CVE Catalog

CVE-2026-64702

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.39%

31th percentile - higher than 31% of all known CVEs

Summary

An access issue was addressed with additional sandbox restrictions. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to break out of its sandbox.

Risk Assessment

Breaking out of the sandbox allows an app to access system resources beyond its permitted scope, increasing the risk of privilege escalation and security breaches.

Recommendation

Update macOS systems to the versions listed in the description to strengthen application sandbox isolation.

Original NVD description (English source)

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to break out of its sandbox.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS