# Tahoe 26.6 Tahoe 26.6, released July 27, 2026, fixes 157 CVEs in Tahoe. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/macos/tahoe-26.6 - Platform: macOS - Released: Jul 27, 2026 - Priority: Urgent (Closes CVE-2026-64726, rated Critical) - CVEs: 157, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://support.apple.com/en-us/128067 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Tahoe](https://patchblox.com/security/data/product/macos/tahoe.md) | | 26.6 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-64726](https://patchblox.com/security/data/cve/CVE-2026-64726.md) | Urgent | Wi-Fi: An attacker in physical proximity may be able to corrupt process memory | 9.8 | 0.0090 | | | [CVE-2026-64767](https://patchblox.com/security/data/cve/CVE-2026-64767.md) | Urgent | afpfs: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0090 | | | [CVE-2026-64771](https://patchblox.com/security/data/cve/CVE-2026-64771.md) | Urgent | Model I/O: A remote attacker may be able to cause unexpected application termination or heap corruption | 9.8 | 0.0085 | | | [CVE-2026-43803](https://patchblox.com/security/data/cve/CVE-2026-43803.md) | Urgent | CoreAudio: A remote attacker may be able to cause unexpected system termination | 9.8 | 0.0082 | | | [CVE-2026-43810](https://patchblox.com/security/data/cve/CVE-2026-43810.md) | Urgent | Kernel: A remote user may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0082 | | | [CVE-2026-64770](https://patchblox.com/security/data/cve/CVE-2026-64770.md) | Urgent | Model I/O: A remote attacker may be able to cause unexpected application termination or heap corruption | 9.8 | 0.0080 | | | [CVE-2026-64774](https://patchblox.com/security/data/cve/CVE-2026-64774.md) | Urgent | Model I/O: A remote attacker may be able to cause unexpected application termination or heap corruption | 9.8 | 0.0080 | | | [CVE-2026-64772](https://patchblox.com/security/data/cve/CVE-2026-64772.md) | Urgent | Model I/O: A remote attacker may be able to cause unexpected application termination or heap corruption | 9.8 | 0.0078 | | | [CVE-2026-43750](https://patchblox.com/security/data/cve/CVE-2026-43750.md) | Urgent | Wi‑Fi: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges | 9.8 | 0.0077 | | | [CVE-2026-64695](https://patchblox.com/security/data/cve/CVE-2026-64695.md) | Urgent | APFS: A remote user may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0073 | | | [CVE-2026-43682](https://patchblox.com/security/data/cve/CVE-2026-43682.md) | Urgent | HFS: A remote user may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0072 | | | [CVE-2026-43769](https://patchblox.com/security/data/cve/CVE-2026-43769.md) | Urgent | Kernel: An app may be able to cause unexpected system termination | 9.8 | 0.0068 | | | [CVE-2026-64775](https://patchblox.com/security/data/cve/CVE-2026-64775.md) | Urgent | Kernel: An app may be able to cause unexpected system termination | 9.8 | 0.0067 | | | [CVE-2026-43778](https://patchblox.com/security/data/cve/CVE-2026-43778.md) | Urgent | Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0066 | | | [CVE-2026-43822](https://patchblox.com/security/data/cve/CVE-2026-43822.md) | Urgent | Kernel: An app may be able to cause unexpected system termination | 9.8 | 0.0066 | | | [CVE-2026-43812](https://patchblox.com/security/data/cve/CVE-2026-43812.md) | Urgent | Pro Res: An app may be able to cause unexpected system termination | 9.8 | 0.0063 | | | [CVE-2026-64731](https://patchblox.com/security/data/cve/CVE-2026-64731.md) | Urgent | Printing: A malicious app may be able to break out of its sandbox | 9.8 | 0.0061 | | | [CVE-2026-43730](https://patchblox.com/security/data/cve/CVE-2026-43730.md) | Urgent | AuthKit: An app may be able to fingerprint the user | 9.8 | 0.0061 | | | [CVE-2026-43802](https://patchblox.com/security/data/cve/CVE-2026-43802.md) | Urgent | CoreVideo: An app may be able to cause unexpected system termination | 9.8 | 0.0061 | | | [CVE-2026-64733](https://patchblox.com/security/data/cve/CVE-2026-64733.md) | Urgent | Accounts Framework: An app may be able to fingerprint the user | 9.8 | 0.0061 | | | [CVE-2026-64762](https://patchblox.com/security/data/cve/CVE-2026-64762.md) | Urgent | AVEVideoEncoder: An app may be able to cause unexpected system termination | 9.8 | 0.0061 | | | [CVE-2026-28928](https://patchblox.com/security/data/cve/CVE-2026-28928.md) | Urgent | Apple Neural Engine: An app may be able to cause unexpected system termination | 9.8 | 0.0059 | | | [CVE-2026-64751](https://patchblox.com/security/data/cve/CVE-2026-64751.md) | Urgent | Kernel: An app may be able to cause unexpected system termination or write kernel memory | 9.8 | 0.0059 | | | [CVE-2026-39873](https://patchblox.com/security/data/cve/CVE-2026-39873.md) | Urgent | SMB: Connecting to a malicious SMB server may lead to unexpected system termination | 9.8 | 0.0059 | | | [CVE-2026-43694](https://patchblox.com/security/data/cve/CVE-2026-43694.md) | Urgent | quarantine: An app may be able to cause unexpected system termination or write kernel memory | 9.8 | 0.0059 | | | [CVE-2026-43710](https://patchblox.com/security/data/cve/CVE-2026-43710.md) | Urgent | HFS: An attacker may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0059 | | | [CVE-2026-43748](https://patchblox.com/security/data/cve/CVE-2026-43748.md) | Urgent | Apple Neural Engine: An app may be able to cause unexpected system termination | 9.8 | 0.0059 | | | [CVE-2026-43764](https://patchblox.com/security/data/cve/CVE-2026-43764.md) | Urgent | HFS: An app may be able to cause unexpected system termination | 9.8 | 0.0059 | | | [CVE-2026-43773](https://patchblox.com/security/data/cve/CVE-2026-43773.md) | Urgent | HFS: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0059 | | | [CVE-2026-43793](https://patchblox.com/security/data/cve/CVE-2026-43793.md) | Urgent | DriverKit: An app may be able to cause unexpected system termination | 9.8 | 0.0059 | | | [CVE-2026-64694](https://patchblox.com/security/data/cve/CVE-2026-64694.md) | Urgent | Disk Images: An app may be able to cause unexpected system termination | 9.8 | 0.0059 | | | [CVE-2026-64697](https://patchblox.com/security/data/cve/CVE-2026-64697.md) | Urgent | HFS: An app may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0059 | | | [CVE-2026-64698](https://patchblox.com/security/data/cve/CVE-2026-64698.md) | Urgent | cd9660: An app may be able to cause unexpected system termination or read kernel memory | 9.8 | 0.0059 | | | [CVE-2026-64704](https://patchblox.com/security/data/cve/CVE-2026-64704.md) | Urgent | SMB: An app may be able to cause unexpected system termination | 9.8 | 0.0059 | | | [CVE-2026-64703](https://patchblox.com/security/data/cve/CVE-2026-64703.md) | Urgent | WebDAV: An app may be able to cause a denial-of-service | 9.8 | 0.0057 | | | [CVE-2026-64738](https://patchblox.com/security/data/cve/CVE-2026-64738.md) | Urgent | Maps: A malicious app may be able to break out of its sandbox | 9.8 | 0.0056 | | | [CVE-2026-64746](https://patchblox.com/security/data/cve/CVE-2026-64746.md) | Urgent | Contacts: An app may be able to add contacts without user authorization | 9.8 | 0.0056 | | | [CVE-2026-28982](https://patchblox.com/security/data/cve/CVE-2026-28982.md) | Urgent | Kernel: A remote user may be able to cause unexpected system termination or corrupt kernel memory | 9.8 | 0.0056 | | | [CVE-2026-43779](https://patchblox.com/security/data/cve/CVE-2026-43779.md) | Urgent | Screen Sharing Server: An app may be able to intercept network connections intended for another process | 9.8 | 0.0054 | | | [CVE-2026-64702](https://patchblox.com/security/data/cve/CVE-2026-64702.md) | Urgent | Audio: An app may be able to break out of its sandbox | 9.8 | 0.0054 | | | [CVE-2026-28911](https://patchblox.com/security/data/cve/CVE-2026-28911.md) | Urgent | Metal: A malicious app may be able to corrupt memory of a system process | 9.8 | 0.0050 | | | [CVE-2026-64727](https://patchblox.com/security/data/cve/CVE-2026-64727.md) | Urgent | Kernel: An app may be able to cause unexpected system termination | 9.8 | 0.0050 | | | [CVE-2026-64691](https://patchblox.com/security/data/cve/CVE-2026-64691.md) | Urgent | GPU Drivers: An app may be able to cause unexpected system termination | 9.8 | 0.0047 | | | [CVE-2026-43805](https://patchblox.com/security/data/cve/CVE-2026-43805.md) | Urgent | IOKit: An app may be able to cause unexpected system termination or write kernel memory | 9.8 | 0.0047 | | | [CVE-2026-64720](https://patchblox.com/security/data/cve/CVE-2026-64720.md) | Urgent | Kernel: An app may be able to cause unexpected system termination | 9.8 | 0.0047 | | | [CVE-2026-64740](https://patchblox.com/security/data/cve/CVE-2026-64740.md) | Urgent | Game Center: A malicious app may be able to break out of its sandbox | 9.3 | 0.0021 | | | [CVE-2026-23918](https://patchblox.com/security/data/cve/CVE-2026-23918.md) | High | Apache HTTP Server: http2: double free and possible RCE on early reset | 8.8 | 0.4973 | | | [CVE-2026-4424](https://patchblox.com/security/data/cve/CVE-2026-4424.md) | High | Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing | 7.5 | 0.0129 | | | [CVE-2026-43777](https://patchblox.com/security/data/cve/CVE-2026-43777.md) | High | Screen Sharing Server: A remote attacker may be able to cause a denial of service | 7.5 | 0.0070 | | | [CVE-2026-65375](https://patchblox.com/security/data/cve/CVE-2026-65375.md) | High | WebDAV: An app may be able to cause unexpected system termination | 7.5 | 0.0066 | | | [CVE-2026-64768](https://patchblox.com/security/data/cve/CVE-2026-64768.md) | High | Model I/O: A remote attacker may cause an unexpected app termination | 8.1 | 0.0057 | | | [CVE-2026-43818](https://patchblox.com/security/data/cve/CVE-2026-43818.md) | High | ImageIO: Processing a maliciously crafted image may lead to arbitrary code execution | 8.8 | 0.0055 | | | [CVE-2026-64739](https://patchblox.com/security/data/cve/CVE-2026-64739.md) | High | Libnotify: An attacker may be able to cause unexpected app termination | 8.8 | 0.0052 | | | [CVE-2026-28931](https://patchblox.com/security/data/cve/CVE-2026-28931.md) | High | Kernel: Connecting to a malicious NFS server may lead to kernel memory corruption | 8.8 | 0.0050 | | | [CVE-2026-3783](https://patchblox.com/security/data/cve/CVE-2026-3783.md) | High | token leak with redirect and netrc | 8.1 | 0.0050 | | | [CVE-2026-64730](https://patchblox.com/security/data/cve/CVE-2026-64730.md) | High | WebKit: Visiting a website that frames malicious content may lead to UI spoofing | 9.6 | 0.0049 | | | [CVE-2026-43815](https://patchblox.com/security/data/cve/CVE-2026-43815.md) | High | afpfs: Connecting to a malicious afpfs server may lead to kernel memory corruption | 8.8 | 0.0048 | | | [CVE-2026-64757](https://patchblox.com/security/data/cve/CVE-2026-64757.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0047 | | | [CVE-2026-64713](https://patchblox.com/security/data/cve/CVE-2026-64713.md) | High | WebKit: Websites may know if the user has visited a given link | 9.6 | 0.0047 | | | [CVE-2026-43804](https://patchblox.com/security/data/cve/CVE-2026-43804.md) | High | WebKit: Visiting a website may lead to an app denial-of-service | 9.6 | 0.0043 | | | [CVE-2026-64783](https://patchblox.com/security/data/cve/CVE-2026-64783.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0043 | | | [CVE-2026-43760](https://patchblox.com/security/data/cve/CVE-2026-43760.md) | High | Screen Sharing Server: An app may be able to access user-sensitive data | 8.6 | 0.0041 | | | [CVE-2026-64719](https://patchblox.com/security/data/cve/CVE-2026-64719.md) | High | WebRTC: Processing maliciously crafted web content may lead to an unexpected Safari crash | 8.1 | 0.0040 | | | [CVE-2026-64728](https://patchblox.com/security/data/cve/CVE-2026-64728.md) | High | WebKit: Maliciously crafted web content may violate iframe sandboxing policy | 9.6 | 0.0037 | | | [CVE-2026-43728](https://patchblox.com/security/data/cve/CVE-2026-43728.md) | High | Security: An attacker may be able to modify the state of the Keychain | 7.5 | 0.0026 | | | [CVE-2026-64718](https://patchblox.com/security/data/cve/CVE-2026-64718.md) | High | WebKit Canvas: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0026 | | | [CVE-2026-28912](https://patchblox.com/security/data/cve/CVE-2026-28912.md) | High | PackageKit: A user may be able to elevate privileges | 7.8 | 0.0026 | | | [CVE-2026-28981](https://patchblox.com/security/data/cve/CVE-2026-28981.md) | High | HFS: Processing a maliciously crafted image may lead to arbitrary code execution | 7.8 | 0.0020 | | | [CVE-2026-43776](https://patchblox.com/security/data/cve/CVE-2026-43776.md) | High | AppleDouble: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution | 7.8 | 0.0019 | | | [CVE-2026-64747](https://patchblox.com/security/data/cve/CVE-2026-64747.md) | High | AVEVideoEncoder: An app may be able to execute arbitrary code with kernel privileges | 7.8 | 0.0019 | | | [CVE-2026-43772](https://patchblox.com/security/data/cve/CVE-2026-43772.md) | High | NetFSFramework: An app may be able to break out of its sandbox | 8.2 | 0.0019 | | | [CVE-2026-43749](https://patchblox.com/security/data/cve/CVE-2026-43749.md) | High | Accounts: An app may be able to gain root privileges | 7.8 | 0.0019 | | | [CVE-2026-43723](https://patchblox.com/security/data/cve/CVE-2026-43723.md) | High | MediaRemote: An app may be able to gain root privileges | 7.8 | 0.0019 | | | [CVE-2026-43771](https://patchblox.com/security/data/cve/CVE-2026-43771.md) | High | Net-SNMP: An app may be able to cause a denial-of-service | 7.1 | 0.0018 | | | [CVE-2026-64763](https://patchblox.com/security/data/cve/CVE-2026-64763.md) | High | SceneKit: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution | 7.8 | 0.0018 | | | [CVE-2026-64764](https://patchblox.com/security/data/cve/CVE-2026-64764.md) | High | SceneKit: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution | 7.8 | 0.0018 | | | [CVE-2026-64766](https://patchblox.com/security/data/cve/CVE-2026-64766.md) | High | SceneKit: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution | 7.8 | 0.0018 | | | [CVE-2026-28973](https://patchblox.com/security/data/cve/CVE-2026-28973.md) | High | libc: A malicious app may be able to break out of its sandbox | 8.6 | 0.0017 | | | [CVE-2026-43673](https://patchblox.com/security/data/cve/CVE-2026-43673.md) | High | CoreAudio: Processing a maliciously crafted audio file may corrupt process memory | 7.8 | 0.0017 | | | [CVE-2026-43711](https://patchblox.com/security/data/cve/CVE-2026-43711.md) | High | CoreMedia: Processing a maliciously crafted video file may lead to unexpected app termination | 7.8 | 0.0017 | | | [CVE-2026-43733](https://patchblox.com/security/data/cve/CVE-2026-43733.md) | High | Model I/O: Processing a maliciously crafted image may corrupt process memory | 7.8 | 0.0017 | | | [CVE-2026-43780](https://patchblox.com/security/data/cve/CVE-2026-43780.md) | High | ImageIO: Processing a maliciously crafted texture may lead to unexpected app termination | 7.8 | 0.0017 | | | [CVE-2026-64716](https://patchblox.com/security/data/cve/CVE-2026-64716.md) | High | ImageIO: Processing a maliciously crafted image may corrupt process memory | 7.8 | 0.0017 | | | [CVE-2026-64749](https://patchblox.com/security/data/cve/CVE-2026-64749.md) | High | Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory | 7.8 | 0.0017 | | | [CVE-2026-64758](https://patchblox.com/security/data/cve/CVE-2026-64758.md) | High | ImageIO: Processing a maliciously crafted file may lead to unexpected app termination | 7.8 | 0.0017 | | | [CVE-2026-65357](https://patchblox.com/security/data/cve/CVE-2026-65357.md) | High | Kernel: An app may be able to cause unexpected system termination or write kernel memory | 7.8 | 0.0017 | | | [CVE-2026-43681](https://patchblox.com/security/data/cve/CVE-2026-43681.md) | High | AppleRAID: A local user may be able to read kernel memory | 7.1 | 0.0017 | | | [CVE-2026-43813](https://patchblox.com/security/data/cve/CVE-2026-43813.md) | High | CloudAttestation: A maliciously crafted app may be able to bypass code signing enforcement | 7.1 | 0.0017 | | | [CVE-2026-43747](https://patchblox.com/security/data/cve/CVE-2026-43747.md) | High | Disk Images: Parsing a maliciously crafted file may lead to an unexpected app termination | 7.1 | 0.0017 | | | [CVE-2026-64692](https://patchblox.com/security/data/cve/CVE-2026-64692.md) | High | Heimdal: An app may be able to cause a denial-of-service | 7.1 | 0.0016 | | | [CVE-2026-64725](https://patchblox.com/security/data/cve/CVE-2026-64725.md) | High | Audio: An app may be able to cause a denial-of-service | 7.1 | 0.0016 | | | [CVE-2026-28945](https://patchblox.com/security/data/cve/CVE-2026-28945.md) | High | Disk Images: An app may be able to bypass network restrictions | 7.1 | 0.0016 | | | [CVE-2026-43672](https://patchblox.com/security/data/cve/CVE-2026-43672.md) | High | Assets: A malicious application may be able to bypass Privacy preferences | 7.1 | 0.0016 | | | [CVE-2026-64737](https://patchblox.com/security/data/cve/CVE-2026-64737.md) | High | Apple Account: A malicious app may be able to break out of its sandbox | 8.2 | 0.0016 | | | [CVE-2026-39874](https://patchblox.com/security/data/cve/CVE-2026-39874.md) | High | Remote Management: A malicious app may be able to gain root privileges | 7.8 | 0.0015 | | | [CVE-2026-39875](https://patchblox.com/security/data/cve/CVE-2026-39875.md) | High | CUPS: A malicious app may be able to gain root privileges | 7.8 | 0.0015 | | | [CVE-2026-43702](https://patchblox.com/security/data/cve/CVE-2026-43702.md) | High | CoreMedia Video Toolbox: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory | 7.8 | 0.0015 | | | [CVE-2026-43783](https://patchblox.com/security/data/cve/CVE-2026-43783.md) | High | DesktopServices: A malicious app may be able to gain root privileges | 7.8 | 0.0013 | | | [CVE-2026-43693](https://patchblox.com/security/data/cve/CVE-2026-43693.md) | High | Core Services: An app may be able to gain root privileges | 7.0 | 0.0012 | | | [CVE-2026-43755](https://patchblox.com/security/data/cve/CVE-2026-43755.md) | High | SecurityAgent: An app may be able to gain root privileges | 7.0 | 0.0011 | | | [CVE-2026-64735](https://patchblox.com/security/data/cve/CVE-2026-64735.md) | Routine | Kernel: A remote attacker may be able to bypass network filters | 6.5 | 0.0055 | | | [CVE-2026-3784](https://patchblox.com/security/data/cve/CVE-2026-3784.md) | Routine | wrong proxy connection reuse with credentials | 6.5 | 0.0045 | | | [CVE-2026-43821](https://patchblox.com/security/data/cve/CVE-2026-43821.md) | Routine | WebKit: An app may be able to read files outside of its sandbox | 6.5 | 0.0042 | | | [CVE-2026-64743](https://patchblox.com/security/data/cve/CVE-2026-64743.md) | Routine | Managed Configuration: An app may be able to access sensitive user data | 6.5 | 0.0041 | | | [CVE-2026-43761](https://patchblox.com/security/data/cve/CVE-2026-43761.md) | Routine | AppleRAID: Mounting a malicious disk image may cause unexpected system termination | 6.5 | 0.0040 | | | [CVE-2026-43792](https://patchblox.com/security/data/cve/CVE-2026-43792.md) | Routine | Safari: An app may be able to access sensitive user data | 6.5 | 0.0033 | | | [CVE-2026-43753](https://patchblox.com/security/data/cve/CVE-2026-43753.md) | Routine | DriverKit: An attacker with physical access to a locked device may be able to view sensitive user information | 4.6 | 0.0022 | | | [CVE-2026-43766](https://patchblox.com/security/data/cve/CVE-2026-43766.md) | Routine | LoginWindow: An attacker with physical access to a locked device may be able to view sensitive user information | 4.6 | 0.0020 | | | [CVE-2026-65407](https://patchblox.com/security/data/cve/CVE-2026-65407.md) | Routine | AppleAVD: An app may be able to cause unexpected system termination | 5.5 | 0.0020 | | | [CVE-2026-43765](https://patchblox.com/security/data/cve/CVE-2026-43765.md) | Routine | PackageKit: An app may be able to modify protected parts of the file system | 5.5 | 0.0018 | | | [CVE-2026-28899](https://patchblox.com/security/data/cve/CVE-2026-28899.md) | Routine | CoreServices: An app may bypass Gatekeeper checks | 5.5 | 0.0018 | | | [CVE-2026-64722](https://patchblox.com/security/data/cve/CVE-2026-64722.md) | Routine | Model I/O: Processing a 3D model may result in disclosure of process memory | 5.5 | 0.0018 | | | [CVE-2026-65371](https://patchblox.com/security/data/cve/CVE-2026-65371.md) | Routine | Kernel: An app may be able to disclose kernel memory | 3.3 | 0.0018 | | | [CVE-2026-64745](https://patchblox.com/security/data/cve/CVE-2026-64745.md) | Routine | Siri: A person with physical access to a locked device may be able to access contacts and photos | 2.4 | 0.0017 | | | [CVE-2026-64705](https://patchblox.com/security/data/cve/CVE-2026-64705.md) | Routine | HFS: An app may be able to cause unexpected system termination or write kernel memory | 5.5 | 0.0017 | | | [CVE-2026-64708](https://patchblox.com/security/data/cve/CVE-2026-64708.md) | Routine | DesktopServices: An app may bypass Gatekeeper checks | 5.5 | 0.0017 | | | [CVE-2026-43800](https://patchblox.com/security/data/cve/CVE-2026-43800.md) | Routine | Siri: An app may be able to access sensitive user data | 5.5 | 0.0017 | | | [CVE-2026-43774](https://patchblox.com/security/data/cve/CVE-2026-43774.md) | Routine | Spotlight: An app may be able to access sensitive user data | 5.5 | 0.0017 | | | [CVE-2026-43782](https://patchblox.com/security/data/cve/CVE-2026-43782.md) | Routine | Kernel: An app may be able to access sensitive user data | 5.5 | 0.0017 | | | [CVE-2026-43797](https://patchblox.com/security/data/cve/CVE-2026-43797.md) | Routine | Contacts: An app may be able to access information about a user's contacts | 5.5 | 0.0017 | | | [CVE-2026-64699](https://patchblox.com/security/data/cve/CVE-2026-64699.md) | Routine | WebDAV: An app may be able to disclose kernel memory | 5.5 | 0.0017 | | | [CVE-2026-64710](https://patchblox.com/security/data/cve/CVE-2026-64710.md) | Routine | Crash Reporter: An app may be able to leak sensitive user information | 5.5 | 0.0017 | | | [CVE-2026-64776](https://patchblox.com/security/data/cve/CVE-2026-64776.md) | Routine | Disk Images: An app may be able to disclose kernel memory | 5.5 | 0.0017 | | | [CVE-2026-43714](https://patchblox.com/security/data/cve/CVE-2026-43714.md) | Routine | Foundation: A malicious app may be able to access protected user data | 5.5 | 0.0016 | | | [CVE-2026-43754](https://patchblox.com/security/data/cve/CVE-2026-43754.md) | Routine | Kernel: An app may be able to leak sensitive kernel state | 5.5 | 0.0016 | | | [CVE-2026-43758](https://patchblox.com/security/data/cve/CVE-2026-43758.md) | Routine | Data Detectors UI: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-43796](https://patchblox.com/security/data/cve/CVE-2026-43796.md) | Routine | Game Center: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-43801](https://patchblox.com/security/data/cve/CVE-2026-43801.md) | Routine | App Store: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-64709](https://patchblox.com/security/data/cve/CVE-2026-64709.md) | Routine | Kernel: An app may be able to disclose kernel memory | 5.5 | 0.0016 | | | [CVE-2026-64721](https://patchblox.com/security/data/cve/CVE-2026-64721.md) | Routine | Kernel: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-64734](https://patchblox.com/security/data/cve/CVE-2026-64734.md) | Routine | Contacts: Processing a maliciously crafted contact may leak sensitive data | 5.5 | 0.0016 | | | [CVE-2026-64744](https://patchblox.com/security/data/cve/CVE-2026-64744.md) | Routine | Kernel: An app may be able to disclose kernel memory | 5.5 | 0.0016 | | | [CVE-2026-28932](https://patchblox.com/security/data/cve/CVE-2026-28932.md) | Routine | xar: An app may be able to cause a denial of service | 5.5 | 0.0016 | | | [CVE-2026-43768](https://patchblox.com/security/data/cve/CVE-2026-43768.md) | Routine | udf: An app may be able to cause unexpected system termination | 5.5 | 0.0016 | | | [CVE-2026-43739](https://patchblox.com/security/data/cve/CVE-2026-43739.md) | Routine | Kernel: An app may be able to cause unexpected system termination | 5.5 | 0.0016 | | | [CVE-2026-43744](https://patchblox.com/security/data/cve/CVE-2026-43744.md) | Routine | CoreAudio: Processing an audio stream in a maliciously crafted media file may terminate the process | 5.5 | 0.0016 | | | [CVE-2026-43817](https://patchblox.com/security/data/cve/CVE-2026-43817.md) | Routine | Kernel: An app may be able to cause unexpected system termination | 5.5 | 0.0016 | | | [CVE-2026-64693](https://patchblox.com/security/data/cve/CVE-2026-64693.md) | Routine | ImageIO: Processing a maliciously crafted image may lead to a denial-of-service | 5.5 | 0.0016 | | | [CVE-2026-64724](https://patchblox.com/security/data/cve/CVE-2026-64724.md) | Routine | mDNSResponder: An attacker on the local network may be able to cause a denial-of-service | 5.5 | 0.0016 | | | [CVE-2026-64754](https://patchblox.com/security/data/cve/CVE-2026-64754.md) | Routine | ImageIO: Processing a maliciously crafted file may lead to a denial-of-service | 5.5 | 0.0016 | | | [CVE-2026-43756](https://patchblox.com/security/data/cve/CVE-2026-43756.md) | Routine | Control Center: An app may be able to access user-sensitive data | 5.5 | 0.0016 | | | [CVE-2026-43762](https://patchblox.com/security/data/cve/CVE-2026-43762.md) | Routine | Single Sign-On: An app may be able to access user-sensitive data | 5.5 | 0.0016 | | | [CVE-2026-43819](https://patchblox.com/security/data/cve/CVE-2026-43819.md) | Routine | Accounts: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-28933](https://patchblox.com/security/data/cve/CVE-2026-28933.md) | Routine | ppp: An app may be able to cause unexpected system termination | 5.5 | 0.0016 | | | [CVE-2026-43763](https://patchblox.com/security/data/cve/CVE-2026-43763.md) | Routine | ATS: An app may be able to read files outside of its sandbox | 5.5 | 0.0016 | | | [CVE-2026-43775](https://patchblox.com/security/data/cve/CVE-2026-43775.md) | Routine | CoreMedia: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-64707](https://patchblox.com/security/data/cve/CVE-2026-64707.md) | Routine | BackgroundAssets: An app may be able to delete files for which it does not have permission | 5.5 | 0.0016 | | | [CVE-2026-64711](https://patchblox.com/security/data/cve/CVE-2026-64711.md) | Routine | NSColorPanel: An app may be able to leak sensitive user information | 5.5 | 0.0016 | | | [CVE-2026-64723](https://patchblox.com/security/data/cve/CVE-2026-64723.md) | Routine | Kernel: An app may be able to access sensitive user data | 5.5 | 0.0016 | | | [CVE-2026-43808](https://patchblox.com/security/data/cve/CVE-2026-43808.md) | Routine | Kernel: An app may be able to cause unexpected system termination | 5.5 | 0.0015 | | | [CVE-2026-43767](https://patchblox.com/security/data/cve/CVE-2026-43767.md) | Routine | HFS: An app may be able to cause unexpected system termination | 5.0 | 0.0015 | | | [CVE-2026-65353](https://patchblox.com/security/data/cve/CVE-2026-65353.md) | Routine | Apple Account: An app may be able to access sensitive user data | 5.5 | 0.0014 | | | [CVE-2026-43806](https://patchblox.com/security/data/cve/CVE-2026-43806.md) | Routine | mDNSResponder: A local attacker may be able to cause a denial of service | 5.5 | 0.0014 | | | [CVE-2026-64717](https://patchblox.com/security/data/cve/CVE-2026-64717.md) | Routine | Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory | 6.3 | 0.0012 | | | [CVE-2026-43781](https://patchblox.com/security/data/cve/CVE-2026-43781.md) | Routine | Apple Account: An app may be able to access sensitive user data | 4.7 | 0.0012 | | | [CVE-2026-43770](https://patchblox.com/security/data/cve/CVE-2026-43770.md) | Routine | StorageKit: An app may be able to access sensitive user data | 4.7 | 0.0011 | | | [CVE-2026-84562](https://patchblox.com/security/data/cve/CVE-2026-84562.md) | Routine | Virtualization: An app may be able to access protected user data | 4.7 | 0.0010 | | --- Data as of 2026-11-10T07:50:38Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.