be able to access sensitive user data | 4.7 | 0.0012 | | | [CVE-2026-113896](https://patchblox.com/security/data/cve/CVE-2026-113896.md) | Routine | FileProvider: An app may be able to access sensitive user data | 4.7 | 0.0012 | | | [CVE-2026-112652](https://patchblox.com/security/data/cve/CVE-2026-112652.md) | Routine | Security: An malicious app may be able to bypass certificate validation | 5.5 | 0.0012 | | | [CVE-2026-112421](https://patchblox.com/security/data/cve/CVE-2026-112421.md) | Routine | PackageKit: An app may be able to modify protected parts of the file system | 4.7 | 0.0012 | | --- Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.