GCVE-1988-2026-0263

Vulnerability from gna-1988 – Published: 2026-09-08 08:13 – Updated: 2026-09-11 11:21
VLAI
Title
APPLE-SA-03-24-2026-3 macOS Tahoe 26.4
Summary
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-03-24-2026-3 macOS Tahoe 26.4 macOS Tahoe 26.4 addresses the following issues. Information about the security content is also available at https://support.apple.com/126794. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. 802.1X Available for: macOS Tahoe Impact: An attacker in a privileged network position may be able to intercept network traffic Description: An authentication issue was addressed with improved state management. CVE-2026-28865: Héloïse Gollier and Mathy Vanhoef (KU Leuven) Accounts Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-28877: Rosyna Keller of Totally Not Malicious Software Admin Framework Available for: macOS Tahoe Impact: An app with root privileges may be able to delete protected system files Description: A path handling issue was addressed with improved validation. CVE-2026-28823: Ryan Dowd (@_rdowd) apache Available for: macOS Tahoe Impact: Multiple issues in Apache Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. CVE-2025-55753 CVE-2025-58098 CVE-2025-59775 CVE-2025-65082 CVE-2025-66200 AppleMobileFileIntegrity Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-28824: Mickey Jin (@patch1t) AppleMobileFileIntegrity Available for: macOS Tahoe Impact: An app may be able to access user-sensitive data Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. CVE-2026-20699: Mickey Jin (@patch1t) AppleScript Available for: macOS Tahoe Impact: An app may bypass Gatekeeper checks Description: A permissions issue was addressed with additional restrictions. CVE-2026-20684: Koh M. Nakagawa (@tsunek0h) of FFRI Security, Inc. Archive Utility Available for: macOS Tahoe Impact: An app may be able to access user-sensitive data Description: This issue was addressed with improved handling of symlinks. CVE-2026-20633: Mickey Jin (@patch1t) Audio Available for: macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: A use-after-free issue was addressed with improved memory management. CVE-2026-28879: Justin Cohen of Google Audio Available for: macOS Tahoe Impact: An attacker may be able to cause unexpected app termination Description: A type confusion issue was addressed with improved memory handling. CVE-2026-28822: Jex Amro Calling Framework Available for: macOS Tahoe Impact: A remote attacker may be able to cause a denial-of-service Description: A denial-of-service issue was addressed with improved input validation. CVE-2026-28894: an anonymous researcher Clipboard Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: This issue was addressed with improved validation of symlinks. CVE-2026-28866: Cristian Dinca (icmd.tech) CoreMedia Available for: macOS Tahoe Impact: Processing an audio stream in a maliciously crafted media file may terminate the process Description: An out-of-bounds access issue was addressed with improved bounds checking. CVE-2026-20690: Hossein Lotfi (@hosselot) of Trend Micro Zero Day Initiative CoreServices Available for: macOS Tahoe Impact: An app may be able to gain elevated privileges Description: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. CVE-2026-28821: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab CoreServices Available for: macOS Tahoe Impact: An app may be able to break out of its sandbox Description: A permissions issue was addressed with additional sandbox restrictions. CVE-2026-28838: an anonymous researcher CoreUtils Available for: macOS Tahoe Impact: A user in a privileged network position may be able to cause a denial-of-service Description: A null pointer dereference was addressed with improved input validation. CVE-2026-28886: Etienne Charron (Renault) and Victoria Martini (Renault) Crash Reporter Available for: macOS Tahoe Impact: An app may be able to enumerate a user's installed apps Description: A privacy issue was addressed by removing sensitive data. CVE-2026-28878: Zhongcheng Li from IES Red Team CUPS Available for: macOS Tahoe Impact: An app may be able to gain root privileges Description: A race condition was addressed with improved state handling. CVE-2026-28888: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs CUPS Available for: macOS Tahoe Impact: A document may be written to a temporary file when using print preview Description: A privacy issue was addressed with improved handling of temporary files. CVE-2026-28893: Asaf Cohen curl Available for: macOS Tahoe Impact: An issue existed in curl which may result in unintentionally sending sensitive information via an incorrect connection Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. CVE-2025-14524 DeviceLink Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-28876: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs Diagnostics Available for: macOS Tahoe Impact: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed by removing the vulnerable code. CVE-2026-28892: 风沐云烟 (@binary_fmyy) and Minghao Lin (@Y1nKoc) File System Available for: macOS Tahoe Impact: An app may be able to disclose kernel memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-28832: DARKNAVY (@DarkNavyOrg) GeoServices Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: An information leakage was addressed with additional validation. CVE-2026-28870: XiguaSec GPU Drivers Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination Description: A race condition was addressed with improved state handling. CVE-2026-28834: an anonymous researcher iCloud Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed by moving sensitive data. CVE-2026-28881: Ye Zhang of Baidu Security, Ryan Dowd (@_rdowd), Csaba Fitzl (@theevilbit) of Iru iCloud Available for: macOS Tahoe Impact: An app may be able to enumerate a user's installed apps Description: A permissions issue was addressed with additional restrictions. CVE-2026-28880: Zhongcheng Li from IES Red Team CVE-2026-28833: Zhongcheng Li from IES Red Team ImageIO Available for: macOS Tahoe Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. CVE-2025-64505 IOGraphics Available for: macOS Tahoe Impact: A buffer overflow may result in memory corruption and unexpected app termination Description: The issue was addressed with improved bounds checks. CVE-2026-28842: Joseph Ravichandran (@0xjprx) of MIT CSAIL IOGraphics Available for: macOS Tahoe Impact: A buffer overflow may result in memory corruption and unexpected app termination Description: A buffer overflow was addressed with improved size validation. CVE-2026-28841: Joseph Ravichandran (@0xjprx) of MIT CSAIL Kernel Available for: macOS Tahoe Impact: An app may be able to disclose kernel memory Description: A logging issue was addressed with improved data redaction. CVE-2026-28868: 이동하 (Lee Dong Ha of BoB 0xB6) Kernel Available for: macOS Tahoe Impact: An app may be able to leak sensitive kernel state Description: This issue was addressed with improved authentication. CVE-2026-28867: Jian Lee (@speedyfriend433) Kernel Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: The issue was addressed with improved memory handling. CVE-2026-20698: DARKNAVY (@DarkNavyOrg) Kernel Available for: macOS Tahoe Impact: An app may be able to determine kernel memory layout Description: An information disclosure issue was addressed with improved memory management. CVE-2026-20695: 이동하 (Lee Dong Ha of BoB 0xB6) working with TrendAI Zero Day Initiative, hari shanmugam Kernel Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or write kernel memory Description: A use after free issue was addressed with improved memory management. CVE-2026-20687: Johnny Franks (@zeroxjf) LaunchServices Available for: macOS Tahoe Impact: An app may be able to access protected user data Description: An authorization issue was addressed with improved state management. CVE-2026-28845: Yuebin Sun (@yuebinsun2020), an anonymous researcher, Nathaniel Oh (@calysteon), Kirin (@Pwnrin), Wojciech Regula of SecuRing (wojciechregula.blog), Joshua Jewett (@JoshJewett33), an anonymous researcher libxpc Available for: macOS Tahoe Impact: An app may be able to enumerate a user's installed apps Description: This issue was addressed with improved checks. CVE-2026-28882: Ilias Morad (A2nkF) of Voynich Group, Duy Trần (@khanhduytran0), @hugeBlack libxpc Available for: macOS Tahoe Impact: An app may be able to access protected user data Description: A permissions issue was addressed with additional restrictions. CVE-2026-20607: an anonymous researcher Mail Available for: macOS Tahoe Impact: "Hide IP Address" and "Block All Remote Content" may not apply to all mail content Description: A privacy issue was addressed with improved handling of user preferences. CVE-2026-20692: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs MigrationKit Available for: macOS Tahoe Impact: An app may be able to access user-sensitive data Description: This issue was addressed with improved handling of symlinks. CVE-2026-20694: Rodolphe Brunetti (@eisw0lf) of Lupus Nova Music Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-20632: Rodolphe Brunetti (@eisw0lf) of Lupus Nova NetAuth Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: The issue was addressed with improved checks. CVE-2026-28839: Mickey Jin (@patch1t) NetAuth Available for: macOS Tahoe Impact: An app may be able to connect to a network share without user consent Description: An access issue was addressed with additional sandbox restrictions. CVE-2026-20701: Matej Moravec (@MacejkoMoravec) NetAuth Available for: macOS Tahoe Impact: An app may be able to break out of its sandbox Description: A race condition was addressed with additional validation. CVE-2026-28891: an anonymous researcher NetFSFramework Available for: macOS Tahoe Impact: An app may be able to break out of its sandbox Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-28827: Csaba Fitzl (@theevilbit) of Iru, an anonymous researcher Notes Available for: macOS Tahoe Impact: An app may be able to delete files for which it does not have permission Description: A path handling issue was addressed with improved validation. CVE-2026-28816: Dawuge of Shuffl
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version CPE status
Apple Macos Tahoe Affected: unknown
guessed Create a notification for this product.
Credits
Apple Product Security via Fulldisclosure
Relationships
reference GCVE-1988-2026-0263 (this record)
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Macos Tahoe",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-03-24-2026-3 macOS Tahoe 26.4\n\nmacOS Tahoe 26.4 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/126794.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\n802.1X\nAvailable for: macOS Tahoe\nImpact: An attacker in a privileged network position may be able to\nintercept network traffic\nDescription: An authentication issue was addressed with improved state\nmanagement.\nCVE-2026-28865: H\u00e9lo\u00efse Gollier and Mathy Vanhoef (KU Leuven)\n\nAccounts\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-28877: Rosyna Keller of Totally Not Malicious Software\n\nAdmin Framework\nAvailable for: macOS Tahoe\nImpact: An app with root privileges may be able to delete protected\nsystem files\nDescription: A path handling issue was addressed with improved\nvalidation.\nCVE-2026-28823: Ryan Dowd (@_rdowd)\n\napache\nAvailable for: macOS Tahoe\nImpact: Multiple issues in Apache\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-55753\nCVE-2025-58098\nCVE-2025-59775\nCVE-2025-65082\nCVE-2025-66200\n\nAppleMobileFileIntegrity\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-28824: Mickey Jin (@patch1t)\n\nAppleMobileFileIntegrity\nAvailable for: macOS Tahoe\nImpact: An app may be able to access user-sensitive data\nDescription: A downgrade issue affecting Intel-based Mac computers was\naddressed with additional code-signing restrictions.\nCVE-2026-20699: Mickey Jin (@patch1t)\n\nAppleScript\nAvailable for: macOS Tahoe\nImpact: An app may bypass Gatekeeper checks\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-20684: Koh M. Nakagawa (@tsunek0h) of FFRI Security, Inc.\n\nArchive Utility\nAvailable for: macOS Tahoe\nImpact: An app may be able to access user-sensitive data\nDescription: This issue was addressed with improved handling of\nsymlinks.\nCVE-2026-20633: Mickey Jin (@patch1t)\n\nAudio\nAvailable for: macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process crash\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nCVE-2026-28879: Justin Cohen of Google\n\nAudio\nAvailable for: macOS Tahoe\nImpact: An attacker may be able to cause unexpected app termination\nDescription: A type confusion issue was addressed with improved memory\nhandling.\nCVE-2026-28822: Jex Amro\n\nCalling Framework\nAvailable for: macOS Tahoe\nImpact: A remote attacker may be able to cause a denial-of-service\nDescription: A denial-of-service issue was addressed with improved input\nvalidation.\nCVE-2026-28894: an anonymous researcher\n\nClipboard\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with improved validation of\nsymlinks.\nCVE-2026-28866: Cristian Dinca (icmd.tech)\n\nCoreMedia\nAvailable for: macOS Tahoe\nImpact: Processing an audio stream in a maliciously crafted media file\nmay terminate the process\nDescription: An out-of-bounds access issue was addressed with improved\nbounds checking.\nCVE-2026-20690: Hossein Lotfi (@hosselot) of Trend Micro Zero Day\nInitiative\n\nCoreServices\nAvailable for: macOS Tahoe\nImpact: An app may be able to gain elevated privileges\nDescription: A validation issue existed in the entitlement verification.\nThis issue was addressed with improved validation of the process\nentitlement.\nCVE-2026-28821: YingQi Shi (@Mas0nShi) of DBAppSecurity\u0027s WeBin lab\n\nCoreServices\nAvailable for: macOS Tahoe\nImpact: An app may be able to break out of its sandbox\nDescription: A permissions issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-28838: an anonymous researcher\n\nCoreUtils\nAvailable for: macOS Tahoe\nImpact: A user in a privileged network position may be able to cause a\ndenial-of-service\nDescription: A null pointer dereference was addressed with improved\ninput validation.\nCVE-2026-28886: Etienne Charron (Renault) and Victoria Martini (Renault)\n\nCrash Reporter\nAvailable for: macOS Tahoe\nImpact: An app may be able to enumerate a user\u0027s installed apps\nDescription: A privacy issue was addressed by removing sensitive data.\nCVE-2026-28878: Zhongcheng Li from IES Red Team\n\nCUPS\nAvailable for: macOS Tahoe\nImpact: An app may be able to gain root privileges\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-28888: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nCUPS\nAvailable for: macOS Tahoe\nImpact: A document may be written to a temporary file when using print\npreview\nDescription: A privacy issue was addressed with improved handling of\ntemporary files.\nCVE-2026-28893: Asaf Cohen\n\ncurl\nAvailable for: macOS Tahoe\nImpact: An issue existed in curl which may result in unintentionally\nsending sensitive information via an incorrect connection\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-14524\n\nDeviceLink\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-28876: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nDiagnostics\nAvailable for: macOS Tahoe\nImpact: An app may be able to modify protected parts of the file system\nDescription: A permissions issue was addressed by removing the\nvulnerable code.\nCVE-2026-28892: \u98ce\u6c90\u4e91\u70df (@binary_fmyy) and Minghao Lin (@Y1nKoc)\n\nFile System\nAvailable for: macOS Tahoe\nImpact: An app may be able to disclose kernel memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-28832: DARKNAVY (@DarkNavyOrg)\n\nGeoServices\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: An information leakage was addressed with additional\nvalidation.\nCVE-2026-28870: XiguaSec\n\nGPU Drivers\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-28834: an anonymous researcher\n\niCloud\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: A privacy issue was addressed by moving sensitive data.\nCVE-2026-28881: Ye Zhang of Baidu Security, Ryan Dowd (@_rdowd), Csaba\nFitzl (@theevilbit) of Iru\n\niCloud\nAvailable for: macOS Tahoe\nImpact: An app may be able to enumerate a user\u0027s installed apps\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-28880: Zhongcheng Li from IES Red Team\nCVE-2026-28833: Zhongcheng Li from IES Red Team\n\nImageIO\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-64505\n\nIOGraphics\nAvailable for: macOS Tahoe\nImpact: A buffer overflow may result in memory corruption and unexpected\napp termination\nDescription: The issue was addressed with improved bounds checks.\nCVE-2026-28842: Joseph Ravichandran (@0xjprx) of MIT CSAIL\n\nIOGraphics\nAvailable for: macOS Tahoe\nImpact: A buffer overflow may result in memory corruption and unexpected\napp termination\nDescription: A buffer overflow was addressed with improved size\nvalidation.\nCVE-2026-28841: Joseph Ravichandran (@0xjprx) of MIT CSAIL\n\nKernel\nAvailable for: macOS Tahoe\nImpact: An app may be able to disclose kernel memory\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-28868: \uc774\ub3d9\ud558 (Lee Dong Ha of BoB 0xB6)\n\nKernel\nAvailable for: macOS Tahoe\nImpact: An app may be able to leak sensitive kernel state\nDescription: This issue was addressed with improved authentication.\nCVE-2026-28867: Jian Lee (@speedyfriend433)\n\nKernel\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-20698: DARKNAVY (@DarkNavyOrg)\n\nKernel\nAvailable for: macOS Tahoe\nImpact: An app may be able to determine kernel memory layout\nDescription: An information disclosure issue was addressed with improved\nmemory management.\nCVE-2026-20695: \uc774\ub3d9\ud558 (Lee Dong Ha of BoB 0xB6) working with TrendAI Zero\nDay Initiative, hari shanmugam\n\nKernel\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-20687: Johnny Franks (@zeroxjf)\n\nLaunchServices\nAvailable for: macOS Tahoe\nImpact: An app may be able to access protected user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-28845: Yuebin Sun (@yuebinsun2020), an anonymous researcher,\nNathaniel Oh (@calysteon), Kirin (@Pwnrin), Wojciech Regula of SecuRing\n(wojciechregula.blog), Joshua Jewett (@JoshJewett33), an anonymous\nresearcher\n\nlibxpc\nAvailable for: macOS Tahoe\nImpact: An app may be able to enumerate a user\u0027s installed apps\nDescription: This issue was addressed with improved checks.\nCVE-2026-28882: Ilias Morad (A2nkF) of Voynich Group, Duy Tr\u1ea7n\n(@khanhduytran0), @hugeBlack\n\nlibxpc\nAvailable for: macOS Tahoe\nImpact: An app may be able to access protected user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-20607: an anonymous researcher\n\nMail\nAvailable for: macOS Tahoe\nImpact: \"Hide IP Address\" and \"Block All Remote Content\" may not apply\nto all mail content\nDescription: A privacy issue was addressed with improved handling of\nuser preferences.\nCVE-2026-20692: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nMigrationKit\nAvailable for: macOS Tahoe\nImpact: An app may be able to access user-sensitive data\nDescription: This issue was addressed with improved handling of\nsymlinks.\nCVE-2026-20694: Rodolphe Brunetti (@eisw0lf) of Lupus Nova\n\nMusic\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-20632: Rodolphe Brunetti (@eisw0lf) of Lupus Nova\n\nNetAuth\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: The issue was addressed with improved checks.\nCVE-2026-28839: Mickey Jin (@patch1t)\n\nNetAuth\nAvailable for: macOS Tahoe\nImpact: An app may be able to connect to a network share without user\nconsent\nDescription: An access issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-20701: Matej Moravec (@MacejkoMoravec)\n\nNetAuth\nAvailable for: macOS Tahoe\nImpact: An app may be able to break out of its sandbox\nDescription: A race condition was addressed with additional validation.\nCVE-2026-28891: an anonymous researcher\n\nNetFSFramework\nAvailable for: macOS Tahoe\nImpact: An app may be able to break out of its sandbox\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-28827: Csaba Fitzl (@theevilbit) of Iru, an anonymous\nresearcher\n\nNotes\nAvailable for: macOS Tahoe\nImpact: An app may be able to delete files for which it does not have\npermission\nDescription: A path handling issue was addressed with improved\nvalidation.\nCVE-2026-28816: Dawuge of Shuffl"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-11T11:21:34Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Mar/18"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Mar/18"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/126794"
        },
        {
          "url": "https://support.apple.com/downloads/"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Mar/18"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-03-24-2026-3 macOS Tahoe 26.4",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2025-14524",
              "type": "related"
            },
            {
              "destId": "CVE-2025-55753",
              "type": "related"
            },
            {
              "destId": "CVE-2025-58098",
              "type": "related"
            },
            {
              "destId": "CVE-2025-59775",
              "type": "related"
            },
            {
              "destId": "CVE-2025-64505",
              "type": "related"
            },
            {
              "destId": "CVE-2025-65082",
              "type": "related"
            },
            {
              "destId": "CVE-2025-66200",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20607",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20631",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20632",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20633",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20643",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20664",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20665",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20684",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20687",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20688",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20690",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20691",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20692",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20693",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20694",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20695",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20697",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20698",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20699",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20701",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28816",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28817",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28818",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28820",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28821",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28822",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28823",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28824",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28825",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28826",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28827",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28828",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28829",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28831",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28832",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28833",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28834",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28835",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28837",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28838",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28839",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28841",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28842",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28844",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28845",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28852",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28857",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28859",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28861",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28862",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28864",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28865",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28866",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28867",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28868",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28870",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28871",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28876",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28877",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28878",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28879",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28880",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28881",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28882",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28886",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28888",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28891",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28892",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28893",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28894",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0263",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Mar/18",
            "automated": true,
            "contentSha256": "5ec5e92e1937263fbb1fb6cbadb95f55c866730942b6bfbda704435f0abb614e",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Mar/18",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-03-25T00:01:47Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0263"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-09-08T08:13:42Z",
    "dateUpdated": "2026-09-11T11:21:34Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0263"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.