Loading story…
Apple released security updates for macOS Sequoia 15.7.5 and macOS Sonoma 14.8.5, patching a wide range of vulnerabilities across core operating system components, networking, printing, privacy controls, the kernel, and bundled open-source software. The advisories describe flaws that could lead to privilege escalation, sandbox escape, unauthorized access to sensitive data, kernel memory disclosure, denial of service, arbitrary file write, and modification of protected file system areas.
Affected components include high-risk areas such as Kernel, CoreServices, CUPS, CFNetwork, NetAuth, SMB, TCC, Security, and PackageKit, with additional privacy-related fixes for apps and services including Mail, Messages, Focus, Phone, and Spotlight. Apple also shipped patches for third-party code in Apache, curl, and ImageIO-related libraries, and credited external researchers and organizations including KU Leuven, Google, Trend Micro Zero Day Initiative, Nosebeard Labs, DBAppSecurity WeBin lab, and Renault researchers for reporting the issues.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
Apple published security advisory APPLE-SA-03-24-2026-5 for macOS Sonoma 14.8.5, detailing fixes for numerous vulnerabilities affecting components such as CoreServices, CUPS, NetAuth, SMB, TCC, Security, PackageKit, the Kernel, and open-source packages. Apple said the update was available through the Mac App Store and its software download channels.
Apple published security advisory APPLE-SA-03-24-2026-4 for macOS Sequoia 15.7.5, fixing a broad set of vulnerabilities across core OS components, networking, kernel, privacy controls, printing, and bundled open-source software. The update addressed issues including sensitive data access, sandbox escape, privilege escalation, arbitrary file write, denial of service, kernel memory disclosure, and protected file system modification.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
4 references tracked. Mallory keeps watching after this page renders.
seclists.org
Open sourceseclists.org
Open sourcesupport.apple.com
Open sourcezerodayinitiative.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Apple released broad security updates for its platforms, including **iOS**, **iPadOS**, **macOS Sequoia 15.4**, **Safari**, **tvOS**, and **visionOS**, fixing a total of 213 vulnerabilities. The updates addressed 77 flaws in iOS and iPadOS, 123 in macOS Sequoia, and 13 in Safari, with impact ranging from **sandbox escape** and **privilege escalation to root** to **arbitrary file deletion**, **kernel-level code execution**, and **WebKit memory corruption**. Apple also issued fixes for older supported operating systems, backporting patches for vulnerabilities that had been disclosed and reportedly exploited in recent months, including **`CVE-2025-24200`**, **`CVE-2025-24201`**, and **`CVE-2025-24085`**. The company recommended upgrading devices to at least **iOS 15.8.4, 16.7.11, and 18.4**; **iPadOS 15.8.4, 16.7.11, 17.7.6, and 18.4**; and **macOS Ventura 13.7.5, Sonoma 14.7.5, and Sequoia 15.4** to reduce exposure.
Jul 24, 2026
Apple released a comprehensive set of security updates for its major operating systems and applications, including iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, tvOS 26.1, watchOS 26.1, visionOS 26.1, Safari 26.1, and Xcode 26.1. The updates address 110 vulnerabilities, several of which involve memory corruption issues in components such as ImageIO, FontParser, and WebKit, potentially allowing remote code execution. Other vulnerabilities could allow unauthorized access to sensitive user data through components like Spotlight, CoreMedia, MallocStackLogging, Admin Framework, sudo, Security, SoftwareUpdate, and AppleMobile. None of the vulnerabilities were reported as actively exploited at the time of release, and Apple provided limited technical details in its advisories. Security authorities, including the Canadian Centre for Cyber Security, have urged users and administrators to promptly apply these updates to mitigate potential risks. The updates are considered routine but critical, given the breadth of affected products and the potential impact of the vulnerabilities. Users are advised to review Apple's official security update documentation and ensure all devices are updated to the latest versions to maintain security and privacy protections.
Jun 29, 2026
Apple disclosed two high-severity macOS vulnerabilities, **CVE-2026-28891** and **CVE-2026-28817**, that could allow an application or sandboxed process to escape sandbox restrictions. Both flaws were attributed to race conditions, classified as **CWE-362**, and carried the same `CVSS v3.1` vector: `AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H`, indicating local exploitation with potentially severe impact to confidentiality, integrity, and availability. Apple said the issues were remediated through **additional validation** and **improved state handling**. Fixes were released for **macOS Sequoia 15.7.5**, **macOS Sonoma 14.8.5**, and **macOS Tahoe 26.4**, and organizations running affected macOS systems should prioritize those updates because successful exploitation could let untrusted code break out of the sandbox and operate with broader system access.
Jun 29, 2026