Apple
macOS Sequoia 15.7.8
128071 Jul 27, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/128071. 138 CVE entries, 13 additional recognitions. Available for: macOS Sequoia. Draft — review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/128071
Are you credited here?
Sign in and claim your line — it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
250 lines
Showing 1–50 of 250 · page 1 of 5
CVE-2026-43749
BR2026-0000-001239
Accounts
unclaimed
An app may be able to gain root privileges
Credited as Adam Franke
CVE-2026-43749
BR2026-0000-001240
Accounts
unclaimed
An app may be able to gain root privileges
Credited as Trung Nguyen (@everping) of CyStack
CVE-2026-43749
BR2026-0000-001241
Accounts
unclaimed
An app may be able to gain root privileges
Credited as Ashish Kunwar
CVE-2026-64767
BR2026-0000-001242
afpfs
unclaimed
A remote attacker may be able to cause unexpected system termination or corrupt kernel memory
Credited as Dave G.
CVE-2026-23918
BR2026-0000-001243
apache
unclaimed
A remote attacker may be able to cause a denial-of-service
Credited as Юлия Мерцалова
CVE-2026-64695
BR2026-0000-001244
APFS
unclaimed
A remote user may be able to cause unexpected system termination or corrupt kernel memory
Credited as Peter Malone
CVE-2026-43801
BR2026-0000-001245
App Store
unclaimed
An app may be able to access sensitive user data
Credited as Rahul Raj
CVE-2026-43781
BR2026-0000-001246
Apple Account
unclaimed
An app may be able to access sensitive user data
Credited as Pinak Oza
CVE-2026-64737
BR2026-0000-001247
Apple Account
unclaimed
A malicious app may be able to break out of its sandbox
Credited as Robert Mindo
CVE-2026-43748
BR2026-0000-001248
Apple Neural Engine
unclaimed
An app may be able to cause unexpected system termination
Credited as tamdao
CVE-2026-43748
BR2026-0000-001249
Apple Neural Engine
unclaimed
An app may be able to cause unexpected system termination
Credited as Franco Belman at Blackwing Intelligence
CVE-2026-43776
BR2026-0000-001250
AppleDouble
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Credited as Peter Malone
CVE-2026-43776
BR2026-0000-001251
AppleDouble
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Credited as Nicolas Rabrenovic
CVE-2026-43776
BR2026-0000-001252
AppleDouble
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Credited as Irvin Wang
CVE-2026-43681
BR2026-0000-001253
AppleRAID
unclaimed
A local user may be able to read kernel memory
Credited as impost0r (ret2plt)
CVE-2026-43681
BR2026-0000-001254
AppleRAID
unclaimed
A local user may be able to read kernel memory
Credited as David Ige - Beryllium Security
CVE-2026-43672
BR2026-0000-001255
Assets
unclaimed
A malicious application may be able to bypass Privacy preferences
Credited as 이재영
CVE-2026-43763
BR2026-0000-001256
ATS
unclaimed
An app may be able to read files outside of its sandbox
Credited as Pavan Nallamothu
CVE-2026-43763
BR2026-0000-001257
ATS
unclaimed
An app may be able to read files outside of its sandbox
Credited as Jared Reyes
CVE-2026-64702
BR2026-0000-001258
Audio
unclaimed
An app may be able to break out of its sandbox
Credited as John Lussier
CVE-2026-64725
BR2026-0000-001259
Audio
unclaimed
An app may be able to cause a denial-of-service
Credited as Seonung Park
CVE-2026-64725
BR2026-0000-001260
Audio
unclaimed
An app may be able to cause a denial-of-service
Credited as ALTV!ST (altvi.st/)
CVE-2026-64747
BR2026-0000-001261
AVEVideoEncoder
unclaimed
An app may be able to execute arbitrary code with kernel privileges
Credited as Franco Belman at Blackwing Intelligence
CVE-2026-64762
BR2026-0000-001262
AVEVideoEncoder
unclaimed
An app may be able to cause unexpected system termination
Credited as Franco Belman at Blackwing Intelligence
CVE-2026-64762
BR2026-0000-001263
AVEVideoEncoder
unclaimed
An app may be able to cause unexpected system termination
Credited as Dun
CVE-2026-64707
BR2026-0000-001264
BackgroundAssets
unclaimed
An app may be able to delete files for which it does not have permission
Credited as YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab
CVE-2026-28849
BR2026-0000-001265
BOM
unclaimed
A maliciously crafted ZIP archive may bypass Gatekeeper checks
Credited as Andreas Jaegersberger
CVE-2026-28849
BR2026-0000-001266
BOM
unclaimed
A maliciously crafted ZIP archive may bypass Gatekeeper checks
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-64698
BR2026-0000-001267
cd9660
unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Richard Zana
CVE-2026-64698
BR2026-0000-001268
cd9660
unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Peter Malone
CVE-2026-64698
BR2026-0000-001269
cd9660
unclaimed
An app may be able to cause unexpected system termination or read kernel memory
Credited as Nathaniel Oh (@calysteon)
CVE-2026-64734
BR2026-0000-001270
Contacts
unclaimed
Processing a maliciously crafted contact may leak sensitive data
Credited as Daniel Williams
CVE-2026-43756
BR2026-0000-001271
Control Center
unclaimed
An app may be able to access user-sensitive data
Credited as 이재영
CVE-2026-43693
BR2026-0000-001272
Core Services
unclaimed
An app may be able to gain root privileges
Credited as Gergely Kalman (@gergely_kalman)
CVE-2026-43673
BR2026-0000-001273
CoreAudio
unclaimed
Processing a maliciously crafted audio file may corrupt process memory
Credited as Anonymous working with TrendAI Zero Day Initiative
CVE-2026-43744
BR2026-0000-001274
CoreAudio
unclaimed
Processing an audio stream in a maliciously crafted media file may terminate the process
Credited as Mathis Mansière
CVE-2026-43803
BR2026-0000-001275
CoreAudio
unclaimed
A remote attacker may be able to cause unexpected system termination
Credited as Rahul Raj
CVE-2026-43775
BR2026-0000-001276
CoreMedia
unclaimed
An app may be able to access sensitive user data
Credited as Csaba Fitzl (@theevilbit) of Iru
CVE-2026-43711
BR2026-0000-001277
CoreMedia
unclaimed
Processing a maliciously crafted video file may lead to unexpected app termination
Credited as James Duffy (@0x4A616D657344)
CVE-2026-28936
BR2026-0000-001278
CoreServices
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Andreas Jaegersberger
CVE-2026-28936
BR2026-0000-001279
CoreServices
unclaimed
Processing a maliciously crafted file may lead to unexpected app termination
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-43738
BR2026-0000-001280
CoreUI
unclaimed
Processing a maliciously crafted asset catalog may result in disclosure of process memory
Credited as Peter Malone
CVE-2026-64710
BR2026-0000-001281
Crash Reporter
unclaimed
An app may be able to leak sensitive user information
Credited as Matthew Schneider
CVE-2026-39875
BR2026-0000-001282
CUPS
unclaimed
A malicious app may be able to gain root privileges
Credited as XBreach.ai
CVE-2026-39875
BR2026-0000-001283
CUPS
unclaimed
A malicious app may be able to gain root privileges
Credited as Dallas Dubs
CVE-2026-39875
BR2026-0000-001284
CUPS
unclaimed
A malicious app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-39875
BR2026-0000-001285
CUPS
unclaimed
A malicious app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs
CVE-2026-39875
BR2026-0000-001286
CUPS
unclaimed
A malicious app may be able to gain root privileges
Credited as Aaron Grattafiori - NVIDIA AI Red Team
CVE-2026-43698
BR2026-0000-001287
CUPS
unclaimed
An app may be able to gain root privileges
Credited as Andreas Jaegersberger
CVE-2026-43698
BR2026-0000-001288
CUPS
unclaimed
An app may be able to gain root privileges
Credited as Ro Achterberg of Nosebeard Labs