CVE-2026-64731

CriticalCVSS 9.8

Published: 27/07/2026(UTC)Updated: 28/07/2026(UTC)Translated: 28/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

38th percentile - higher than 38% of all known CVEs

Summary

Path validation was improved. The issue affects macOS Sequoia 15.7.8 and macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.

Risk Assessment

Risk of privilege escalation and unauthorized system access.

Recommendation

Update systems to macOS Sequoia 15.7.8 or macOS Tahoe 26.6.

Original NVD description (English source)

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.