{
  "fix": "Tahoe 26.6.2",
  "url": "https://patchblox.com/security/fix/macos/tahoe-26.6.2",
  "summary": "Tahoe 26.6.2, released August 17, 2026, fixes 25 CVEs in Tahoe. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "macos",
  "type": "os-version",
  "title": "Tahoe 26.6.2",
  "released": "2026-08-17T00:00:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2026-65343, high severity",
  "supported": true,
  "cveCount": 25,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00678,
  "maxCvss": 9.6,
  "vendorAdvisory": "https://support.apple.com/en-us/148281",
  "appliesTo": [
    {
      "product": "Tahoe",
      "productUrl": "https://patchblox.com/security/product/macos/tahoe",
      "fixedVersion": "26.6.2",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-65343",
      "url": "https://patchblox.com/security/cve/CVE-2026-65343",
      "title": "Kernel: A remote attacker may be able to cause unexpected system termination",
      "component": "Kernel",
      "impact": "A remote attacker may be able to cause unexpected system termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00678,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-65351",
      "url": "https://patchblox.com/security/cve/CVE-2026-65351",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 9.6,
      "epss": 0.00646,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64780",
      "url": "https://patchblox.com/security/cve/CVE-2026-64780",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 9.6,
      "epss": 0.00633,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-65346",
      "url": "https://patchblox.com/security/cve/CVE-2026-65346",
      "title": "ImageIO: Processing an image may lead to arbitrary code execution",
      "component": "ImageIO",
      "impact": "Processing an image may lead to arbitrary code execution",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00587,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43795",
      "url": "https://patchblox.com/security/cve/CVE-2026-43795",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 9.6,
      "epss": 0.00584,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64784",
      "url": "https://patchblox.com/security/cve/CVE-2026-64784",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 9.6,
      "epss": 0.00584,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-65334",
      "url": "https://patchblox.com/security/cve/CVE-2026-65334",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 9.6,
      "epss": 0.00584,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64715",
      "url": "https://patchblox.com/security/cve/CVE-2026-64715",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 9.6,
      "epss": 0.00468,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64782",
      "url": "https://patchblox.com/security/cve/CVE-2026-64782",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "priority": "High",
      "severity": "LOW",
      "cvss": 9.6,
      "epss": 0.0043,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43794",
      "url": "https://patchblox.com/security/cve/CVE-2026-43794",
      "title": "WebKit: Processing maliciously crafted web content may lead to memory corruption",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to memory corruption",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00422,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-65390",
      "url": "https://patchblox.com/security/cve/CVE-2026-65390",
      "title": "WebRTC: Processing maliciously crafted web content may lead to memory corruption",
      "component": "WebRTC",
      "impact": "Processing maliciously crafted web content may lead to memory corruption",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00413,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-65391",
      "url": "https://patchblox.com/security/cve/CVE-2026-65391",
      "title": "WebRTC: Processing maliciously crafted web content may lead to memory corruption",
      "component": "WebRTC",
      "impact": "Processing maliciously crafted web content may lead to memory corruption",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00413,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64779",
      "url": "https://patchblox.com/security/cve/CVE-2026-64779",
      "title": "WebKit Storage: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "component": "WebKit Storage",
      "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "priority": "High",
      "severity": "LOW",
      "cvss": 9.6,
      "epss": 0.00379,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64778",
      "url": "https://patchblox.com/security/cve/CVE-2026-64778",
      "title": "WebKit History: Visiting a maliciously crafted website may leak sensitive data",
      "component": "WebKit History",
      "impact": "Visiting a maliciously crafted website may leak sensitive data",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 9.6,
      "epss": 0.00339,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64787",
      "url": "https://patchblox.com/security/cve/CVE-2026-64787",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected process termination",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process termination",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 9.6,
      "epss": 0.00333,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-65341",
      "url": "https://patchblox.com/security/cve/CVE-2026-65341",
      "title": "WebKit: Processing maliciously crafted web content may lead to memory corruption",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to memory corruption",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 9.6,
      "epss": 0.00299,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64736",
      "url": "https://patchblox.com/security/cve/CVE-2026-64736",
      "title": "IOMobileFrameBuffer: An app may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "IOMobileFrameBuffer",
      "impact": "An app may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64781",
      "url": "https://patchblox.com/security/cve/CVE-2026-64781",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.3,
      "epss": 0.00531,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-65330",
      "url": "https://patchblox.com/security/cve/CVE-2026-65330",
      "title": "Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00447,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-65347",
      "url": "https://patchblox.com/security/cve/CVE-2026-65347",
      "title": "ImageIO: Processing an image may lead to a denial-of-service",
      "component": "ImageIO",
      "impact": "Processing an image may lead to a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00417,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-65355",
      "url": "https://patchblox.com/security/cve/CVE-2026-65355",
      "title": "Authentication Services: A website may be able to determine a user\u0027s IP address with Private Relay turned on",
      "component": "Authentication Services",
      "impact": "A website may be able to determine a user\u0027s IP address with Private Relay turned on",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.3,
      "epss": 0.0034,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-65352",
      "url": "https://patchblox.com/security/cve/CVE-2026-65352",
      "title": "WebKit: A website may be able to determine a user\u0027s IP address with Private Relay turned on",
      "component": "WebKit",
      "impact": "A website may be able to determine a user\u0027s IP address with Private Relay turned on",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.3,
      "epss": 0.00329,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64788",
      "url": "https://patchblox.com/security/cve/CVE-2026-64788",
      "title": "IOGPUFamily: Processing maliciously crafted web content may lead to memory corruption",
      "component": "IOGPUFamily",
      "impact": "Processing maliciously crafted web content may lead to memory corruption",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.4,
      "epss": 0.00255,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-65349",
      "url": "https://patchblox.com/security/cve/CVE-2026-65349",
      "title": "Kernel: An app may be able to cause unexpected system termination or read kernel memory",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination or read kernel memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.6,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-65339",
      "url": "https://patchblox.com/security/cve/CVE-2026-65339",
      "title": "Audio: An app may be able to leak sensitive user information",
      "component": "Audio",
      "impact": "An app may be able to leak sensitive user information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T20:03:11Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}