GCVE-1988-2026-0265

Vulnerability from gna-1988 – Published: 2026-09-08 08:13 – Updated: 2026-09-11 11:21
VLAI
Title
APPLE-SA-03-24-2026-5 macOS Sonoma 14.8.5
Summary
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-03-24-2026-5 macOS Sonoma 14.8.5 macOS Sonoma 14.8.5 addresses the following issues. Information about the security content is also available at https://support.apple.com/126796. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. 802.1X Available for: macOS Sonoma Impact: An attacker in a privileged network position may be able to intercept network traffic Description: An authentication issue was addressed with improved state management. CVE-2026-28865: Héloïse Gollier and Mathy Vanhoef (KU Leuven) apache Available for: macOS Sonoma Impact: Multiple issues in Apache Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. CVE-2025-55753 CVE-2025-58098 CVE-2025-59775 CVE-2025-65082 CVE-2025-66200 AppleKeyStore Available for: macOS Sonoma Impact: An app may be able to cause unexpected system termination Description: A use after free issue was addressed with improved memory management. CVE-2026-20637: Johnny Franks (zeroxjf), an anonymous researcher AppleMobileFileIntegrity Available for: macOS Sonoma Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-28824: Mickey Jin (@patch1t) AppleMobileFileIntegrity Available for: macOS Sonoma Impact: An app may be able to access user-sensitive data Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. CVE-2026-20699: Mickey Jin (@patch1t) Archive Utility Available for: macOS Sonoma Impact: An app may be able to access user-sensitive data Description: This issue was addressed with improved handling of symlinks. CVE-2026-20633: Mickey Jin (@patch1t) Audio Available for: macOS Sonoma Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: A use-after-free issue was addressed with improved memory management. CVE-2026-28879: Justin Cohen of Google Audio Available for: macOS Sonoma Impact: An attacker may be able to cause unexpected app termination Description: A type confusion issue was addressed with improved memory handling. CVE-2026-28822: Jex Amro Calling Framework Available for: macOS Sonoma Impact: A remote attacker may be able to cause a denial-of-service Description: A denial-of-service issue was addressed with improved input validation. CVE-2026-28894: an anonymous researcher Clipboard Available for: macOS Sonoma Impact: An app may be able to access sensitive user data Description: This issue was addressed with improved validation of symlinks. CVE-2026-28866: Cristian Dinca (icmd.tech) configd Available for: macOS Sonoma Impact: Processing a maliciously crafted string may lead to heap corruption Description: An integer overflow was addressed with improved input validation. CVE-2026-20639: @cloudlldb of @pixiepointsec CoreMedia Available for: macOS Sonoma Impact: Processing an audio stream in a maliciously crafted media file may terminate the process Description: An out-of-bounds access issue was addressed with improved bounds checking. CVE-2026-20690: Hossein Lotfi (@hosselot) of Trend Micro Zero Day Initiative CoreServices Available for: macOS Sonoma Impact: An app may be able to gain elevated privileges Description: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. CVE-2026-28821: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab CoreServices Available for: macOS Sonoma Impact: An app may be able to break out of its sandbox Description: A permissions issue was addressed with additional sandbox restrictions. CVE-2026-28838: an anonymous researcher CoreUtils Available for: macOS Sonoma Impact: A user in a privileged network position may be able to cause a denial-of-service Description: A null pointer dereference was addressed with improved input validation. CVE-2026-28886: Etienne Charron (Renault) and Victoria Martini (Renault) Crash Reporter Available for: macOS Sonoma Impact: An app may be able to enumerate a user's installed apps Description: A privacy issue was addressed by removing sensitive data. CVE-2026-28878: Zhongcheng Li from IES Red Team CUPS Available for: macOS Sonoma Impact: An app may be able to gain root privileges Description: A race condition was addressed with improved state handling. CVE-2026-28888: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs curl Available for: macOS Sonoma Impact: An issue existed in curl which may result in unintentionally sending sensitive information via an incorrect connection Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. CVE-2025-14524 DeviceLink Available for: macOS Sonoma Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-28876: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs Diagnostics Available for: macOS Sonoma Impact: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed by removing the vulnerable code. CVE-2026-28892: 风沐云烟 (@binary_fmyy) and Minghao Lin (@Y1nKoc) File System Available for: macOS Sonoma Impact: An app may be able to disclose kernel memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-28832: DARKNAVY (@DarkNavyOrg) Focus Available for: macOS Sonoma Impact: An app may be able to access sensitive user data Description: A logging issue was addressed with improved data redaction. CVE-2026-20668: Kirin (@Pwnrin) GPU Drivers Available for: macOS Sonoma Impact: An app may be able to cause unexpected system termination Description: A race condition was addressed with improved state handling. CVE-2026-28834: an anonymous researcher iCloud Available for: macOS Sonoma Impact: An app may be able to enumerate a user's installed apps Description: A permissions issue was addressed with additional restrictions. CVE-2026-28880: Zhongcheng Li from IES Red Team ImageIO Available for: macOS Sonoma Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. CVE-2025-64505 Kernel Available for: macOS Sonoma Impact: An app may be able to disclose kernel memory Description: A logging issue was addressed with improved data redaction. CVE-2026-28868: 이동하 (Lee Dong Ha of BoB 0xB6) Kernel Available for: macOS Sonoma Impact: An app may be able to determine kernel memory layout Description: An information disclosure issue was addressed with improved memory management. CVE-2026-20695: 이동하 (Lee Dong Ha of BoB 0xB6) working with TrendAI Zero Day Initiative, hari shanmugam Kernel Available for: macOS Sonoma Impact: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed with additional restrictions. CVE-2026-28829: Sreejith Krishnan R libxpc Available for: macOS Sonoma Impact: An app may be able to access protected user data Description: A permissions issue was addressed with additional restrictions. CVE-2026-20607: an anonymous researcher Mail Available for: macOS Sonoma Impact: "Hide IP Address" and "Block All Remote Content" may not apply to all mail content Description: A privacy issue was addressed with improved handling of user preferences. CVE-2026-20692: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs MigrationKit Available for: macOS Sonoma Impact: An app may be able to access user-sensitive data Description: This issue was addressed with improved handling of symlinks. CVE-2026-20694: Rodolphe Brunetti (@eisw0lf) of Lupus Nova NetAuth Available for: macOS Sonoma Impact: An app may be able to break out of its sandbox Description: A race condition was addressed with additional validation. CVE-2026-28891: an anonymous researcher NetAuth Available for: macOS Sonoma Impact: An app may be able to connect to a network share without user consent Description: An access issue was addressed with additional sandbox restrictions. CVE-2026-20701: Matej Moravec (@MacejkoMoravec) NetAuth Available for: macOS Sonoma Impact: An app may be able to access sensitive user data Description: The issue was addressed with improved checks. CVE-2026-28839: Mickey Jin (@patch1t) NetFSFramework Available for: macOS Sonoma Impact: An app may be able to break out of its sandbox Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-28827: Csaba Fitzl (@theevilbit) of Iru, an anonymous researcher Notes Available for: macOS Sonoma Impact: An app may be able to delete files for which it does not have permission Description: A path handling issue was addressed with improved validation. CVE-2026-28816: Dawuge of Shuffle Team and Hunan University PackageKit Available for: macOS Sonoma Impact: An attacker with root privileges may be able to delete protected system files Description: This issue was addressed through improved state management. CVE-2026-20693: Mickey Jin (@patch1t) Phone Available for: macOS Sonoma Impact: An app may be able to access user-sensitive data Description: A privacy issue was addressed with improved private data redaction for log entries. CVE-2026-28862: Kun Peeks (@SwayZGl1tZyyy) Printing Available for: macOS Sonoma Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-28831: an anonymous researcher Printing Available for: macOS Sonoma Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: A race condition was addressed with improved state handling. CVE-2026-28817: Gyujeong Jin (@G1uN4sh) at Team.0xb6 Printing Available for: macOS Sonoma Impact: An app may be able to break out of its sandbox Description: A path handling issue was addressed with improved validation. CVE-2026-20688: wdszzml and Atuin Automated Vulnerability Discovery Engine Security Available for: macOS Sonoma Impact: A local attacker may gain access to user's Keychain items Description: This issue was addressed with improved permissions checking. CVE-2026-28864: Alex Radocea SMB Available for: macOS Sonoma Impact: Mounting a maliciously crafted SMB network share may lead to system termination Description: A use-after-free issue was addressed with improved memory management. CVE-2026-28835: Christian Kohlschütter SMB Available for: macOS Sonoma Impact: An app may be able to modify protected parts of the file system Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-28825: Sreejith Krishnan R Spotlight Available for: macOS Sonoma Impact: An app may be able to access user-sensitive data Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. CVE-2026-20699: Mickey Jin (@patch1t) Spotlight Available for: macOS Sonoma Impact: An app may be able to access sensitive user data Description: A logging issue was addressed with improved data redaction. CVE-2026-28818: @pixiepointsec Spotlight Available for: macOS Sonoma Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions. CVE-2026-20697: @pixiepointsec TCC Available for: macOS Sonoma Impact: An app may be able to a
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version CPE status
Apple Macos Sonoma Affected: unknown
guessed Create a notification for this product.
Credits
Apple Product Security via Fulldisclosure
Relationships
reference GCVE-1988-2026-0265 (this record)
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Macos Sonoma",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-03-24-2026-5 macOS Sonoma 14.8.5\n\nmacOS Sonoma 14.8.5 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/126796.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\n802.1X\nAvailable for: macOS Sonoma\nImpact: An attacker in a privileged network position may be able to\nintercept network traffic\nDescription: An authentication issue was addressed with improved state\nmanagement.\nCVE-2026-28865: H\u00e9lo\u00efse Gollier and Mathy Vanhoef (KU Leuven)\n\napache\nAvailable for: macOS Sonoma\nImpact: Multiple issues in Apache\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-55753\nCVE-2025-58098\nCVE-2025-59775\nCVE-2025-65082\nCVE-2025-66200\n\nAppleKeyStore\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause unexpected system termination\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-20637: Johnny Franks (zeroxjf), an anonymous researcher\n\nAppleMobileFileIntegrity\nAvailable for: macOS Sonoma\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-28824: Mickey Jin (@patch1t)\n\nAppleMobileFileIntegrity\nAvailable for: macOS Sonoma\nImpact: An app may be able to access user-sensitive data\nDescription: A downgrade issue affecting Intel-based Mac computers was\naddressed with additional code-signing restrictions.\nCVE-2026-20699: Mickey Jin (@patch1t)\n\nArchive Utility\nAvailable for: macOS Sonoma\nImpact: An app may be able to access user-sensitive data\nDescription: This issue was addressed with improved handling of\nsymlinks.\nCVE-2026-20633: Mickey Jin (@patch1t)\n\nAudio\nAvailable for: macOS Sonoma\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process crash\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nCVE-2026-28879: Justin Cohen of Google\n\nAudio\nAvailable for: macOS Sonoma\nImpact: An attacker may be able to cause unexpected app termination\nDescription: A type confusion issue was addressed with improved memory\nhandling.\nCVE-2026-28822: Jex Amro\n\nCalling Framework\nAvailable for: macOS Sonoma\nImpact: A remote attacker may be able to cause a denial-of-service\nDescription: A denial-of-service issue was addressed with improved input\nvalidation.\nCVE-2026-28894: an anonymous researcher\n\nClipboard\nAvailable for: macOS Sonoma\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with improved validation of\nsymlinks.\nCVE-2026-28866: Cristian Dinca (icmd.tech)\n\nconfigd\nAvailable for: macOS Sonoma\nImpact: Processing a maliciously crafted string may lead to heap\ncorruption\nDescription: An integer overflow was addressed with improved input\nvalidation.\nCVE-2026-20639: @cloudlldb of @pixiepointsec\n\nCoreMedia\nAvailable for: macOS Sonoma\nImpact: Processing an audio stream in a maliciously crafted media file\nmay terminate the process\nDescription: An out-of-bounds access issue was addressed with improved\nbounds checking.\nCVE-2026-20690: Hossein Lotfi (@hosselot) of Trend Micro Zero Day\nInitiative\n\nCoreServices\nAvailable for: macOS Sonoma\nImpact: An app may be able to gain elevated privileges\nDescription: A validation issue existed in the entitlement verification.\nThis issue was addressed with improved validation of the process\nentitlement.\nCVE-2026-28821: YingQi Shi (@Mas0nShi) of DBAppSecurity\u0027s WeBin lab\n\nCoreServices\nAvailable for: macOS Sonoma\nImpact: An app may be able to break out of its sandbox\nDescription: A permissions issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-28838: an anonymous researcher\n\nCoreUtils\nAvailable for: macOS Sonoma\nImpact: A user in a privileged network position may be able to cause a\ndenial-of-service\nDescription: A null pointer dereference was addressed with improved\ninput validation.\nCVE-2026-28886: Etienne Charron (Renault) and Victoria Martini (Renault)\n\nCrash Reporter\nAvailable for: macOS Sonoma\nImpact: An app may be able to enumerate a user\u0027s installed apps\nDescription: A privacy issue was addressed by removing sensitive data.\nCVE-2026-28878: Zhongcheng Li from IES Red Team\n\nCUPS\nAvailable for: macOS Sonoma\nImpact: An app may be able to gain root privileges\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-28888: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\ncurl\nAvailable for: macOS Sonoma\nImpact: An issue existed in curl which may result in unintentionally\nsending sensitive information via an incorrect connection\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-14524\n\nDeviceLink\nAvailable for: macOS Sonoma\nImpact: An app may be able to access sensitive user data\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-28876: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nDiagnostics\nAvailable for: macOS Sonoma\nImpact: An app may be able to modify protected parts of the file system\nDescription: A permissions issue was addressed by removing the\nvulnerable code.\nCVE-2026-28892: \u98ce\u6c90\u4e91\u70df (@binary_fmyy) and Minghao Lin (@Y1nKoc)\n\nFile System\nAvailable for: macOS Sonoma\nImpact: An app may be able to disclose kernel memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-28832: DARKNAVY (@DarkNavyOrg)\n\nFocus\nAvailable for: macOS Sonoma\nImpact: An app may be able to access sensitive user data\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-20668: Kirin (@Pwnrin)\n\nGPU Drivers\nAvailable for: macOS Sonoma\nImpact: An app may be able to cause unexpected system termination\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-28834: an anonymous researcher\n\niCloud\nAvailable for: macOS Sonoma\nImpact: An app may be able to enumerate a user\u0027s installed apps\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-28880: Zhongcheng Li from IES Red Team\n\nImageIO\nAvailable for: macOS Sonoma\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-64505\n\nKernel\nAvailable for: macOS Sonoma\nImpact: An app may be able to disclose kernel memory\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-28868: \uc774\ub3d9\ud558 (Lee Dong Ha of BoB 0xB6)\n\nKernel\nAvailable for: macOS Sonoma\nImpact: An app may be able to determine kernel memory layout\nDescription: An information disclosure issue was addressed with improved\nmemory management.\nCVE-2026-20695: \uc774\ub3d9\ud558 (Lee Dong Ha of BoB 0xB6) working with TrendAI Zero\nDay Initiative, hari shanmugam\n\nKernel\nAvailable for: macOS Sonoma\nImpact: An app may be able to modify protected parts of the file system\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-28829: Sreejith Krishnan R\n\nlibxpc\nAvailable for: macOS Sonoma\nImpact: An app may be able to access protected user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-20607: an anonymous researcher\n\nMail\nAvailable for: macOS Sonoma\nImpact: \"Hide IP Address\" and \"Block All Remote Content\" may not apply\nto all mail content\nDescription: A privacy issue was addressed with improved handling of\nuser preferences.\nCVE-2026-20692: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nMigrationKit\nAvailable for: macOS Sonoma\nImpact: An app may be able to access user-sensitive data\nDescription: This issue was addressed with improved handling of\nsymlinks.\nCVE-2026-20694: Rodolphe Brunetti (@eisw0lf) of Lupus Nova\n\nNetAuth\nAvailable for: macOS Sonoma\nImpact: An app may be able to break out of its sandbox\nDescription: A race condition was addressed with additional validation.\nCVE-2026-28891: an anonymous researcher\n\nNetAuth\nAvailable for: macOS Sonoma\nImpact: An app may be able to connect to a network share without user\nconsent\nDescription: An access issue was addressed with additional sandbox\nrestrictions.\nCVE-2026-20701: Matej Moravec (@MacejkoMoravec)\n\nNetAuth\nAvailable for: macOS Sonoma\nImpact: An app may be able to access sensitive user data\nDescription: The issue was addressed with improved checks.\nCVE-2026-28839: Mickey Jin (@patch1t)\n\nNetFSFramework\nAvailable for: macOS Sonoma\nImpact: An app may be able to break out of its sandbox\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-28827: Csaba Fitzl (@theevilbit) of Iru, an anonymous\nresearcher\n\nNotes\nAvailable for: macOS Sonoma\nImpact: An app may be able to delete files for which it does not have\npermission\nDescription: A path handling issue was addressed with improved\nvalidation.\nCVE-2026-28816: Dawuge of Shuffle Team and Hunan University\n\nPackageKit\nAvailable for: macOS Sonoma\nImpact: An attacker with root privileges may be able to delete protected\nsystem files\nDescription: This issue was addressed through improved state management.\nCVE-2026-20693: Mickey Jin (@patch1t)\n\nPhone\nAvailable for: macOS Sonoma\nImpact: An app may be able to access user-sensitive data\nDescription: A privacy issue was addressed with improved private data\nredaction for log entries.\nCVE-2026-28862: Kun Peeks (@SwayZGl1tZyyy)\n\nPrinting\nAvailable for: macOS Sonoma\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-28831: an anonymous researcher\n\nPrinting\nAvailable for: macOS Sonoma\nImpact: A sandboxed process may be able to circumvent sandbox\nrestrictions\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-28817: Gyujeong Jin (@G1uN4sh) at Team.0xb6\n\nPrinting\nAvailable for: macOS Sonoma\nImpact: An app may be able to break out of its sandbox\nDescription: A path handling issue was addressed with improved\nvalidation.\nCVE-2026-20688: wdszzml and Atuin Automated Vulnerability Discovery\nEngine\n\nSecurity\nAvailable for: macOS Sonoma\nImpact: A local attacker may gain access to user\u0027s Keychain items\nDescription: This issue was addressed with improved permissions\nchecking.\nCVE-2026-28864: Alex Radocea\n\nSMB\nAvailable for: macOS Sonoma\nImpact: Mounting a maliciously crafted SMB network share may lead to\nsystem termination\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nCVE-2026-28835: Christian Kohlsch\u00fctter\n\nSMB\nAvailable for: macOS Sonoma\nImpact: An app may be able to modify protected parts of the file system\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-28825: Sreejith Krishnan R\n\nSpotlight\nAvailable for: macOS Sonoma\nImpact: An app may be able to access user-sensitive data\nDescription: A downgrade issue affecting Intel-based Mac computers was\naddressed with additional code-signing restrictions.\nCVE-2026-20699: Mickey Jin (@patch1t)\n\nSpotlight\nAvailable for: macOS Sonoma\nImpact: An app may be able to access sensitive user data\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-28818: @pixiepointsec\n\nSpotlight\nAvailable for: macOS Sonoma\nImpact: An app may be able to access sensitive user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-20697: @pixiepointsec\n\nTCC\nAvailable for: macOS Sonoma\nImpact: An app may be able to a"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-11T11:21:42Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Mar/20"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Mar/20"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/126796"
        },
        {
          "url": "https://support.apple.com/downloads/"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Mar/20"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-03-24-2026-5 macOS Sonoma 14.8.5",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2025-14524",
              "type": "related"
            },
            {
              "destId": "CVE-2025-55753",
              "type": "related"
            },
            {
              "destId": "CVE-2025-58098",
              "type": "related"
            },
            {
              "destId": "CVE-2025-59775",
              "type": "related"
            },
            {
              "destId": "CVE-2025-64505",
              "type": "related"
            },
            {
              "destId": "CVE-2025-65082",
              "type": "related"
            },
            {
              "destId": "CVE-2025-66200",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20607",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20633",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20637",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20639",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20657",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20668",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20688",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20690",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20692",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20693",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20694",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20695",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20697",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20699",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20701",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28816",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28817",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28818",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28821",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28822",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28824",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28825",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28827",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28828",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28829",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28831",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28832",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28834",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28835",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28838",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28839",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28862",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28864",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28865",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28866",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28868",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28876",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28878",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28879",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28880",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28886",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28888",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28891",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28892",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28894",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0265",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Mar/20",
            "automated": true,
            "contentSha256": "0a99806281e4d4d109bfe7881606b5894c5da8fcde0f36dc6e043945c7832fc6",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Mar/20",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-03-25T00:02:51Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0265"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-09-08T08:13:43Z",
    "dateUpdated": "2026-09-11T11:21:42Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0265"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.