Blog
The July 2026 Apple Security Update Review
Welcome to our monthly look at Apple security patches. This release shows that Apple is not immune to the bug apocalypse that is impacting other vendors. Last month, they released 37 unique CVEs compare to this month’s 210. Quite a jump.
For July 2026, Apple released 210 unique CVEs across iOS/iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, tvOS 26.6, watchOS 26.6, visionOS 26.6, and Safari 26.6. Since Apple doesn’t provide CVSS scores or other severity information, we’re left to speculate on which of these bugs is the most severe. However, there are a couple that stand out.
· CVE-2026-43818 (ImageIO) – This bug could allow the “Processing [of] a maliciously crafted image may lead to arbitrary code execution." ImageIO is the classic zero-/one-click remote surface on Apple platforms (images auto-parsed in Messages, previews, notifications), so this is the highest real-world remote-exploitation risk in the release. It’s also present across iOS and all macOS versions. Depending on delivery path, this is the one most likely to be weaponized into a remote foothold.
· CVE-2026-64747 (AVEVideoEncoder) – According to Apple, “An app may be able to execute arbitrary code with kernel privileges.” Kernel-level code execution is the maximum-impact outcome on an Apple device: full compromise, defeats the sandbox and most mitigations. It's also unusually broad, shipping to iOS/iPadOS, all three macOS versions, tvOS, watchOS, and visionOS. Local-app precondition is its only limiter, and it's exactly the second stage a remote bug chains into.
· CVE-2026-64767 (afpfs) – In this case, “A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.” This bug is a network-reachable, apparently unauthenticated path to kernel memory corruption via Apple Filing Protocol. Remote plus kernel is a dangerous combination. Also, the “remote attacker” versus “remote user” wording suggests no authentication required. This bug affects macOS only, which is the only reason it sits at #3 rather than higher.
Honorable mentions: CVE-2026-43776 (AppleDouble) and the SceneKit set (CVE-2026-64763/64/65/66) are additional file-parsing paths to arbitrary code execution. CVE-2026-43750 (Wi‑Fi) allows code execution out of the sandbox with elevated privileges. And finally, CVE-2026-64696 (SMB) / CVE-2026-43810 (Kernel) are further remote kernel-corruption bugs.
Here’s the full table of Apple patches and the products they affect:
| CVE ID | Component | Impact | iOS / iPadOS 26.6 | macOS Tahoe 26.6 | macOS Sequoia 15.7.8 | macOS Sonoma 14.8.8 | tvOS 26.6 | watchOS 26.6 | visionOS 26.6 | Safari 26.6 |
|---|---|---|---|---|---|---|---|---|---|---|
| CVE-2026-64732 | Accessibility | An attacker with physical access may be able to access sensitive user data during iPhone Mirroring | Yes | No | No | No | No | No | No | No |
| CVE-2026-43749 | Accounts | An app may be able to gain root privileges | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43819 | Accounts | An app may be able to access sensitive user data | No | Yes | No | No | No | No | No | No |
| CVE-2026-64733 | Accounts Framework | An app may be able to fingerprint the user | Yes | Yes | No | No | Yes | Yes | Yes | No |
| CVE-2026-64767 | afpfs | A remote attacker may be able to cause unexpected system termination or corrupt kernel memory | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-23918 | apache | A remote attacker may be able to cause a denial-of-service | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-64695 | APFS | A remote user may be able to cause unexpected system termination or corrupt kernel memory | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43801 | App Store | An app may be able to access sensitive user data | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43781 | Apple Account | An app may be able to access sensitive user data | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-64737 | Apple Account | A malicious app may be able to break out of its sandbox | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-28928 | Apple Neural Engine | An app may be able to cause unexpected system termination | Yes | Yes | No | No | Yes | Yes | No | No |
| CVE-2026-43748 | Apple Neural Engine | An app may be able to cause unexpected system termination | No | Yes | Yes | No | No | No | No | No |
| CVE-2026-43776 | AppleDouble | Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution | Yes | Yes | Yes | No | No | No | No | No |
| CVE-2026-43681 | AppleRAID | A local user may be able to read kernel memory | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43672 | Assets | A malicious application may be able to bypass Privacy preferences | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43763 | ATS | An app may be able to read files outside of its sandbox | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-64702 | Audio | An app may be able to break out of its sandbox | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-64725 | Audio | An app may be able to cause a denial-of-service | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43730 | AuthKit | An app may be able to fingerprint the user | Yes | Yes | No | No | Yes | Yes | Yes | No |
| CVE-2026-64747 | AVEVideoEncoder | An app may be able to execute arbitrary code with kernel privileges | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-64762 | AVEVideoEncoder | An app may be able to cause unexpected system termination | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-64707 | BackgroundAssets | An app may be able to delete files for which it does not have permission | Yes | Yes | Yes | Yes | No | No | Yes | No |
| CVE-2026-28849 | BOM | A maliciously crafted ZIP archive may bypass Gatekeeper checks | No | No | Yes | Yes | No | No | No | No |
| CVE-2026-43811 | Books | An app may be able to modify protected parts of the file system | Yes | No | No | No | No | No | No | No |
| CVE-2026-64698 | cd9660 | An app may be able to cause unexpected system termination or read kernel memory | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43813 | CloudAttestation | A maliciously crafted app may be able to bypass code signing enforcement | Yes | Yes | No | No | Yes | Yes | Yes | No |
| CVE-2026-43797 | Contacts | An app may be able to access information about a user's contacts | Yes | Yes | No | No | No | No | No | No |
| CVE-2026-64734 | Contacts | Processing a maliciously crafted contact may leak sensitive data | Yes | Yes | Yes | Yes | No | Yes | Yes | No |
| CVE-2026-64746 | Contacts | An app may be able to add contacts without user authorization | Yes | Yes | No | No | No | Yes | Yes | No |
| CVE-2026-43756 | Control Center | An app may be able to access user-sensitive data | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43693 | Core Services | An app may be able to gain root privileges | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43673 | CoreAudio | Processing a maliciously crafted audio file may corrupt process memory | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43744 | CoreAudio | Processing an audio stream in a maliciously crafted media file may terminate the process | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43803 | CoreAudio | A remote attacker may be able to cause unexpected system termination | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43711 | CoreMedia | Processing a maliciously crafted video file may lead to unexpected app termination | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43759 | CoreMedia | An app may be able to access sensitive user data | No | Yes | No | No | No | Yes | No | No |
| CVE-2026-43775 | CoreMedia | An app may be able to access sensitive user data | No | Yes | Yes | No | No | No | No | No |
| CVE-2026-28936 | CoreServices | Processing a maliciously crafted file may lead to unexpected app termination | No | No | Yes | Yes | No | No | No | No |
| CVE-2026-43738 | CoreUI | Processing a maliciously crafted asset catalog may result in disclosure of process memory | No | No | Yes | Yes | No | No | No | No |
| CVE-2026-43802 | CoreVideo | An app may be able to cause unexpected system termination | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-64710 | Crash Reporter | An app may be able to leak sensitive user information | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-39875 | CUPS | A malicious app may be able to gain root privileges | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43698 | CUPS | An app may be able to gain root privileges | No | No | Yes | Yes | No | No | No | No |
| CVE-2026-3783 | curl | Authentication credentials may be sent to a server on another origin | Yes | Yes | Yes | Yes | Yes | Yes | No | No |
| CVE-2026-3784 | curl | Authentication credentials may be sent to a server on another origin | Yes | Yes | Yes | Yes | Yes | Yes | No | No |
| CVE-2026-43758 | Data Detectors UI | An app may be able to access sensitive user data | No | Yes | Yes | Yes | No | Yes | No | No |
| CVE-2026-64708 | DesktopServices | An app may bypass Gatekeeper checks | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-28926 | Disk Images | An app may be able to elevate privileges | No | No | Yes | Yes | No | No | No | No |
| CVE-2026-28945 | Disk Images | An app may be able to bypass network restrictions | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43747 | Disk Images | Parsing a maliciously crafted file may lead to an unexpected app termination | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-64694 | Disk Images | An app may be able to cause unexpected system termination | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-64776 | Disk Images | An app may be able to disclose kernel memory | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43753 | DriverKit | An attacker with physical access to a locked device may be able to view sensitive user information | Yes | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43793 | DriverKit | An app may be able to cause unexpected system termination | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43714 | Foundation | A malicious app may be able to access protected user data | Yes | Yes | Yes | Yes | No | Yes | Yes | No |
| CVE-2026-64742 | FrontBoard | An app may be able to access sensitive user data | Yes | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43796 | Game Center | An app may be able to access sensitive user data | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-64740 | Game Center | A malicious app may be able to break out of its sandbox | Yes | Yes | Yes | Yes | Yes | No | No | No |
| CVE-2026-64691 | GPU Drivers | An app may be able to cause unexpected system termination | No | Yes | No | No | No | No | No | No |
| CVE-2026-64692 | Heimdal | An app may be able to cause a denial-of-service | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-28981 | HFS | Processing a maliciously crafted image may lead to arbitrary code execution | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43682 | HFS | A remote user may be able to cause unexpected system termination or corrupt kernel memory | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43710 | HFS | An attacker may be able to cause unexpected system termination or corrupt kernel memory | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43764 | HFS | An app may be able to cause unexpected system termination | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43767 | HFS | An app may be able to cause unexpected system termination | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43773 | HFS | Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-64697 | HFS | An app may be able to cause unexpected system termination or corrupt kernel memory | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2025-43325 | Icons | An app may be able to access sensitive user data | No | No | Yes | Yes | No | No | No | No |
| CVE-2026-43661 | ImageIO | Processing a maliciously crafted image may corrupt process memory | No | No | Yes | Yes | No | No | No | No |
| CVE-2026-43780 | ImageIO | Processing a maliciously crafted texture may lead to unexpected app termination | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43818 | ImageIO | Processing a maliciously crafted image may lead to arbitrary code execution | Yes | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-64693 | ImageIO | Processing a maliciously crafted image may lead to a denial-of-service | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-64716 | ImageIO | Processing a maliciously crafted image may corrupt process memory | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-64754 | ImageIO | Processing a maliciously crafted file may lead to a denial-of-service | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-64758 | ImageIO | Processing a maliciously crafted file may lead to unexpected app termination | Yes | Yes | No | No | Yes | Yes | Yes | No |
| CVE-2026-43743 | IOGPUFamily | An app may be able to cause unexpected system termination | No | No | No | No | Yes | Yes | No | No |
| CVE-2026-43805 | IOKit | An app may be able to cause unexpected system termination or write kernel memory | Yes | Yes | Yes | Yes | No | Yes | No | No |
| CVE-2026-39877 | IOSkywalkFamily | An app may be able to disclose kernel memory | No | No | Yes | Yes | No | No | No | No |
| CVE-2026-28931 | Kernel | Connecting to a malicious NFS server may lead to kernel memory corruption | Yes | Yes | No | No | Yes | Yes | No | No |
| CVE-2026-28982 | Kernel | A remote user may be able to cause unexpected system termination or corrupt kernel memory | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-39868 | Kernel | An app may be able to cause unexpected system termination or corrupt kernel memory | No | No | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43722 | Kernel | An app may be able to leak sensitive kernel state | No | No | Yes | Yes | No | No | No | No |
| CVE-2026-43724 | Kernel | An app may be able to cause unexpected system termination or write kernel memory | No | No | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43739 | Kernel | An app may be able to cause unexpected system termination | Yes | Yes | No | No | Yes | Yes | Yes | No |
| CVE-2026-43754 | Kernel | An app may be able to leak sensitive kernel state | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43757 | Kernel | An app may be able to cause unexpected system termination | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43769 | Kernel | An app may be able to cause unexpected system termination | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43778 | Kernel | An app may be able to cause unexpected system termination or corrupt kernel memory | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43782 | Kernel | An app may be able to access sensitive user data | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43799 | Kernel | An app may be able to cause unexpected system termination | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43809 | Kernel | An app may be able to cause unexpected system termination | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43810 | Kernel | A remote user may be able to cause unexpected system termination or corrupt kernel memory | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43814 | Kernel | An app may be able to cause unexpected system termination | Yes | Yes | No | No | Yes | Yes | No | No |
| CVE-2026-43816 | Kernel | An app may be able to cause unexpected system termination | Yes | Yes | No | No | Yes | Yes | Yes | No |
| CVE-2026-43817 | Kernel | An app may be able to cause unexpected system termination | Yes | Yes | No | No | Yes | Yes | Yes | No |
| CVE-2026-43822 | Kernel | An app may be able to cause unexpected system termination | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-64700 | Kernel | An app may be able to cause unexpected system termination | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-64709 | Kernel | An app may be able to disclose kernel memory | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-64720 | Kernel | An app may be able to cause unexpected system termination | Yes | Yes | No | No | Yes | Yes | No | No |
| CVE-2026-64721 | Kernel | An app may be able to access sensitive user data | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-64723 | Kernel | An app may be able to access sensitive user data | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-64727 | Kernel | An app may be able to cause unexpected system termination | No | Yes | No | No | Yes | No | No | No |
| CVE-2026-64729 | Kernel | An app may be able to cause unexpected system termination | Yes | Yes | No | No | Yes | Yes | Yes | No |
| CVE-2026-64735 | Kernel | A remote attacker may be able to bypass network filters | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-64744 | Kernel | An app may be able to disclose kernel memory | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-64749 | Kernel | An app may be able to cause unexpected system termination or corrupt kernel memory | Yes | Yes | Yes | No | No | No | Yes | No |
| CVE-2026-64751 | Kernel | An app may be able to cause unexpected system termination or write kernel memory | Yes | Yes | No | No | Yes | Yes | Yes | No |
| CVE-2026-64775 | Kernel | An app may be able to cause unexpected system termination | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-20672 | LaunchServices | An app may be able to access sensitive user data | No | No | Yes | Yes | No | No | No | No |
| CVE-2026-28983 | LaunchServices | A remote attacker may be able to cause a denial of service | No | No | Yes | Yes | No | No | No | No |
| CVE-2026-28900 | libarchive | A maliciously crafted ZIP archive may bypass Gatekeeper checks | No | No | Yes | Yes | No | No | No | No |
| CVE-2026-4424 | libarchive | Processing a maliciously crafted file may result in disclosure of process memory | Yes | Yes | Yes | Yes | No | No | Yes | No |
| CVE-2026-28973 | libc | A malicious app may be able to break out of its sandbox | Yes | Yes | Yes | Yes | No | Yes | No | No |
| CVE-2026-64739 | Libnotify | An attacker may be able to cause unexpected app termination | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43703 | libxslt | Processing maliciously crafted web content may lead to an unexpected process crash | No | No | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43706 | libxslt | Processing maliciously crafted web content may lead to an unexpected process crash | No | No | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43766 | LoginWindow | An attacker with physical access to a locked device may be able to view sensitive user information | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-64743 | Managed Configuration | An app may be able to access sensitive user data | Yes | Yes | No | No | Yes | Yes | Yes | No |
| CVE-2026-64738 | Maps | A malicious app may be able to break out of its sandbox | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43653 | mDNSResponder | An attacker on the local network may be able to cause a denial-of-service | No | No | Yes | No | No | No | No | No |
| CVE-2026-43806 | mDNSResponder | A local attacker may be able to cause a denial of service | No | Yes | No | No | No | No | No | No |
| CVE-2026-64724 | mDNSResponder | An attacker on the local network may be able to cause a denial-of-service | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43723 | MediaRemote | An app may be able to gain root privileges | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-28911 | Metal | A malicious app may be able to corrupt memory of a system process | No | Yes | No | Yes | No | No | No | No |
| CVE-2026-43807 | MobileAccessoryUpdater | A malicious accessory may be able to cause unexpected app termination | No | No | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43729 | Model I/O | Processing a maliciously crafted image may corrupt process memory | Yes | Yes | Yes | No | Yes | No | Yes | No |
| CVE-2026-43733 | Model I/O | Processing a maliciously crafted image may corrupt process memory | Yes | Yes | Yes | No | No | No | No | No |
| CVE-2026-64722 | Model I/O | Processing a 3D model may result in disclosure of process memory | Yes | Yes | Yes | No | No | No | No | No |
| CVE-2026-64768 | Model I/O | A remote attacker may cause an unexpected app termination | Yes | Yes | Yes | Yes | Yes | No | Yes | No |
| CVE-2026-64769 | Model I/O | A remote attacker may be able to cause unexpected application termination or heap corruption | Yes | Yes | Yes | Yes | Yes | No | Yes | No |
| CVE-2026-64770 | Model I/O | A remote attacker may be able to cause unexpected application termination or heap corruption | Yes | Yes | Yes | Yes | Yes | No | Yes | No |
| CVE-2026-64771 | Model I/O | A remote attacker may be able to cause unexpected application termination or heap corruption | Yes | Yes | Yes | No | Yes | No | Yes | No |
| CVE-2026-64772 | Model I/O | A remote attacker may be able to cause unexpected application termination or heap corruption | Yes | Yes | Yes | No | Yes | No | Yes | No |
| CVE-2026-64774 | Model I/O | A remote attacker may be able to cause unexpected application termination or heap corruption | Yes | Yes | Yes | Yes | Yes | No | Yes | No |
| CVE-2026-43771 | Net-SNMP | An app may be able to cause a denial-of-service | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43772 | NetFSFramework | An app may be able to break out of its sandbox | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-28961 | Network Extensions | An attacker with physical access to a locked device may be able to view sensitive user information | No | No | Yes | Yes | No | No | No | No |
| CVE-2026-64711 | NSColorPanel | An app may be able to leak sensitive user information | Yes | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-28912 | PackageKit | A user may be able to elevate privileges | No | Yes | Yes | No | No | No | No | No |
| CVE-2026-43765 | PackageKit | An app may be able to modify protected parts of the file system | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-28896 | ppp | An attacker may be able to cause unexpected system termination or read kernel memory | No | No | Yes | Yes | No | No | No | No |
| CVE-2026-64731 | Printing | A malicious app may be able to break out of its sandbox | No | Yes | Yes | No | No | No | No | No |
| CVE-2026-43812 | Pro Res | An app may be able to cause unexpected system termination | Yes | Yes | Yes | No | Yes | No | Yes | No |
| CVE-2026-43694 | quarantine | An app may be able to cause unexpected system termination or write kernel memory | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-39874 | Remote Management | A malicious app may be able to gain root privileges | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43792 | Safari | An app may be able to access sensitive user data | No | Yes | No | No | No | No | No | Yes |
| CVE-2026-64741 | Sandbox Profiles | An app may be able to read a persistent device identifier | Yes | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-64763 | SceneKit | Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-64764 | SceneKit | Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-64765 | SceneKit | Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-64766 | SceneKit | Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| CVE-2026-43665 | Screen Sharing Server | A local attacker may be able to determine the legacy VNC password configured for Screen Sharing | No | No | Yes | Yes | No | No | No | No |
| CVE-2026-43760 | Screen Sharing Server | An app may be able to access user-sensitive data | No | Yes | No | Yes | No | No | No | No |
| CVE-2026-43777 | Screen Sharing Server | A remote attacker may be able to cause a denial of service | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43779 | Screen Sharing Server | An app may be able to intercept network connections intended for another process | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43728 | Security | An attacker may be able to modify the state of the Keychain | No | Yes | No | No | No | No | No | No |
| CVE-2026-43755 | SecurityAgent | An app may be able to gain root privileges | No | Yes | No | Yes | No | No | No | No |
| CVE-2026-43800 | Siri | An app may be able to access sensitive user data | Yes | Yes | No | No | Yes | Yes | No | No |
| CVE-2026-64745 | Siri | A person with physical access to a locked device may be able to access contacts and photos | No | Yes | Yes | No | No | No | No | No |
| CVE-2026-39873 | SMB | Connecting to a malicious SMB server may lead to unexpected system termination | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-64696 | SMB | A remote user may be able to cause unexpected system termination or corrupt kernel memory | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-64704 | SMB | An app may be able to cause unexpected system termination | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43774 | Spotlight | An app may be able to access sensitive user data | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43770 | StorageKit | An app may be able to access sensitive user data | No | Yes | Yes | Yes | Yes | No | No | No |
| CVE-2026-43768 | udf | An app may be able to cause unexpected system termination | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-43704 | Web Extensions | A malicious web extension may be able to cause an unexpected process crash | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-64699 | WebDAV | An app may be able to disclose kernel memory | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-64703 | WebDAV | An app may be able to cause a denial-of-service | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-39872 | WebKit | Processing maliciously crafted web content may lead to an unexpected process crash | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43663 | WebKit | Processing maliciously crafted web content may lead to an unexpected process crash | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43676 | WebKit | Processing maliciously crafted web content may lead to an unexpected Safari crash | No | No | No | No | No | Yes | Yes | No |
| CVE-2026-43699 | WebKit | Processing maliciously crafted web content may lead to an unexpected process crash | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43700 | WebKit | Processing maliciously crafted web content may disclose sensitive user information | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43701 | WebKit | A malicious website may be able to process restricted web content outside the sandbox | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43705 | WebKit | Processing maliciously crafted web content may lead to memory corruption | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43707 | WebKit | Processing maliciously crafted web content may lead to an unexpected process crash | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43708 | WebKit | A malicious website may exfiltrate data cross-origin | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43709 | WebKit | Processing maliciously crafted web content may lead to an unexpected process crash | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43712 | WebKit | Processing maliciously crafted web content may lead to an unexpected process crash | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43713 | WebKit | Visiting a website may leak sensitive data | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43715 | WebKit | Processing maliciously crafted web content may lead to memory corruption | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43725 | WebKit | A malicious website may be able to process restricted web content outside the sandbox | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43726 | WebKit | Processing maliciously crafted web content may lead to an unexpected process crash | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43727 | WebKit | Processing maliciously crafted web content may lead to an unexpected Safari crash | No | No | No | No | No | Yes | Yes | No |
| CVE-2026-43731 | WebKit | Processing maliciously crafted web content may lead to memory corruption | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43732 | WebKit | Processing maliciously crafted web content may disclose sensitive user information | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43734 | WebKit | Processing maliciously crafted web content may lead to an unexpected process crash | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43735 | WebKit | A malicious website may exfiltrate data cross-origin | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43740 | WebKit | Processing maliciously crafted web content may result in the disclosure of process memory | Yes | No | No | No | Yes | Yes | Yes | Yes |
| CVE-2026-43742 | WebKit | Processing maliciously crafted web content may lead to an unexpected process crash | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43745 | WebKit | Processing maliciously crafted web content may lead to an unexpected Safari crash | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43804 | WebKit | Visiting a website may lead to an app denial-of-service | Yes | Yes | No | No | No | No | Yes | Yes |
| CVE-2026-43821 | WebKit | An app may be able to read files outside of its sandbox | Yes | Yes | No | No | Yes | Yes | Yes | Yes |
| CVE-2026-64713 | WebKit | Websites may know if the user has visited a given link | Yes | Yes | No | No | Yes | Yes | Yes | Yes |
| CVE-2026-64728 | WebKit | Maliciously crafted web content may violate iframe sandboxing policy | Yes | Yes | No | No | Yes | Yes | Yes | Yes |
| CVE-2026-64730 | WebKit | Visiting a website that frames malicious content may lead to UI spoofing | Yes | Yes | No | No | Yes | Yes | Yes | Yes |
| CVE-2026-64757 | WebKit | Processing maliciously crafted web content may lead to an unexpected Safari crash | Yes | Yes | No | No | No | Yes | Yes | Yes |
| CVE-2026-64783 | WebKit | Processing maliciously crafted web content may lead to an unexpected Safari crash | Yes | Yes | No | No | No | Yes | Yes | Yes |
| CVE-2026-43720 | WebKit Canvas | Processing maliciously crafted web content may lead to an unexpected Safari crash | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-64718 | WebKit Canvas | Processing maliciously crafted web content may lead to an unexpected Safari crash | Yes | Yes | No | No | Yes | Yes | Yes | Yes |
| CVE-2026-43721 | WebKit Storage | A malicious website may be able to silently hijack clipboard data | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-28979 | WebRTC | Processing maliciously crafted web content may lead to an unexpected process crash | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-43717 | WebRTC | Processing maliciously crafted web content may lead to an unexpected Safari crash | No | No | No | No | Yes | Yes | No | No |
| CVE-2026-43718 | WebRTC | Processing maliciously crafted web content may lead to an unexpected Safari crash | No | No | No | No | Yes | Yes | Yes | No |
| CVE-2026-64719 | WebRTC | Processing maliciously crafted web content may lead to an unexpected Safari crash | Yes | Yes | No | No | Yes | Yes | Yes | Yes |
| CVE-2026-43750 | Wi-Fi | An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-64726 | Wi-Fi | An attacker in physical proximity may be able to corrupt process memory | Yes | Yes | No | No | Yes | Yes | Yes | No |
| CVE-2026-64755 | WorkoutKit | An app may be able to access sensitive user data | Yes | No | No | No | No | No | No | No |
| CVE-2026-28932 | xar | An app may be able to cause a denial of service | No | Yes | Yes | Yes | No | No | No | No |
| CVE-2026-28914 | zip | A maliciously crafted ZIP archive may bypass Gatekeeper checks | No | No | Yes | Yes | No | No | No | No |
We’ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.