macOS Sequoia, macOS Sonoma, macOS Tahoe vulnerabilities
9 known CVE vulnerabilities in macOS Sequoia, macOS Sonoma, macOS Tahoe, translated and rated.
- CVE-2025-43524High
An access issue was addressed with additional sandbox restrictions. An app may be able to break out of its sandbox.
- CVE-2026-39871High
A path handling issue was addressed with improved logic. An app may be able to observe unprotected user data.
- CVE-2026-28978High
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5.
- CVE-2026-28925High
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5.
- CVE-2026-28924High
A race condition was addressed with improved handling of symbolic links. An app may be able to access Contacts without user consent.
- CVE-2026-28923High
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5.
- CVE-2026-28919High
A consistency issue was addressed with improved state handling. An app may be able to gain root privileges.
- CVE-2026-28908High
A denial of service issue was addressed by removing the vulnerable code. An app may be able to modify protected parts of the file system.
- CVE-2026-28840High
A permissions issue was addressed with additional restrictions. An app may be able to gain root privileges.