Loading story…
Homebrew 7.0.0 resolves a moderate-severity macOS LaunchServices sandbox escape that could let a malicious cask execute code outside the installation sandbox. The broader 6.0.x and 7.0.0 release line addresses eight advisories, including a high-severity issue in which unsigned cask-removal metadata could trigger commands through sudo. Homebrew warns that its controls cannot fully protect users from untrusted third-party casks, applications, or vendor .pkg installers that run with user privileges or request elevated access.
The release introduces brew vulns, which checks installed formulae, individual formulae, and Brewfile dependencies against OSV.dev while recognizing Homebrew-backported patches. Homebrew also published an OSV-format advisory database for formula-specific versions and revisions, expanded build-attestation verification, blocked home-directory access by default, and separated network-enabled downloads from offline installation steps; it additionally ships the native BrewUI interface and concurrent package operations for faster installs and upgrades.
See affected versions and whether adversaries are exploiting it.
6 events from the most recent confirmed update back to the earliest known activity.
Homebrew 7.0.0 fully released BrewUI, its native graphical interface for macOS 26 Tahoe and later, allowing users to browse and search packages and manage dependencies.
Homebrew 7.0.0 blocked home-directory access by default, separated network-enabled downloads from offline installation, and added build-attestation verification for supported third-party tap bottles. On Linux, it replaced Bubblewrap sandboxing with Landlock where supported.
The release introduced the `brew vulns` command, which queries OSV.dev for vulnerabilities affecting installed formulae, specified formulae, or Brewfile dependencies and accounts for Homebrew backports. Homebrew also published a CC0-licensed OSV-format advisory database for formula versions and revisions it distributes.
Homebrew released version 7.0.0, closing eight security advisories. It mitigated a moderate-severity macOS LaunchServices sandbox escape by restricting application launches, Mach services, and Unix socket connections.
Homebrew 6.0.12 fixed a high-severity issue in which unsigned cask removal metadata could execute commands with sudo, and a moderate-severity issue involving Git configuration that could cause programs to execute as root.
Homebrew fixed five low-severity advisories in versions 6.0.6 and 6.0.7, including issues involving secret-header exposure or SSRF through redirects, Git redirect restrictions, Subversion URL option injection, and patches writing outside staged source trees.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Apple disclosed two high-severity macOS vulnerabilities, **CVE-2026-28891** and **CVE-2026-28817**, that could allow an application or sandboxed process to escape sandbox restrictions. Both flaws were attributed to race conditions, classified as **CWE-362**, and carried the same `CVSS v3.1` vector: `AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H`, indicating local exploitation with potentially severe impact to confidentiality, integrity, and availability. Apple said the issues were remediated through **additional validation** and **improved state handling**. Fixes were released for **macOS Sequoia 15.7.5**, **macOS Sonoma 14.8.5**, and **macOS Tahoe 26.4**, and organizations running affected macOS systems should prioritize those updates because successful exploitation could let untrusted code break out of the sandbox and operate with broader system access.
Jun 29, 2026
Researchers reported that Apple’s fix for `CVE-2021-30724` in the root-privileged `CVMServer` daemon introduced a new flaw, tracked as `CVE-2022-26721`, that could be reached from the Safari renderer sandbox on macOS. The bug stemmed from uninitialized cleanup metadata left behind when a bounds check aborted processing, creating a path for attacker-controlled `munmap` operations on arbitrary memory pages inside the service. Theori showed the issue could be turned into root code execution by shaping heap contents, using a binary-search-style oracle to infer `CVMServer` memory layout, and overwriting `dyld` private-memory function pointers. A proof of concept reportedly read `/var/db/SystemKey`, which can be used to decrypt macOS keychain files, underscoring the impact of the sandbox escape and privilege-escalation chain. Apple addressed the vulnerability in macOS 12.4 by replacing `malloc` with `calloc` to ensure the descriptor buffer was zero-initialized.
Jul 24, 2026
Apple released **Safari 26.4** and **Xcode 26.4** security updates to address multiple vulnerabilities affecting macOS systems. The Safari update for **macOS Sonoma** and **macOS Sequoia** fixes seven `CVE`-tracked issues in **WebKit** and **WebKit Sandboxing** that could enable **Content Security Policy** and **Same Origin Policy** bypasses, **cross-site scripting**, process crashes, cross-origin access to script message handlers, improper processing of restricted web content, and user fingerprinting. Apple said the flaws were mitigated through improved state management, input validation, logic checks, memory handling, and authorization controls. The **Xcode 26.4** advisory covers two vulnerabilities on systems running **macOS Tahoe 26.2 and later**. Apple patched an out-of-bounds read in `otool` (`CVE-2026-28890`) that could let an app trigger an unexpected system termination, and a permissions flaw in **Simulator** (`CVE-2026-28889`) that could allow an app to read arbitrary files as **root**. Apple credited external researchers for the findings and made the updates available through the **Mac App Store**, developer download channels, and its security releases pages.
Jun 29, 2026