# Sequoia 15.8 Sequoia 15.8, released September 14, 2026, fixes 174 CVEs in Sequoia. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/macos/sequoia-15.8 - Platform: macOS - Released: Sep 14, 2026 - Priority: Urgent (Closes CVE-2026-65414, rated Critical) - CVEs: 174, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://support.apple.com/en-us/149043 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Sequoia](https://patchblox.com/security/data/product/macos/sequoia.md) | | 15.8 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-65414](https://patchblox.com/security/data/cve/CVE-2026-65414.md) | Urgent | Bluetooth: A remote attacker may be able to cause unexpected app termination or arbitrary code execution | 9.8 | 0.0128 | | | [CVE-2026-43790](https://patchblox.com/security/data/cve/CVE-2026-43790.md) | Urgent | Kernel: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory | 9.1 | 0.0074 | | | [CVE-2026-84561](https://patchblox.com/security/data/cve/CVE-2026-84561.md) | Urgent | Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0068 | | | [CVE-2026-84609](https://patchblox.com/security/data/cve/CVE-2026-84609.md) | Urgent | Software Update: An app may be able to modify protected system files | 9.8 | 0.0067 | | | [CVE-2026-86868](https://patchblox.com/security/data/cve/CVE-2026-86868.md) | Urgent | Heimdal: An attacker may be able to impersonate other users | 9.1 | 0.0049 | | | [CVE-2026-86881](https://patchblox.com/security/data/cve/CVE-2026-86881.md) | Urgent | Security: An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages | 9.1 | 0.0040 | | | [CVE-2026-43692](https://patchblox.com/security/data/cve/CVE-2026-43692.md) | High | CUPS: A remote user may cause an unexpected app termination or arbitrary code execution | 8.8 | 0.0087 | | | [CVE-2026-65364](https://patchblox.com/security/data/cve/CVE-2026-65364.md) | High | Kernel: A remote attacker may be able to cause unexpected system termination | 7.5 | 0.0074 | | | [CVE-2026-84553](https://patchblox.com/security/data/cve/CVE-2026-84553.md) | High | smbx: A remote attacker may be able to cause a denial-of-service | 7.5 | 0.0070 | | | [CVE-2026-65375](https://patchblox.com/security/data/cve/CVE-2026-65375.md) | High | WebDAV: An app may be able to cause unexpected system termination | 7.5 | 0.0066 | | | [CVE-2026-65346](https://patchblox.com/security/data/cve/CVE-2026-65346.md) | High | ImageIO: Processing an image may lead to arbitrary code execution | 8.8 | 0.0059 | | | [CVE-2026-84544](https://patchblox.com/security/data/cve/CVE-2026-84544.md) | High | Kernel: Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory | 7.5 | 0.0057 | | | [CVE-2026-84549](https://patchblox.com/security/data/cve/CVE-2026-84549.md) | High | Kernel: Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory | 7.5 | 0.0057 | | | [CVE-2026-84579](https://patchblox.com/security/data/cve/CVE-2026-84579.md) | High | DesktopServices: Opening a file referencing a network share may lead to unexpected software execution | 8.8 | 0.0055 | | | [CVE-2026-28969](https://patchblox.com/security/data/cve/CVE-2026-28969.md) | High | IOKit: An app may be able to cause unexpected system termination | 7.5 | 0.0053 | | | [CVE-2026-65374](https://patchblox.com/security/data/cve/CVE-2026-65374.md) | High | WebDAV: Connecting to a malicious WebDAV server may result in code execution | 8.8 | 0.0053 | | | [CVE-2026-84512](https://patchblox.com/security/data/cve/CVE-2026-84512.md) | High | Disk Images: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory | 8.8 | 0.0048 | | | [CVE-2026-43686](https://patchblox.com/security/data/cve/CVE-2026-43686.md) | High | Kernel: Connecting to a malicious NFS server may lead to kernel memory corruption | 8.8 | 0.0048 | | | [CVE-2026-64759](https://patchblox.com/security/data/cve/CVE-2026-64759.md) | High | ImageIO: Processing a maliciously crafted image may lead to arbitrary code execution | 8.8 | 0.0045 | | | [CVE-2026-84543](https://patchblox.com/security/data/cve/CVE-2026-84543.md) | High | SMB: Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory | 7.5 | 0.0043 | | | [CVE-2026-84563](https://patchblox.com/security/data/cve/CVE-2026-84563.md) | High | CUPS: An app may be able to cause unexpected system termination | 7.5 | 0.0043 | | | [CVE-2026-84516](https://patchblox.com/security/data/cve/CVE-2026-84516.md) | High | CUPS: Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory | 8.1 | 0.0043 | | | [CVE-2026-86919](https://patchblox.com/security/data/cve/CVE-2026-86919.md) | High | Core Bluetooth: An attacker with a paired Bluetooth device may be able to execute arbitrary code | 8.8 | 0.0039 | | | [CVE-2026-65381](https://patchblox.com/security/data/cve/CVE-2026-65381.md) | High | AppleMobileFileIntegrity: A malicious app may be able to break out of its sandbox | 8.8 | 0.0035 | | | [CVE-2026-28930](https://patchblox.com/security/data/cve/CVE-2026-28930.md) | High | Spotlight: An app may be able to access protected user data | 7.5 | 0.0032 | | | [CVE-2026-84581](https://patchblox.com/security/data/cve/CVE-2026-84581.md) | High | HFS: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory | 8.4 | 0.0021 | | | [CVE-2026-86916](https://patchblox.com/security/data/cve/CVE-2026-86916.md) | High | Kernel: An app may be able to execute arbitrary code with kernel privileges | 7.8 | 0.0020 | | | [CVE-2026-84627](https://patchblox.com/security/data/cve/CVE-2026-84627.md) | High | ImageIO: Processing a maliciously crafted image may lead to heap corruption | 7.8 | 0.0020 | | | [CVE-2026-84546](https://patchblox.com/security/data/cve/CVE-2026-84546.md) | High | SceneKit: Processing a maliciously crafted 3D model may lead to memory corruption | 8.4 | 0.0019 | | | [CVE-2026-20683](https://patchblox.com/security/data/cve/CVE-2026-20683.md) | High | Apple Account: An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account | 7.1 | 0.0019 | | | [CVE-2026-84497](https://patchblox.com/security/data/cve/CVE-2026-84497.md) | High | Model I/O: Opening a maliciously crafted file may lead to unexpected process termination | 7.8 | 0.0019 | | | [CVE-2026-64790](https://patchblox.com/security/data/cve/CVE-2026-64790.md) | High | CUPS: An app may be able to gain elevated privileges | 7.8 | 0.0019 | | | [CVE-2026-43684](https://patchblox.com/security/data/cve/CVE-2026-43684.md) | High | Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory | 7.8 | 0.0019 | | | [CVE-2026-65344](https://patchblox.com/security/data/cve/CVE-2026-65344.md) | High | CoreMedia: Processing a maliciously crafted video file may lead to unexpected app termination | 7.8 | 0.0019 | | | [CVE-2026-43786](https://patchblox.com/security/data/cve/CVE-2026-43786.md) | High | CoreServices: An app may be able to gain root privileges | 7.8 | 0.0018 | | | [CVE-2026-43691](https://patchblox.com/security/data/cve/CVE-2026-43691.md) | High | CUPS: An app may be able to gain root privileges | 7.8 | 0.0018 | | | [CVE-2026-65359](https://patchblox.com/security/data/cve/CVE-2026-65359.md) | High | Kernel: A local user may be able to cause unexpected system termination or read kernel memory | 7.1 | 0.0018 | | | [CVE-2026-84578](https://patchblox.com/security/data/cve/CVE-2026-84578.md) | High | quarantine: An app may be able to break out of its sandbox | 8.8 | 0.0017 | | | [CVE-2026-64758](https://patchblox.com/security/data/cve/CVE-2026-64758.md) | High | ImageIO: Processing a maliciously crafted file may lead to unexpected app termination | 7.8 | 0.0017 | | | [CVE-2026-84505](https://patchblox.com/security/data/cve/CVE-2026-84505.md) | High | Directory Utility: An app may be able to gain root privileges | 7.8 | 0.0017 | | | [CVE-2026-84515](https://patchblox.com/security/data/cve/CVE-2026-84515.md) | High | SMB: Connecting to a malicious SMB server may lead to kernel memory corruption | 7.8 | 0.0017 | | | [CVE-2026-84568](https://patchblox.com/security/data/cve/CVE-2026-84568.md) | High | autofs: An attacker with control of a network directory server may be able to execute arbitrary code with root privileges | 7.8 | 0.0017 | | | [CVE-2026-84575](https://patchblox.com/security/data/cve/CVE-2026-84575.md) | High | CoreUI: Processing a maliciously crafted file may lead to unexpected app termination | 7.8 | 0.0017 | | | [CVE-2026-84566](https://patchblox.com/security/data/cve/CVE-2026-84566.md) | High | Kernel: A local attacker may be able to cause unexpected system termination or corrupt kernel memory | 8.4 | 0.0017 | | | [CVE-2026-84506](https://patchblox.com/security/data/cve/CVE-2026-84506.md) | High | udf: An app may be able to cause unexpected system termination or corrupt kernel memory | 7.8 | 0.0017 | | | [CVE-2026-84511](https://patchblox.com/security/data/cve/CVE-2026-84511.md) | High | CoreUI: Processing a maliciously crafted asset catalog may lead to unexpected process termination | 7.8 | 0.0017 | | | [CVE-2026-84620](https://patchblox.com/security/data/cve/CVE-2026-84620.md) | High | SceneKit: Processing a maliciously crafted 3D model may lead to memory corruption | 7.3 | 0.0017 | | | [CVE-2026-84632](https://patchblox.com/security/data/cve/CVE-2026-84632.md) | High | SceneKit: Processing a maliciously crafted 3D model may lead to memory corruption | 7.3 | 0.0017 | | | [CVE-2026-84565](https://patchblox.com/security/data/cve/CVE-2026-84565.md) | High | Disk Images: Processing a maliciously crafted disk image may lead to unexpected app termination | 7.1 | 0.0017 | | | [CVE-2026-43683](https://patchblox.com/security/data/cve/CVE-2026-43683.md) | High | CoreDrag: An app may be able to cause unexpected process termination or disclose process memory | 7.1 | 0.0016 | | | [CVE-2026-64736](https://patchblox.com/security/data/cve/CVE-2026-64736.md) | High | IOMobileFrameBuffer: An app may be able to cause unexpected system termination or corrupt kernel memory | 7.1 | 0.0016 | | | [CVE-2026-84572](https://patchblox.com/security/data/cve/CVE-2026-84572.md) | High | udf: An app may be able to cause unexpected system termination or read kernel memory | 7.1 | 0.0016 | | | [CVE-2026-84535](https://patchblox.com/security/data/cve/CVE-2026-84535.md) | High | Automator: An app may be able to break out of its sandbox | 8.2 | 0.0016 | | | [CVE-2026-64712](https://patchblox.com/security/data/cve/CVE-2026-64712.md) | High | odproxyd: An app may be able to gain root privileges | 7.8 | 0.0015 | | | [CVE-2026-86917](https://patchblox.com/security/data/cve/CVE-2026-86917.md) | High | Kernel: An app may be able to gain root privileges | 7.8 | 0.0015 | | | [CVE-2026-28853](https://patchblox.com/security/data/cve/CVE-2026-28853.md) | High | AMD: An app may be able to elevate privileges | 7.8 | 0.0015 | | | [CVE-2026-84580](https://patchblox.com/security/data/cve/CVE-2026-84580.md) | High | quarantine: An app may be able to break out of its sandbox | 8.4 | 0.0015 | | | [CVE-2026-65362](https://patchblox.com/security/data/cve/CVE-2026-65362.md) | High | Disk Images: An app may be able to gain root privileges | 7.8 | 0.0015 | | | [CVE-2026-43702](https://patchblox.com/security/data/cve/CVE-2026-43702.md) | High | CoreMedia Video Toolbox: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory | 7.8 | 0.0015 | | | [CVE-2026-84507](https://patchblox.com/security/data/cve/CVE-2026-84507.md) | High | Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory | 7.8 | 0.0013 | | | [CVE-2026-84607](https://patchblox.com/security/data/cve/CVE-2026-84607.md) | High | AVEVideoEncoder: A sandboxed app may be able to execute arbitrary code with kernel privileges | 7.8 | 0.0012 | | | [CVE-2022-3437](https://patchblox.com/security/data/cve/CVE-2022-3437.md) | Routine | Heimdal: A user in a privileged network position may be able to leak sensitive user information | 6.5 | 0.0383 | | | [CVE-2019-5598](https://patchblox.com/security/data/cve/CVE-2019-5598.md) | Routine | Kernel: A remote attacker may be able to bypass firewall rules | n/a | 0.0334 | | | [CVE-2026-84538](https://patchblox.com/security/data/cve/CVE-2026-84538.md) | Routine | Kernel: A remote attacker may be able to cause a denial-of-service | 6.5 | 0.0050 | | | [CVE-2026-84554](https://patchblox.com/security/data/cve/CVE-2026-84554.md) | Routine | CUPS: An attacker in a privileged network position may be able to cause a denial-of-service | 5.9 | 0.0049 | | | [CVE-2026-86871](https://patchblox.com/security/data/cve/CVE-2026-86871.md) | Routine | SMB: An attacker with control of a network file server may be able to cause unexpected system termination | 5.9 | 0.0049 | | | [CVE-2026-86882](https://patchblox.com/security/data/cve/CVE-2026-86882.md) | Routine | Accelerate Framework: Processing a maliciously crafted image may lead to unexpected process termination | 6.5 | 0.0048 | | | [CVE-2026-65412](https://patchblox.com/security/data/cve/CVE-2026-65412.md) | Routine | CoreText: Processing web content may lead to a denial-of-service | 6.5 | 0.0047 | | | [CVE-2026-65395](https://patchblox.com/security/data/cve/CVE-2026-65395.md) | Routine | ImageIO: Processing a maliciously crafted image may result in memory corruption | 6.5 | 0.0046 | | | [CVE-2026-84487](https://patchblox.com/security/data/cve/CVE-2026-84487.md) | Routine | SceneKit: Processing a maliciously crafted file may result in disclosure of process memory | 6.5 | 0.0046 | | | [CVE-2026-43791](https://patchblox.com/security/data/cve/CVE-2026-43791.md) | Routine | StorageKit: An app may be able to read arbitrary files | 6.5 | 0.0046 | | | [CVE-2026-84510](https://patchblox.com/security/data/cve/CVE-2026-84510.md) | Routine | exFAT: Mounting a maliciously crafted volume may lead to unexpected system termination | 6.5 | 0.0045 | | | [CVE-2026-65330](https://patchblox.com/security/data/cve/CVE-2026-65330.md) | Routine | Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory | 6.5 | 0.0045 | | | [CVE-2026-84524](https://patchblox.com/security/data/cve/CVE-2026-84524.md) | Routine | FontParser: Processing a maliciously crafted font file may lead to unexpected app termination | 4.3 | 0.0043 | | | [CVE-2026-84526](https://patchblox.com/security/data/cve/CVE-2026-84526.md) | Routine | SceneKit: Processing a maliciously crafted 3D scene may lead to unexpected process termination | 4.3 | 0.0043 | | | [CVE-2026-84519](https://patchblox.com/security/data/cve/CVE-2026-84519.md) | Routine | AppleDouble: Mounting a disk image with maliciously crafted files may lead to unexpected system termination | 6.5 | 0.0042 | | | [CVE-2026-28966](https://patchblox.com/security/data/cve/CVE-2026-28966.md) | Routine | RealityKit: Processing a maliciously crafted file may lead to unexpected app termination | 4.3 | 0.0041 | | | [CVE-2026-43677](https://patchblox.com/security/data/cve/CVE-2026-43677.md) | Routine | WebDAV: Connecting to a malicious WebDAV server may lead to unexpected app termination | 6.5 | 0.0040 | | | [CVE-2026-84509](https://patchblox.com/security/data/cve/CVE-2026-84509.md) | Routine | SMB: Connecting to a malicious SMB server may lead to unexpected system termination | 6.5 | 0.0040 | | | [CVE-2026-84536](https://patchblox.com/security/data/cve/CVE-2026-84536.md) | Routine | SMB: Connecting to a malicious SMB server may lead to unexpected system termination | 6.5 | 0.0040 | | | [CVE-2026-43787](https://patchblox.com/security/data/cve/CVE-2026-43787.md) | Routine | Mail: An attacker in a privileged network position may be able to leak sensitive user information | 5.9 | 0.0040 | | | [CVE-2026-43719](https://patchblox.com/security/data/cve/CVE-2026-43719.md) | Routine | SMB: Mounting a maliciously crafted SMB network share may lead to system termination | 6.5 | 0.0039 | | | [CVE-2026-112446](https://patchblox.com/security/data/cve/CVE-2026-112446.md) | Routine | Accounts: An app may be able to access sensitive user data | 5.5 | 0.0039 | | | [CVE-2026-65365](https://patchblox.com/security/data/cve/CVE-2026-65365.md) | Routine | SMB: Connecting to a malicious SMB share may disclose kernel memory | 6.5 | 0.0039 | | | [CVE-2026-84564](https://patchblox.com/security/data/cve/CVE-2026-84564.md) | Routine | ImageIO: Processing a maliciously crafted image may result in disclosure of process memory | 4.3 | 0.0038 | | | [CVE-2026-84532](https://patchblox.com/security/data/cve/CVE-2026-84532.md) | Routine | RealityKit: Opening a maliciously crafted file may cause unexpected process termination or disclose process memory | 5.4 | 0.0037 | | | [CVE-2026-28934](https://patchblox.com/security/data/cve/CVE-2026-28934.md) | Routine | HFS: Mounting a malicious disk image may cause unexpected system termination | 6.5 | 0.0036 | | | [CVE-2026-43789](https://patchblox.com/security/data/cve/CVE-2026-43789.md) | Routine | CoreMedia: An app may be able to access user-sensitive data | 5.5 | 0.0035 | | | [CVE-2026-86913](https://patchblox.com/security/data/cve/CVE-2026-86913.md) | Routine | CoreMedia: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory | 5.4 | 0.0033 | | | [CVE-2026-84613](https://patchblox.com/security/data/cve/CVE-2026-84613.md) | Routine | Bluetooth: An attacker in radio range may be able to cause unexpected system termination | 6.5 | 0.0033 | | | [CVE-2026-86957](https://patchblox.com/security/data/cve/CVE-2026-86957.md) | Routine | Wi-Fi: An attacker in wireless proximity may be able to cause unexpected system termination | 6.5 | 0.0032 | | | [CVE-2026-43697](https://patchblox.com/security/data/cve/CVE-2026-43697.md) | Routine | SceneKit: Processing a maliciously crafted 3D file may lead to an out-of-bounds read | 4.3 | 0.0031 | | | [CVE-2026-65342](https://patchblox.com/security/data/cve/CVE-2026-65342.md) | Routine | ATS: An app may be able to access sensitive user data | 5.5 | 0.0031 | | | [CVE-2026-65378](https://patchblox.com/security/data/cve/CVE-2026-65378.md) | Routine | Spotlight: An app may be able to access sensitive user data | 5.5 | 0.0031 | | | [CVE-2026-86959](https://patchblox.com/security/data/cve/CVE-2026-86959.md) | Routine | Messages: Processing a maliciously crafted image may lead to unexpected process termination | 4.3 | 0.0029 | | | [CVE-2026-86891](https://patchblox.com/security/data/cve/CVE-2026-86891.md) | Routine | Core Bluetooth: An app may be able to access Bluetooth device information | 3.5 | 0.0023 | | | [CVE-2026-86962](https://patchblox.com/security/data/cve/CVE-2026-86962.md) | Routine | Kernel: An app may be able to cause unexpected system termination | 5.5 | 0.0021 | | | [CVE-2026-65407](https://patchblox.com/security/data/cve/CVE-2026-65407.md) | Routine | AppleAVD: An app may be able to cause unexpected system termination | 5.5 | 0.0020 | | | [CVE-2026-86889](https://patchblox.com/security/data/cve/CVE-2026-86889.md) | Routine | Security: An attacker in a privileged network position may be able to intercept network traffic | 4.8 | 0.0020 | | | [CVE-2026-84547](https://patchblox.com/security/data/cve/CVE-2026-84547.md) | Routine | Bluetooth: An attacker in physical proximity may be able to corrupt process memory | 3.5 | 0.0020 | | | [CVE-2026-65405](https://patchblox.com/security/data/cve/CVE-2026-65405.md) | Routine | Kernel: An app may be able to determine kernel memory layout | 5.5 | 0.0019 | | | [CVE-2026-84541](https://patchblox.com/security/data/cve/CVE-2026-84541.md) | Routine | CUPS: An application may be able to access restricted files | 5.5 | 0.0018 | | | [CVE-2026-86910](https://patchblox.com/security/data/cve/CVE-2026-86910.md) | Routine | APFS: An application may be able to access restricted files | 5.5 | 0.0018 | | | [CVE-2026-28899](https://patchblox.com/security/data/cve/CVE-2026-28899.md) | Routine | CoreServices: An app may bypass Gatekeeper checks | 5.5 | 0.0018 | | | [CVE-2026-28968](https://patchblox.com/security/data/cve/CVE-2026-28968.md) | Routine | Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory | 5.5 | 0.0018 | | | [CVE-2026-64756](https://patchblox.com/security/data/cve/CVE-2026-64756.md) | Routine | Image Capture: An app may be able to access user-sensitive data | 5.5 | 0.0018 | | | [CVE-2026-65377](https://patchblox.com/security/data/cve/CVE-2026-65377.md) | Routine | Kernel: An app may be able to cause unexpected system termination | 5.5 | 0.0018 | | | [CVE-2026-84534](https://patchblox.com/security/data/cve/CVE-2026-84534.md) | Routine | file_cmds: Extracting a maliciously crafted archive may allow an attacker to write arbitrary files | 5.5 | 0.0018 | | | [CVE-2026-84624](https://patchblox.com/security/data/cve/CVE-2026-84624.md) | Routine | CoreML: A sandboxed app may be able to access restricted files | 5.5 | 0.0018 | | | [CVE-2026-65396](https://patchblox.com/security/data/cve/CVE-2026-65396.md) | Routine | APFS: An app may be able to cause unexpected system termination | 5.5 | 0.0018 | | | [CVE-2026-65369](https://patchblox.com/security/data/cve/CVE-2026-65369.md) | Routine | Kernel: A malicious application may bypass Gatekeeper checks | 5.5 | 0.0018 | | | [CVE-2026-84622](https://patchblox.com/security/data/cve/CVE-2026-84622.md) | Routine | Kernel: An app with root privileges may be able to read uninitialized kernel memory | 6.2 | 0.0018 | | | [CVE-2026-65409](https://patchblox.com/security/data/cve/CVE-2026-65409.md) | Routine | Foundation: An app may be able to cause a denial of service | 5.5 | 0.0018 | | | [CVE-2026-65402](https://patchblox.com/security/data/cve/CVE-2026-65402.md) | Routine | Kernel: An app may be able to cause unexpected system termination | 5.5 | 0.0018 | | | [CVE-2026-65382](https://patchblox.com/security/data/cve/CVE-2026-65382.md) | Routine | LaunchServices: An app may be able to access sensitive user data | 5.5 | 0.0018 | | | [CVE-2026-65371](https://patchblox.com/security/data/cve/CVE-2026-65371.md) | Routine | Kernel: An app may be able to disclose kernel memory | 3.3 | 0.0018 | | | [CVE-2026-84548](https://patchblox.com/security/data/cve/CVE-2026-84548.md) | Routine | Quick Look: Processing a maliciously crafted document may lead to an out-of-bounds read | 5.5 | 0.0017 | | | [CVE-2026-84570](https://patchblox.com/security/data/cve/CVE-2026-84570.md) | Routine | autofs: An app may be able to bypass Gatekeeper checks | 4.4 | 0.0017 | | | [CVE-2026-65413](https://patchblox.com/security/data/cve/CVE-2026-65413.md) | Routine | SceneKit: An app may be able to cause a denial of service | 5.5 | 0.0017 | | | [CVE-2026-43664](https://patchblox.com/security/data/cve/CVE-2026-43664.md) | Routine | Accessibility: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-84583](https://patchblox.com/security/data/cve/CVE-2026-84583.md) | Routine | AuthKit: A local app may be able to read a persistent account identifier | 5.5 | 0.0016 | | | [CVE-2026-86914](https://patchblox.com/security/data/cve/CVE-2026-86914.md) | Routine | mDNSResponder: An app may be able to access sensitive network connection information | 5.5 | 0.0016 | | | [CVE-2026-84559](https://patchblox.com/security/data/cve/CVE-2026-84559.md) | Routine | CoreServices: A malicious application may be able to access restricted files | 5.5 | 0.0016 | | | [CVE-2026-84576](https://patchblox.com/security/data/cve/CVE-2026-84576.md) | Routine | QuartzCore: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-84619](https://patchblox.com/security/data/cve/CVE-2026-84619.md) | Routine | Kernel: An app may be able to cause unexpected system termination or write kernel memory | 6.1 | 0.0016 | | | [CVE-2026-65376](https://patchblox.com/security/data/cve/CVE-2026-65376.md) | Routine | SMB: An app may be able to cause unexpected system termination | 5.5 | 0.0016 | | | [CVE-2026-84513](https://patchblox.com/security/data/cve/CVE-2026-84513.md) | Routine | Symptom Framework: A malicious application may be able to determine a user's current location | 5.5 | 0.0016 | | | [CVE-2026-84517](https://patchblox.com/security/data/cve/CVE-2026-84517.md) | Routine | Kernel: An app may be able to cause unexpected system termination | 5.5 | 0.0016 | | | [CVE-2026-84567](https://patchblox.com/security/data/cve/CVE-2026-84567.md) | Routine | cd9660: An app may be able to cause unexpected system termination | 5.5 | 0.0016 | | | [CVE-2026-84537](https://patchblox.com/security/data/cve/CVE-2026-84537.md) | Routine | SMB: An app may be able to cause unexpected system termination or corrupt kernel memory | 6.6 | 0.0016 | | | [CVE-2026-65408](https://patchblox.com/security/data/cve/CVE-2026-65408.md) | Routine | Apple Neural Engine: An app may be able to cause unexpected system termination | 5.5 | 0.0016 | | | [CVE-2026-84523](https://patchblox.com/security/data/cve/CVE-2026-84523.md) | Routine | APFS: An app may be able to cause unexpected system termination or write kernel memory | 5.5 | 0.0016 | | | [CVE-2026-84552](https://patchblox.com/security/data/cve/CVE-2026-84552.md) | Routine | Disk Images: An app may be able to cause unexpected system termination | 5.5 | 0.0016 | | | [CVE-2026-84602](https://patchblox.com/security/data/cve/CVE-2026-84602.md) | Routine | Kernel: An app may be able to cause unexpected system termination | 5.5 | 0.0016 | | | [CVE-2026-43741](https://patchblox.com/security/data/cve/CVE-2026-43741.md) | Routine | Messages: An app may be able to access protected user data | 5.5 | 0.0016 | | | [CVE-2026-84527](https://patchblox.com/security/data/cve/CVE-2026-84527.md) | Routine | TCC: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-84618](https://patchblox.com/security/data/cve/CVE-2026-84618.md) | Routine | Game Center: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-43737](https://patchblox.com/security/data/cve/CVE-2026-43737.md) | Routine | CoreMotion: An app may be able to access motion data from headphones without user consent | 5.5 | 0.0016 | | | [CVE-2026-43763](https://patchblox.com/security/data/cve/CVE-2026-43763.md) | Routine | ATS: An app may be able to read files outside of its sandbox | 5.5 | 0.0016 | | | [CVE-2026-65345](https://patchblox.com/security/data/cve/CVE-2026-65345.md) | Routine | Storage: An app may be able to access user-sensitive data | 5.5 | 0.0016 | | | [CVE-2026-65348](https://patchblox.com/security/data/cve/CVE-2026-65348.md) | Routine | Storage: An app may be able to modify protected parts of the file system | 5.5 | 0.0016 | | | [CVE-2026-84555](https://patchblox.com/security/data/cve/CVE-2026-84555.md) | Routine | Sandbox: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-84612](https://patchblox.com/security/data/cve/CVE-2026-84612.md) | Routine | DeviceCheck: An app may be able to read persistent device identifiers | 5.5 | 0.0016 | | | [CVE-2026-43695](https://patchblox.com/security/data/cve/CVE-2026-43695.md) | Routine | NetworkExtension: An app may be able to access sensitive user data | 5.5 | 0.0015 | | | [CVE-2026-65356](https://patchblox.com/security/data/cve/CVE-2026-65356.md) | Routine | Siri: An app may be able to access sensitive user data | 5.5 | 0.0015 | | | [CVE-2026-65379](https://patchblox.com/security/data/cve/CVE-2026-65379.md) | Routine | WindowServer: An app may be able to access sensitive user data | 5.5 | 0.0015 | | | [CVE-2026-86876](https://patchblox.com/security/data/cve/CVE-2026-86876.md) | Routine | CoreMedia: A sandboxed process may be able to circumvent sandbox restrictions | 5.2 | 0.0015 | | | [CVE-2026-84626](https://patchblox.com/security/data/cve/CVE-2026-84626.md) | Routine | NetworkExtension: An app may be able to identify what other apps a user has installed | 3.3 | 0.0015 | | | [CVE-2026-65349](https://patchblox.com/security/data/cve/CVE-2026-65349.md) | Routine | Kernel: An app may be able to cause unexpected system termination or read kernel memory | 6.6 | 0.0015 | | | [CVE-2026-65339](https://patchblox.com/security/data/cve/CVE-2026-65339.md) | Routine | Audio: An app may be able to leak sensitive user information | 5.0 | 0.0015 | | | [CVE-2026-86944](https://patchblox.com/security/data/cve/CVE-2026-86944.md) | Routine | IOAcceleratorFamily: An app may be able to cause unexpected system termination | 5.5 | 0.0015 | | | [CVE-2026-84525](https://patchblox.com/security/data/cve/CVE-2026-84525.md) | Routine | ATS: An app may be able to access user-sensitive data | 5.5 | 0.0015 | | | [CVE-2026-65361](https://patchblox.com/security/data/cve/CVE-2026-65361.md) | Routine | SoftwareUpdate: An app may be able to access sensitive user data | 5.5 | 0.0015 | | | [CVE-2026-84540](https://patchblox.com/security/data/cve/CVE-2026-84540.md) | Routine | CUPS: An app may be able to access sensitive user data | 5.5 | 0.0015 | | | [CVE-2026-84573](https://patchblox.com/security/data/cve/CVE-2026-84573.md) | Routine | Mail: An app may be able to access sensitive user data | 5.5 | 0.0015 | | | [CVE-2026-84587](https://patchblox.com/security/data/cve/CVE-2026-84587.md) | Routine | AppKit: An app may be able to access protected user data | 5.5 | 0.0015 | | | [CVE-2026-84616](https://patchblox.com/security/data/cve/CVE-2026-84616.md) | Routine | AVEVideoEncoder: An app may be able to cause unexpected system termination | 5.5 | 0.0015 | | | [CVE-2026-84621](https://patchblox.com/security/data/cve/CVE-2026-84621.md) | Routine | Spotlight: An app may be able to access sensitive user data | 5.5 | 0.0015 | | | [CVE-2026-43785](https://patchblox.com/security/data/cve/CVE-2026-43785.md) | Routine | File Bookmark: An app may be able to modify a file it only had permission to read | 5.5 | 0.0014 | | | [CVE-2026-84574](https://patchblox.com/security/data/cve/CVE-2026-84574.md) | Routine | CoreServices: An app may be able to bypass Privacy preferences | 4.4 | 0.0014 | | | [CVE-2026-65406](https://patchblox.com/security/data/cve/CVE-2026-65406.md) | Routine | BackgroundAssets: An app may be able to access sensitive user data | 5.5 | 0.0014 | | | [CVE-2026-84556](https://patchblox.com/security/data/cve/CVE-2026-84556.md) | Routine | Keychain Access: An app may be able to access sensitive user data | 5.5 | 0.0014 | | | [CVE-2026-86981](https://patchblox.com/security/data/cve/CVE-2026-86981.md) | Routine | GPU Drivers: An app may be able to cause unexpected system termination | 5.5 | 0.0014 | | | [CVE-2026-65403](https://patchblox.com/security/data/cve/CVE-2026-65403.md) | Routine | Reminders: An app may be able to access sensitive user data | 5.5 | 0.0014 | | | [CVE-2026-86907](https://patchblox.com/security/data/cve/CVE-2026-86907.md) | Routine | configd: An app with admin privileges may be able to modify the System Keychain | 4.4 | 0.0014 | | | [CVE-2026-84617](https://patchblox.com/security/data/cve/CVE-2026-84617.md) | Routine | XPC: An app may be able to access sensitive user data | 5.5 | 0.0014 | | | [CVE-2026-28850](https://patchblox.com/security/data/cve/CVE-2026-28850.md) | Routine | Shortcuts: An app may be able to access sensitive user data | 5.5 | 0.0014 | | | [CVE-2026-84514](https://patchblox.com/security/data/cve/CVE-2026-84514.md) | Routine | Kext Management: An app may be able to modify protected parts of the file system | 5.5 | 0.0014 | | | [CVE-2026-65372](https://patchblox.com/security/data/cve/CVE-2026-65372.md) | Routine | Multi-Touch: A malicious application may be able to bypass Privacy preferences | 4.7 | 0.0012 | | | [CVE-2026-65399](https://patchblox.com/security/data/cve/CVE-2026-65399.md) | Routine | copyfile: An archive may be able to bypass Gatekeeper | 4.4 | 0.0012 | | | [CVE-2026-84550](https://patchblox.com/security/data/cve/CVE-2026-84550.md) | Routine | Disk Images: An app may be able to cause unexpected system termination | 4.7 | 0.0011 | | | [CVE-2026-84492](https://patchblox.com/security/data/cve/CVE-2026-84492.md) | Routine | Graphics: An app may be able to cause unexpected system termination | 4.7 | 0.0011 | | | [CVE-2026-84630](https://patchblox.com/security/data/cve/CVE-2026-84630.md) | Routine | Kernel: An app may be able to cause unexpected system termination | 4.7 | 0.0011 | | | [CVE-2026-43690](https://patchblox.com/security/data/cve/CVE-2026-43690.md) | Routine | SMB: A local user may be able to read kernel memory | 4.7 | 0.0011 | | --- Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.