Aggregator

50 万以内最好的增程 SUV（之一）。

根据中国国家能源局公布的数据，今年前 6 个月煤电发电量为 2.5 万亿千瓦时，占总发电量的比重降至 49.7%，半年发电量占比首次低于 50%；可再生能源发电量占全部发电量的 41.2%，占比首次超四成。其中风电、太阳能发电总量突破 1.2 万亿千瓦时，约占全社会用电量的四分之一。2025 年中国用电量历史性突破突破 10 万亿千瓦时，其规模已是美国的 2 倍多，高于欧盟、俄罗斯、印度、日本总和。

Команда на Земле вынуждена вслепую выравнивать кувыркающийся в вакууме аппарат.

Derrick Van Yeboah impersonated fake romantic partners and directly interacted with victims for more than nine years.

The post Ghanaian national sentenced to 7 years in prison for stealing $10M from romance scam victims appeared first on CyberScoop.

A critical vulnerability, dubbed CosmosEscape, in Microsoft Azure Cosmos DB could have let attackers seize control of virtually every database hosted on the service, including Microsoft’s own internal systems. The vulnerability resided in Cosmos DB’s Gremlin API and, if exploited, could have enabled a cross-tenant attack affecting millions of customer workloads and Microsoft’s internal infrastructure. […]

The post New CosmosEscape Vulnerability Lets Attackers Take Over Azure Cosmos DB Instances appeared first on Cyber Security News.

Электронные мозги эволюционируют гораздо быстрее неповоротливых законов и человеческой жадности.

GenieLocker, a newly identified ransomware linked to the financially motivated Toy Ghouls group, targets Windows, Linux, and VMware ESXi systems and has primarily attacked Russia’s manufacturing sector since March 2026. The Toy Ghouls group, also known as Bearlyfy, Labubu, and Laboo.boo, previously relied on ransomware families such as LockBit, Babuk, and RedAlert. The transition to […]

The post New GenieLocker Ransomware Attacks Windows, ESXi, and Linux Instances appeared first on Cyber Security News.

Attackers rarely stop after gaining initial access. Huntress analyzes a real-world intrusion to show how threat actors establish persistence, disable defenses, and reshape compromised systems, and why defenders must investigate the original entry point rather than simply remove the malware. [...]

The Stable channel has been updated to Chrome version 151.0.7922.71.72 for Windows and macOS, and 151.0.7922.71 for Linux, with the rollout taking place over the coming days and weeks. According to Google’s security advisory, this release includes 370 distinct security fixes that address vulnerabilities in core browser components, graphics, networking, and platform-specific features. Access to […]

The post Google Chrome 151 Patches 370 Security Flaws, Including Seven Critical Vulnerabilities appeared first on Cyber Security News.

科学家通过激光雷达（LiDAR）航空勘测技术检测到了亚马孙地区西南部 432 处被称为“土墩”的地表遗存。这些发现的地理位置此前曾是古代亚马孙西南部 Aquiry 文明的定居地，这一地区可能有 24,000-30,000 处土墩。古代 Aquiry 文明留下的大型地面几何形沟槽围合结构，称为亚马孙地雕，人们认为其功能兼具仪式、政治和公共集会中心。这些大多单独分布的结构由沟渠和堤坝组成，占地在 0.35-14 公顷不等，已知最大的地雕面积近 50 公顷。最新检测结合现有卫星研究，研究者估计 Aquiry 文明在公元 100-300 年鼎盛时期可能养活了约 125-300 万人口，意味着它对亚马孙的土壤、森林结构和生物多样性产生的影响比此前认为的更为深远。 Aquiry文明所占区域不到大亚马孙地区的 3%。

Written by: Kelli Vanderlee, Stuart Carrera

For years, the cybersecurity industry's understanding of software supply chain compromise has been anchored by a few watershed events, including Russian cyber espionage actor ICE RELIC’s (formerly known as APT29) 2020 compromise of SolarWinds and North Korean cyber espionage actor UNC4736's 2023 compromise of 3CX. However, Google Threat Intelligence Group (GTIG) has been tracking growth in threat activity targeting open source software repositories to conduct supply chain compromises over the past several years. A series of large scale open source software supply chain compromise campaigns in 2025 and the first half of 2026 underscore how important it is that organizations implement defensive strategies that directly address this threat vector. 

In this blog post, GTIG and Mandiant discuss trends we have observed in threat actor use of software supply chain compromise, and provide mitigation and hardening recommendations that incorporate insights we have developed as a result of supporting customers through recent campaigns in which threat actors manipulated open source packages. 

Open Source Supply Chain Compromise Grows in Volume and Impact in 2025 and Early 2026

The majority of the most impactful and far-reaching supply chain compromise incidents that GTIG tracked in 2025 and early 2026 involved the compromise of code repositories, software dependencies and developer tools (T1195.001). Open source supply chain compromises offer attackers the same efficiency, scale, and initial stealth as traditional supply chain compromises, but typically require significantly less planning and resources to execute. However, open source supply chain compromises are also noisy once enabled; malicious open source packages are often discovered and publicized much more quickly than traditional supply chain compromises. 

GTIG assesses with high confidence that the growth in very large-scale, open-source supply chain compromise campaigns, including use of worms and iterative compromises in 2025 and early 2026, represent a significant expansion in use of this tactic compared to prior years. We anticipate that threat actors will emulate the tactics of these campaigns and contribute to growth in open-source supply chain compromise through the rest of 2026 and years to come. GTIG identified several notable supply chain compromises in 2025 and early 2026 that we believe exemplify this trend of exceptionally large campaigns, as measured by size and/or impact (Figure 1). 

Figure 1: Notable open source supply chain compromises, 2025 - early 2026

For example from February to May 2026, UNC6780 (aka "TeamPCP") conducted extensive open source supply chain compromises targeting ecosystems like PyPI, npm, and Docker Hub. Initial infection vectors varied across incidents, and included abuse of the pull_request_target GitHub Actions trigger to obtain base repository secrets and write permissions. The threat actor typically used compromised packages to deploy credential stealers, including SANDCLOCK, to obtain high value secrets. In incident response engagements, we observed UNC6780 attempting to pivot from compromised artificial intelligence (AI) software to broader network environments. UNC6780 has monetized stolen credentials through either direct sale of the stolen data, or through partnerships with ransomware and data theft extortion groups. 

In March 2026, GTIG observed the introduction of a malicious dependency in the legitimate axios package. GTIG analysis and the maintainer's post mortem indicate that the maintainer account was compromised via social engineering and used to publish the updated versions. We identified the malicious dependency as a dropper that deploys the WAVESHAPER.V2 backdoor, and attributes the activity to North Korean actor MIDNIGHT NEPTUNE (formerly known as UNC1069). While the malicious versions of axios were removed from the npm registry within three hours of their release, the scope of the compromise is estimated to be broad, as the package has over 100 million weekly downloads. GTIG supported customers in at least 15 industry verticals and 13 different countries affected by this incident. Further, axios is also a dependency for tens of thousands of other packages, and open sources reported that the malicious axios update had spread to several of these.

AI Likely to Accelerate Open Source Supply Chain Compromises

GTIG anticipates AI will accelerate the growth of open source software supply chain compromise. Integration of AI into open source software development practices, including "vibe coding," increases attacker opportunities both to manipulate AI functionalities and to take advantage of AI to speed and scale their own operational planning. Open sources have documented multiple instances of threat actors planting malicious resources on open source AI communities and inserting malicious code into open source Model Context Protocol (MCP) packages. MCP is a standardized protocol for AI to interact with tools and data. Malicious packages have also tricked AI coding agents, which have unwittingly incorporated them into projects. North Korean threat actors reportedly uploaded malicious cryptocurrency-themed packages, and subsequently an AI coding agent co-authored a commit integrating one of the malicious packages as a dependency to a legitimate cryptocurrency trading project. 

Thousands of Malicious Open Source Packages Detected

Corroborating GTIG's findings, statistics compiled by the Open Source Security Foundation (OpenSSF), a cross-industry, non-profit collaboration under the Linux Foundation, indicate that the number of malicious open source software packages identified increased exponentially, or 1,444% from 2024 to 2025 (Figure 2).

Figure 2: Count of malicious open source packages reported 2022–2025 (source: OpenSSF)

Traditional Supply Chain Compromise Remains Rare

In contrast to what we observed in the open source ecosystem, GTIG assesses with high confidence that traditional software supply chain compromise, the manipulation of source code or update/distribution mechanisms (T1195.002), remains rare. The handful of identified cases in 2025 and early 2026 were predominantly cyber espionage incidents with intentionally limited targeting scopes. 

In the most significant case, North Korean threat actor UNC4899 reportedly used social engineering to compromise a developer's machine at a web3 organization. The threat actor used this access to inject malicious code into the frontend systems, specifically impacting smart contract functionality to alter transactions initiated by a third party organization that utilized the multi-signature wallet with the targeted organization. This compromise was tailored to a single victim, but did not directly touch the targeted organization's infrastructure. The compromise ultimately led to a cryptocurrency theft of assets with an estimated value of $1.4B USD.

Other examples include the compromise of hosting infrastructure serving updates of Notepad++ from June to December 2025, activity GTIG attributes to UNC6688. GTIG observed organizations in South Korea and France affected by this activity.  GTIG also tracked the early 2026 compromise of DAEMON Tools installers. During this campaign, UNC6863 deployed SLICKDEMON to perform broad-spectrum reconnaissance and filter for targets of strategic interest. Following this profiling stage, the group selectively delivered the shellcoded loader BADFALL to facilitate hands-on-keyboard activity and bridge the deployment of the advanced QUIC RAT. The campaign targeted Russia, Brazil, and Turkey, with follow-on exploitation of government and scientific entities in Belarus and Thailand.

In addition to likely cyber espionage incidents, we observed suspected financially motivated compromises with broader distribution. In two separate incidents threat actors compromised underlying software used in consumer-facing websites: in one case, automotive dealership websites served ClickFix lures leading to the installation of SHADOWLADDER (aka SectopRAT), and in another, eCommerce websites were infected with web skimmers.

Mitigation Recommendations

To effectively mitigate and harden against software supply chain compromises, organizations should adopt a multi-tiered defensive strategy designed to minimize exposure and strengthen resilience against potential compromises.

Administrative Oversight and Risk Governance

• Cataloging Assets and Dependencies: Maintain a tiered, continuous inventory of all applications, third-party vendors, and services based on operational importance to detect single points of failure and security risks.

• Software Bill of Materials (SBOM): Implement an automated SBOM for all internal and third-party software packages, allowing security teams to continuously monitor and cross-reference active code inventories against newly disclosed vulnerabilities.

• Action Bill of Materials (ABOM): Maintain a dedicated ABOM to inventory every third-party pipeline vendor and development utility in use, linking it to your container image inventory to track exactly which external actions are building your production images.

• Software Development Lifecycle (SDLC) Threat Modeling and Attack Chain Mapping (Wiz SITF): Align your software supply chain risk management with capabilities such as the Wiz SDLC Infrastructure Threat Framework (SITF) to transition from treating security as a checklist of isolated controls to a holistic threat model. With this freely available framework, organizations can map recent incidents, threat actor campaigns, and red team exercises directly to Wiz SITF Reference IDs indexing each risk to its specific lifecycle stage: Version Control Systems (VCS), continuous integration and continuous delivery (CI/CD) pipelines, package registries, or production infrastructure. This methodology allows security teams to model complex "attack chains" where minor, isolated weaknesses (e.g., a lockfile bypass combined with an overprivileged pipeline token) are chained together by sophisticated threat actors to execute critical, high-impact breaches

• Active Risk Monitoring:  Maintain a dedicated supply chain risk register and a centralized remediation tracker to systematically group development lifecycle (SDLC) threats into clear operational domains: Governance, Identity, Pipeline Logic, and Supply Chain Hygiene. If using Wiz SITF, each vulnerability must be mapped to its exact pipeline stage with a unique Wiz SITF Reference ID. Instead of treating vulnerabilities as isolated bugs, prioritize the blocking of complex "attack chains" (such as a leaked token combined with missing branch protections and overprivileged OIDC trust) that pose the highest breach risk. Ensure each logged item has a designated owner, a targeted completion date, and clear tracking of technical dependencies.

• Standardized Configuration & Change Control: Form a Change Advisory Board (CAB) to manage the rollout of all enterprise software and hardware. Ensure every modification includes a pre-deployment risk review, post-deployment monitoring, and a verified plan for recovery or backout.

• Staff Security Education: Deploy ongoing training initiatives centered on supply chain hazards, social engineering techniques, and internal procedures for reporting incidents.

• Node.js (npm/pnpm): Enforce cooldown controls by using the minimumReleaseAge configuration. Setting this value to at least 24 hours (1440 minutes) ensures that freshly published, potentially poisoned packages are quarantined until the broader security community has had time to identify and remove them. Ensure that older, unsupported package manager versions (such as legacy Yarn or pnpm versions) are modernized, as they will silently ignore these cooldown boundaries.

• Python (pip): Ensure that Python project environments do not pull dependencies directly from the public PyPI registry, which bypasses internal release-age policies and gating controls. All configurations must specify a secure, vetted private --index-url in their configuration files to ensure consistent quarantine and vetting of upstream packages.

Vendor Lifecycle Management

• Vendor Security Vetting: Conduct rigorous due diligence prior to procurement by assessing third-party security frameworks against industry standards such as ISO 27001 or SOC 2.

• Cybersecurity Provisions in Contracts: Integrate specific security mandates into vendor agreements, including strict timelines for incident notification, persistent audit rights, and clear liability terms.

• Hardware Provenance and Verification: Use supply chain tracing to confirm the integrity of components, establish methods for detecting counterfeit items, and secure the logistics of repairs and replacements.

Security Architecture and Engineering Controls Identity and Access Management

• Automated System and Workload Identities: Transition third-party integrations and build-system processes away from static, long-lived administrative Personal Access Tokens (PATs). Instead, mandate the use of dedicated GitHub Apps or short-lived system tokens via federated OpenID Connect (OIDC) for automated machine integrations. This ensures that credentials used by system-to-system workflows expire in a matter of minutes, neutralizing the risk of a persistent compromise if an automation pipeline is breached.

• Developer and User Identity Controls (command-line interface (CLI) and Repository Access): Enforce strict access control boundaries for programmatic developer sessions. Because Okta-linked SAML SSO is only capable of verifying identity during the initial creation or authorization of personal tokens and keys, continuous session state cannot be challenged over programmatic CLI connections. Therefore, session security must be enforced through credential expiration and hardware-backed controls.

• Enforce Strict Token Expiration: Strictly limit the allowable lifespan of all personal access tokens (PATs) and programmatic application programming interface (API) keys to a minimum threshold (e.g.a maximum 7-day limit). This guarantees that credentials expire regularly, forcing developers to re-authenticate through the primary SSO gateway.

• Consider Restricting Personal Access Tokens to Neutralize Git-over-HTTPS & Mandate FIDO2 Secure Shell (SSH): To protect developer environments against credential theft, organizations should consider restricting Personal Access Tokens (PATs) globally across GitHub Enterprise Cloud. Because GHEC has no direct protocol-disable switch, administrators should consider disabling classic PATs and enforcing short token lifespans to effectively block unauthorized programmatic HTTPS connections. This protocol containment helps encourage developers to shift entirely to SSH authentication. To secure this transport layer, consider mandating the use of hardware-backed FIDO2 security keys to cryptographically verify physical token possession for all command-line repository actions.

• Isolated CI/CD Execution: Utilize ephemeral runners for build pipelines that are purged immediately after completing a single task. This prevents malicious actors from maintaining a persistent presence between different build phases.

• Workflow Trigger Governance (pull_request_target): Strictly limit and secure the use of highly privileged triggers such as pull_request_target in automated environments. Multiple prominent supply chain campaigns have actively exploited vulnerable workflows using this trigger as their initial entry vector.

Infrastructure Protection

• Zero Trust and Least Privilege: Maintain rigorous control over managed service providers (MSPs) and third-party vendors by enforcing role-based access control (RBAC), multifactor authentication (MFA), and frequent audits of access rights.

• Network Micro-Segmentation: Segregate vital hardware and software from the rest of the enterprise network. Use allow-list-only firewall rules to block unauthorized outbound traffic and disrupt command-and-control (C2) activities.

Secure Development Ecosystems

• Pipeline and Sandbox Isolation: Ensure that testing environments, CI/CD pipelines, and informal scripting sandboxes are physically or logically isolated from production assets.

• Artifact Management: To secure the supply chain, organizations can integrate Google's Assured Open Source Software into their internal workflows to defend against dependency confusion and malicious hijacking. This process provides "provenance" cryptographically signed evidence that the code has not been tampered with and originates from a verified source thereby establishing a higher level of trust for third-party dependencies.

• Quarantine Gates: Require all binaries, packages, and container images to be hosted in monitored internal repositories. To defend against zero-day dependency hijackings, implement localized "quarantine gates" by enforcing cooling windows on newly published third-party assets.

• Lifecycle Script Sandboxing (ignore-scripts): Mitigate the critical threat of arbitrary code execution by disabling the automatic running of package install scripts. Attackers commonly hijack dependencies and add malicious post-installation execution scripts to steal credentials from developer environments and runners during routine installs. Organizations should mandate ignore-scripts=true in their repository-level .npmrc files and configure native allowlists, such as pnpm's onlyBuiltDependencies, to restrict execution exclusively to verified, essential tools.

• Software Composition Analysis (SCA) with Google OSV-Scanner: Integrate Google's open source OSV-Scanner tool into CI/CD build pipelines to continuously scan project dependencies for known security flaws. This tool provides an officially supported frontend to the OSV.dev database that maps a project's list of dependencies with the specific vulnerabilities affecting them.

• High-Fidelity Vulnerability Detection: Unlike traditional scanners that rely on imprecise name matching, the OSV schema stores vulnerability data in a machine-readable format that maps unambiguously onto version ranges and commit hashes. This results in fewer false positives and produces highly actionable remediation notifications, significantly reducing development team triage overhead.

• Authoritative & Collaborative Threat Intel: The underlying OSV.dev database aggregates high-quality threat intelligence from authoritative open sources, allowing the broader developer community to suggest continuous improvements. Utilizing OSV-Scanner helps developers identify impactful third-party open source vulnerabilities in their applications and focus remediation on genuine risks.

• Hardware-Backed Key Protection: Secure code-signing certificates using Hardware Security Modules (HSMs) or vaulting solutions. Monitor public transparency ledgers and logs to detect any unauthorized certificate activity.

• Hardened Distribution Points: Audit and lock down software delivery channels, such as Content Delivery Network (CDN) endpoints and FTP servers, to ensure legitimate binaries cannot be replaced by compromised payloads.

• Audit NPM Package Maintainer Accounts for Stale or Expired Recovery Email Domains: Expired maintainer email domains are a critical risk because attackers can purchase them to intercept password reset emails, take over the package registry account, and publish malicious code to downstream users. To identify vulnerable packages, organizations can perform the following:

• Deploy automated scanning tools to audit the entire dependency tree and verify the domain name system (DNS) resolution and registration status of all maintainer email domains.

• For defense-in-depth, pipelines must disable package execution scripts and employ cold periods.

• Use by default ephemeral, single-use runners to prevent compromised packages from accessing persistent build environments. 

• Isolate runners in a restricted network segment with strict egress filtering blocks any unauthorized connection to external domains even if an active exploit is triggered.

Integration with Native Ecosystem Guardrails    

• These organization-controlled quarantine policies must operate in conjunction with native platform-level security updates to achieve a Defense-in-Depth posture. Relying solely on client-side configurations or automated update tools in isolation creates single points of failure. The following native platform controls must be orchestrated alongside standard controls:

• Dependabot Native Cooldowns (July 2026): Dependabot now enforces a default three-day cooldown on version updates to allow for the public discovery of upstream compromises (such as the historical chalk and debug hijackings) before automated Pull Requests are generated].

• PyPI Server-Side Immutability (July 2026)]: PyPI now natively rejects new file uploads to any release older than 14 days. This prevents adversaries possessing compromised tokens from retroactively poisoning legacy, pinned dependencies (as observed in the LiteLLM and Telnyx compromises) .

• npm v12 Install-Time Defaults (July 2026): npm v12 disables all lifecycle scripts by default (allowScripts: off) , replacing manual, workflow-level ignore flags with explicit, commit-verified package allow-lists 

By explicitly aligning baseline configurations including .npmrc and pip.conf registry pinning, immutable installation protocols via npm ci, and runner isolation with these native platform-level guardrails, while committing to the continuous evaluation and adoption of new upstream security features as they are released, the organization establishes a resilient, multi-layered security boundary across the entire software supply chain

Continuous Verification, Monitoring, and Response Automated Ingestion and Validation

• Automate SBOM Management: Implement a Software Bill of Materials (SBOM) for all third-party and internal software. This enables continuous monitoring for emerging vulnerabilities like Log4j through automated cross-referencing. Automate and scale this process by feeding SBOMs into central vulnerability management platforms that continuously cross-reference deployed inventory against newly disclosed exploits.

• Security Analysis Integration: Incorporate automated dynamic application security testing (DAST) and static application security testing (SAST) tools within development pipelines to identify and block compromised third-party code before it is compiled.

• Verification of Cryptographic Integrity: Prior to installing updates, use automated systems to validate digital signatures and hashes against vendor-provided specifications.

• Implement autonomous security verification: Organizations should look to integrate advanced security workflows directly into their CI/CD pipelines. These systems can behaviorally evaluate threats by executing simulations in isolated sandboxes, cross-reference those flags with cloud context to determine a flaw's actual reach, and automatically generate tested code patches to rapidly remediate verified risks at scale.

Proactive Threat Hunting and Monitoring

• Egress and Proxy Analysis: Establish network traffic baselines to identify suspicious egress flows to external repositories or unrecognized Internet Protocol (IP) addresses.

• Comprehensive Endpoint Security: Utilize endpoint detection and response (EDR) tools across infrastructure and developer workstations to detect post-execution malicious activities from supply chain compromises.

• Log Aggregation and Alerting: Unified log management should alert on the following anomalies:

• Development Systems: Watch for unauthorized code changes, build parameter adjustments, or irregular user activity.

• CI/CD Integrity: Alert on unauthorized workflow modifications or anomalous triggers (e.g., repository_dispatch) that bypass standard code-review gates.

• Injection Detection: Monitor logs for shell-escape characters or command-substitution patterns within untrusted input variables.

• Credential Misuse: Track authentication hits on long-lived static keys from unrecognized IP addresses or regions.

• Physical Assets: Record all firmware modifications, including installation status and source information.

Incident Response Strategies

• Specific Supply Chain Playbooks: Perform tabletop exercises and document response plans for:

  • Upstream Package Takeover: Maintainer account takeover (ATO) on public registries leading to direct runtime application code manipulation

  • Dependency Confusion Exploits: Malicious registration of lapsed administrative recovery domains or unscoped internal namespaces on public registries to hijack local developer and build runner installations.

  • Automated Pipeline Harvesting: Pipeline poisoning of CI/CD environments via runner exploitation to harvest credentials and perform unauthorized package publication.

  • Developer Workstation & IDE Compromise: Targeted social engineering, malicious IDE extensions, or typosquatted local dependencies designed to exfiltrate private cryptographic keys, API tokens, and local session credentials.

• Operational Re-evaluation: Create processes for immediate vendor re-mapping and security re-assessment during industry-wide security events.

Recommendations for mitigation strategies are also available publicly via:

• Google's Supply-chain Levels for Software Artifacts (SLSA) 

• Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations (NIST SP 800-161 Rev. 1) from the US National Institute of Standards and Technology (NIST)

• Securing the Software Supply Chain: Recommended Practices Guide for Developers from the US National Security Agency (NSA)

• WIZ SDLC Infrastructure Threat Framework (SITF) SDLC Infrastructure Threat Framework

Acknowledgements

This analysis would not have been possible without the assistance of Matthew McWhirt and Michael Veal.

Cyberattack tools and infrastructure used by North Korea’s Lazarus Group appear to have been shared with ransomware criminals targeting South Korean organizations — further evidence of deepening entanglement between Pyongyang-backed hackers and the ransomware ecosystem.

Welcome to our monthly look at Apple security patches. This release shows that Apple is not immune to the bug apocalypse that is impacting other vendors. Last month, they released 37 unique CVEs compare to this month’s 210. Quite a jump.

For July 2026, Apple released 210 unique CVEs across iOS/iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, tvOS 26.6, watchOS 26.6, visionOS 26.6, and Safari 26.6. Since Apple doesn’t provide CVSS scores or other severity information, we’re left to speculate on which of these bugs is the most severe. However, there are a couple that stand out.

·      CVE-2026-43818 (ImageIO) – This bug could allow the “Processing [of] a maliciously crafted image may lead to arbitrary code execution." ImageIO is the classic zero-/one-click remote surface on Apple platforms (images auto-parsed in Messages, previews, notifications), so this is the highest real-world remote-exploitation risk in the release. It’s also present across iOS and all macOS versions. Depending on delivery path, this is the one most likely to be weaponized into a remote foothold.

·      CVE-2026-64747 (AVEVideoEncoder) – According to Apple, “An app may be able to execute arbitrary code with kernel privileges.” Kernel-level code execution is the maximum-impact outcome on an Apple device: full compromise, defeats the sandbox and most mitigations. It's also unusually broad, shipping to iOS/iPadOS, all three macOS versions, tvOS, watchOS, and visionOS. Local-app precondition is its only limiter, and it's exactly the second stage a remote bug chains into.

·      CVE-2026-64767 (afpfs) – In this case, “A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.” This bug is a network-reachable, apparently unauthenticated path to kernel memory corruption via Apple Filing Protocol. Remote plus kernel is a dangerous combination.  Also, the “remote attacker” versus “remote user” wording suggests no authentication required. This bug affects macOS only, which is the only reason it sits at #3 rather than higher.

Honorable mentions: CVE-2026-43776 (AppleDouble) and the SceneKit set (CVE-2026-64763/64/65/66) are additional file-parsing paths to arbitrary code execution. CVE-2026-43750 (Wi‑Fi) allows code execution out of the sandbox with elevated privileges. And finally, CVE-2026-64696 (SMB) / CVE-2026-43810 (Kernel) are further remote kernel-corruption bugs.

Here’s the full table of Apple patches and the products they affect:

Apple Security Updates — July 27, 2026 210Total CVEs 9Code Execution 26Elevation of Privilege 11Sandbox Escape 9Security Feature Bypass 15Memory Corruption 55Information Disclosure 2Spoofing / UI 75Denial of Service 8Other Apple security release — July 27, 2026 (iOS/iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, tvOS 26.6, watchOS 26.6, visionOS 26.6, Safari 26.6). "Yes/No" indicates whether each update is affected. CVE IDs link to NVD. CVE ID Component Impact iOS / iPadOS 26.6 macOS Tahoe 26.6 macOS Sequoia 15.7.8 macOS Sonoma 14.8.8 tvOS 26.6 watchOS 26.6 visionOS 26.6 Safari 26.6 CVE-2026-64732 Accessibility An attacker with physical access may be able to access sensitive user data during iPhone Mirroring YesNoNoNoNoNoNoNo CVE-2026-43749 Accounts An app may be able to gain root privileges NoYesYesYesNoNoNoNo CVE-2026-43819 Accounts An app may be able to access sensitive user data NoYesNoNoNoNoNoNo CVE-2026-64733 Accounts Framework An app may be able to fingerprint the user YesYesNoNoYesYesYesNo CVE-2026-64767 afpfs A remote attacker may be able to cause unexpected system termination or corrupt kernel memory NoYesYesYesNoNoNoNo CVE-2026-23918 apache A remote attacker may be able to cause a denial-of-service NoYesYesYesNoNoNoNo CVE-2026-64695 APFS A remote user may be able to cause unexpected system termination or corrupt kernel memory NoYesYesYesNoNoNoNo CVE-2026-43801 App Store An app may be able to access sensitive user data YesYesYesYesYesYesYesNo CVE-2026-43781 Apple Account An app may be able to access sensitive user data NoYesYesYesNoNoNoNo CVE-2026-64737 Apple Account A malicious app may be able to break out of its sandbox NoYesYesYesNoNoNoNo CVE-2026-28928 Apple Neural Engine An app may be able to cause unexpected system termination YesYesNoNoYesYesNoNo CVE-2026-43748 Apple Neural Engine An app may be able to cause unexpected system termination NoYesYesNoNoNoNoNo CVE-2026-43776 AppleDouble Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution YesYesYesNoNoNoNoNo CVE-2026-43681 AppleRAID A local user may be able to read kernel memory NoYesYesYesNoNoNoNo CVE-2026-43672 Assets A malicious application may be able to bypass Privacy preferences NoYesYesYesNoNoNoNo CVE-2026-43763 ATS An app may be able to read files outside of its sandbox NoYesYesYesNoNoNoNo CVE-2026-64702 Audio An app may be able to break out of its sandbox NoYesYesYesNoNoNoNo CVE-2026-64725 Audio An app may be able to cause a denial-of-service YesYesYesYesYesYesYesNo CVE-2026-43730 AuthKit An app may be able to fingerprint the user YesYesNoNoYesYesYesNo CVE-2026-64747 AVEVideoEncoder An app may be able to execute arbitrary code with kernel privileges YesYesYesYesYesYesYesNo CVE-2026-64762 AVEVideoEncoder An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo CVE-2026-64707 BackgroundAssets An app may be able to delete files for which it does not have permission YesYesYesYesNoNoYesNo CVE-2026-28849 BOM A maliciously crafted ZIP archive may bypass Gatekeeper checks NoNoYesYesNoNoNoNo CVE-2026-43811 Books An app may be able to modify protected parts of the file system YesNoNoNoNoNoNoNo CVE-2026-64698 cd9660 An app may be able to cause unexpected system termination or read kernel memory NoYesYesYesNoNoNoNo CVE-2026-43813 CloudAttestation A maliciously crafted app may be able to bypass code signing enforcement YesYesNoNoYesYesYesNo CVE-2026-43797 Contacts An app may be able to access information about a user's contacts YesYesNoNoNoNoNoNo CVE-2026-64734 Contacts Processing a maliciously crafted contact may leak sensitive data YesYesYesYesNoYesYesNo CVE-2026-64746 Contacts An app may be able to add contacts without user authorization YesYesNoNoNoYesYesNo CVE-2026-43756 Control Center An app may be able to access user-sensitive data NoYesYesYesNoNoNoNo CVE-2026-43693 Core Services An app may be able to gain root privileges NoYesYesYesNoNoNoNo CVE-2026-43673 CoreAudio Processing a maliciously crafted audio file may corrupt process memory YesYesYesYesYesYesYesNo CVE-2026-43744 CoreAudio Processing an audio stream in a maliciously crafted media file may terminate the process YesYesYesYesYesYesYesNo CVE-2026-43803 CoreAudio A remote attacker may be able to cause unexpected system termination YesYesYesYesYesYesYesNo CVE-2026-43711 CoreMedia Processing a maliciously crafted video file may lead to unexpected app termination YesYesYesYesYesYesYesNo CVE-2026-43759 CoreMedia An app may be able to access sensitive user data NoYesNoNoNoYesNoNo CVE-2026-43775 CoreMedia An app may be able to access sensitive user data NoYesYesNoNoNoNoNo CVE-2026-28936 CoreServices Processing a maliciously crafted file may lead to unexpected app termination NoNoYesYesNoNoNoNo CVE-2026-43738 CoreUI Processing a maliciously crafted asset catalog may result in disclosure of process memory NoNoYesYesNoNoNoNo CVE-2026-43802 CoreVideo An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo CVE-2026-64710 Crash Reporter An app may be able to leak sensitive user information NoYesYesYesNoNoNoNo CVE-2026-39875 CUPS A malicious app may be able to gain root privileges NoYesYesYesNoNoNoNo CVE-2026-43698 CUPS An app may be able to gain root privileges NoNoYesYesNoNoNoNo CVE-2026-3783 curl Authentication credentials may be sent to a server on another origin YesYesYesYesYesYesNoNo CVE-2026-3784 curl Authentication credentials may be sent to a server on another origin YesYesYesYesYesYesNoNo CVE-2026-43758 Data Detectors UI An app may be able to access sensitive user data NoYesYesYesNoYesNoNo CVE-2026-64708 DesktopServices An app may bypass Gatekeeper checks NoYesYesYesNoNoNoNo CVE-2026-28926 Disk Images An app may be able to elevate privileges NoNoYesYesNoNoNoNo CVE-2026-28945 Disk Images An app may be able to bypass network restrictions NoYesYesYesNoNoNoNo CVE-2026-43747 Disk Images Parsing a maliciously crafted file may lead to an unexpected app termination NoYesYesYesNoNoNoNo CVE-2026-64694 Disk Images An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo CVE-2026-64776 Disk Images An app may be able to disclose kernel memory NoYesYesYesNoNoNoNo CVE-2026-43753 DriverKit An attacker with physical access to a locked device may be able to view sensitive user information YesYesYesYesNoNoNoNo CVE-2026-43793 DriverKit An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo CVE-2026-43714 Foundation A malicious app may be able to access protected user data YesYesYesYesNoYesYesNo CVE-2026-64742 FrontBoard An app may be able to access sensitive user data YesNoNoNoYesYesYesNo CVE-2026-43796 Game Center An app may be able to access sensitive user data YesYesYesYesYesYesYesNo CVE-2026-64740 Game Center A malicious app may be able to break out of its sandbox YesYesYesYesYesNoNoNo CVE-2026-64691 GPU Drivers An app may be able to cause unexpected system termination NoYesNoNoNoNoNoNo CVE-2026-64692 Heimdal An app may be able to cause a denial-of-service YesYesYesYesYesYesYesNo CVE-2026-28981 HFS Processing a maliciously crafted image may lead to arbitrary code execution NoYesYesYesNoNoNoNo CVE-2026-43682 HFS A remote user may be able to cause unexpected system termination or corrupt kernel memory NoYesYesYesNoNoNoNo CVE-2026-43710 HFS An attacker may be able to cause unexpected system termination or corrupt kernel memory NoYesYesYesNoNoNoNo CVE-2026-43764 HFS An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo CVE-2026-43767 HFS An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo CVE-2026-43773 HFS Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory NoYesYesYesNoNoNoNo CVE-2026-64697 HFS An app may be able to cause unexpected system termination or corrupt kernel memory NoYesYesYesNoNoNoNo CVE-2025-43325 Icons An app may be able to access sensitive user data NoNoYesYesNoNoNoNo CVE-2026-43661 ImageIO Processing a maliciously crafted image may corrupt process memory NoNoYesYesNoNoNoNo CVE-2026-43780 ImageIO Processing a maliciously crafted texture may lead to unexpected app termination YesYesYesYesYesYesYesNo CVE-2026-43818 ImageIO Processing a maliciously crafted image may lead to arbitrary code execution YesYesYesYesNoNoNoNo CVE-2026-64693 ImageIO Processing a maliciously crafted image may lead to a denial-of-service YesYesYesYesYesYesYesNo CVE-2026-64716 ImageIO Processing a maliciously crafted image may corrupt process memory YesYesYesYesYesYesYesNo CVE-2026-64754 ImageIO Processing a maliciously crafted file may lead to a denial-of-service YesYesYesYesYesYesYesNo CVE-2026-64758 ImageIO Processing a maliciously crafted file may lead to unexpected app termination YesYesNoNoYesYesYesNo CVE-2026-43743 IOGPUFamily An app may be able to cause unexpected system termination NoNoNoNoYesYesNoNo CVE-2026-43805 IOKit An app may be able to cause unexpected system termination or write kernel memory YesYesYesYesNoYesNoNo CVE-2026-39877 IOSkywalkFamily An app may be able to disclose kernel memory NoNoYesYesNoNoNoNo CVE-2026-28931 Kernel Connecting to a malicious NFS server may lead to kernel memory corruption YesYesNoNoYesYesNoNo CVE-2026-28982 Kernel A remote user may be able to cause unexpected system termination or corrupt kernel memory NoYesYesYesNoNoNoNo CVE-2026-39868 Kernel An app may be able to cause unexpected system termination or corrupt kernel memory NoNoYesYesYesYesYesNo CVE-2026-43722 Kernel An app may be able to leak sensitive kernel state NoNoYesYesNoNoNoNo CVE-2026-43724 Kernel An app may be able to cause unexpected system termination or write kernel memory NoNoYesYesYesYesYesNo CVE-2026-43739 Kernel An app may be able to cause unexpected system termination YesYesNoNoYesYesYesNo CVE-2026-43754 Kernel An app may be able to leak sensitive kernel state NoYesYesYesNoNoNoNo CVE-2026-43757 Kernel An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo CVE-2026-43769 Kernel An app may be able to cause unexpected system termination YesYesYesYesYesYesYesNo CVE-2026-43778 Kernel An app may be able to cause unexpected system termination or corrupt kernel memory YesYesYesYesYesYesYesNo CVE-2026-43782 Kernel An app may be able to access sensitive user data NoYesYesYesNoNoNoNo CVE-2026-43799 Kernel An app may be able to cause unexpected system termination YesYesYesYesYesYesYesNo CVE-2026-43809 Kernel An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo CVE-2026-43810 Kernel A remote user may be able to cause unexpected system termination or corrupt kernel memory YesYesYesYesYesYesYesNo CVE-2026-43814 Kernel An app may be able to cause unexpected system termination YesYesNoNoYesYesNoNo CVE-2026-43816 Kernel An app may be able to cause unexpected system termination YesYesNoNoYesYesYesNo CVE-2026-43817 Kernel An app may be able to cause unexpected system termination YesYesNoNoYesYesYesNo CVE-2026-43822 Kernel An app may be able to cause unexpected system termination YesYesYesYesYesYesYesNo CVE-2026-64700 Kernel An app may be able to cause unexpected system termination YesYesYesYesYesYesYesNo CVE-2026-64709 Kernel An app may be able to disclose kernel memory YesYesYesYesYesYesYesNo CVE-2026-64720 Kernel An app may be able to cause unexpected system termination YesYesNoNoYesYesNoNo CVE-2026-64721 Kernel An app may be able to access sensitive user data YesYesYesYesYesYesYesNo CVE-2026-64723 Kernel An app may be able to access sensitive user data NoYesYesYesNoNoNoNo CVE-2026-64727 Kernel An app may be able to cause unexpected system termination NoYesNoNoYesNoNoNo CVE-2026-64729 Kernel An app may be able to cause unexpected system termination YesYesNoNoYesYesYesNo CVE-2026-64735 Kernel A remote attacker may be able to bypass network filters YesYesYesYesYesYesYesNo CVE-2026-64744 Kernel An app may be able to disclose kernel memory NoYesYesYesNoNoNoNo CVE-2026-64749 Kernel An app may be able to cause unexpected system termination or corrupt kernel memory YesYesYesNoNoNoYesNo CVE-2026-64751 Kernel An app may be able to cause unexpected system termination or write kernel memory YesYesNoNoYesYesYesNo CVE-2026-64775 Kernel An app may be able to cause unexpected system termination YesYesYesYesYesYesYesNo CVE-2026-20672 LaunchServices An app may be able to access sensitive user data NoNoYesYesNoNoNoNo CVE-2026-28983 LaunchServices A remote attacker may be able to cause a denial of service NoNoYesYesNoNoNoNo CVE-2026-28900 libarchive A maliciously crafted ZIP archive may bypass Gatekeeper checks NoNoYesYesNoNoNoNo CVE-2026-4424 libarchive Processing a maliciously crafted file may result in disclosure of process memory YesYesYesYesNoNoYesNo CVE-2026-28973 libc A malicious app may be able to break out of its sandbox YesYesYesYesNoYesNoNo CVE-2026-64739 Libnotify An attacker may be able to cause unexpected app termination YesYesYesYesYesYesYesNo CVE-2026-43703 libxslt Processing maliciously crafted web content may lead to an unexpected process crash NoNoYesYesYesYesYesNo CVE-2026-43706 libxslt Processing maliciously crafted web content may lead to an unexpected process crash NoNoYesYesYesYesYesNo CVE-2026-43766 LoginWindow An attacker with physical access to a locked device may be able to view sensitive user information NoYesYesYesNoNoNoNo CVE-2026-64743 Managed Configuration An app may be able to access sensitive user data YesYesNoNoYesYesYesNo CVE-2026-64738 Maps A malicious app may be able to break out of its sandbox NoYesYesYesNoNoNoNo CVE-2026-43653 mDNSResponder An attacker on the local network may be able to cause a denial-of-service NoNoYesNoNoNoNoNo CVE-2026-43806 mDNSResponder A local attacker may be able to cause a denial of service NoYesNoNoNoNoNoNo CVE-2026-64724 mDNSResponder An attacker on the local network may be able to cause a denial-of-service YesYesYesYesYesYesYesNo CVE-2026-43723 MediaRemote An app may be able to gain root privileges YesYesYesYesYesYesYesNo CVE-2026-28911 Metal A malicious app may be able to corrupt memory of a system process NoYesNoYesNoNoNoNo CVE-2026-43807 MobileAccessoryUpdater A malicious accessory may be able to cause unexpected app termination NoNoYesYesYesYesYesNo CVE-2026-43729 Model I/O Processing a maliciously crafted image may corrupt process memory YesYesYesNoYesNoYesNo CVE-2026-43733 Model I/O Processing a maliciously crafted image may corrupt process memory YesYesYesNoNoNoNoNo CVE-2026-64722 Model I/O Processing a 3D model may result in disclosure of process memory YesYesYesNoNoNoNoNo CVE-2026-64768 Model I/O A remote attacker may cause an unexpected app termination YesYesYesYesYesNoYesNo CVE-2026-64769 Model I/O A remote attacker may be able to cause unexpected application termination or heap corruption YesYesYesYesYesNoYesNo CVE-2026-64770 Model I/O A remote attacker may be able to cause unexpected application termination or heap corruption YesYesYesYesYesNoYesNo CVE-2026-64771 Model I/O A remote attacker may be able to cause unexpected application termination or heap corruption YesYesYesNoYesNoYesNo CVE-2026-64772 Model I/O A remote attacker may be able to cause unexpected application termination or heap corruption YesYesYesNoYesNoYesNo CVE-2026-64774 Model I/O A remote attacker may be able to cause unexpected application termination or heap corruption YesYesYesYesYesNoYesNo CVE-2026-43771 Net-SNMP An app may be able to cause a denial-of-service NoYesYesYesNoNoNoNo CVE-2026-43772 NetFSFramework An app may be able to break out of its sandbox NoYesYesYesNoNoNoNo CVE-2026-28961 Network Extensions An attacker with physical access to a locked device may be able to view sensitive user information NoNoYesYesNoNoNoNo CVE-2026-64711 NSColorPanel An app may be able to leak sensitive user information YesYesYesYesNoNoNoNo CVE-2026-28912 PackageKit A user may be able to elevate privileges NoYesYesNoNoNoNoNo CVE-2026-43765 PackageKit An app may be able to modify protected parts of the file system NoYesYesYesNoNoNoNo CVE-2026-28896 ppp An attacker may be able to cause unexpected system termination or read kernel memory NoNoYesYesNoNoNoNo CVE-2026-64731 Printing A malicious app may be able to break out of its sandbox NoYesYesNoNoNoNoNo CVE-2026-43812 Pro Res An app may be able to cause unexpected system termination YesYesYesNoYesNoYesNo CVE-2026-43694 quarantine An app may be able to cause unexpected system termination or write kernel memory NoYesYesYesNoNoNoNo CVE-2026-39874 Remote Management A malicious app may be able to gain root privileges NoYesYesYesNoNoNoNo CVE-2026-43792 Safari An app may be able to access sensitive user data NoYesNoNoNoNoNoYes CVE-2026-64741 Sandbox Profiles An app may be able to read a persistent device identifier YesNoNoNoYesYesYesNo CVE-2026-64763 SceneKit Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution YesYesYesYesYesYesYesNo CVE-2026-64764 SceneKit Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution YesYesYesYesYesYesYesNo CVE-2026-64765 SceneKit Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution YesYesYesYesYesYesYesNo CVE-2026-64766 SceneKit Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution YesYesYesYesYesYesYesNo CVE-2026-43665 Screen Sharing Server A local attacker may be able to determine the legacy VNC password configured for Screen Sharing NoNoYesYesNoNoNoNo CVE-2026-43760 Screen Sharing Server An app may be able to access user-sensitive data NoYesNoYesNoNoNoNo CVE-2026-43777 Screen Sharing Server A remote attacker may be able to cause a denial of service NoYesYesYesNoNoNoNo CVE-2026-43779 Screen Sharing Server An app may be able to intercept network connections intended for another process NoYesYesYesNoNoNoNo CVE-2026-43728 Security An attacker may be able to modify the state of the Keychain NoYesNoNoNoNoNoNo CVE-2026-43755 SecurityAgent An app may be able to gain root privileges NoYesNoYesNoNoNoNo CVE-2026-43800 Siri An app may be able to access sensitive user data YesYesNoNoYesYesNoNo CVE-2026-64745 Siri A person with physical access to a locked device may be able to access contacts and photos NoYesYesNoNoNoNoNo CVE-2026-39873 SMB Connecting to a malicious SMB server may lead to unexpected system termination NoYesYesYesNoNoNoNo CVE-2026-64696 SMB A remote user may be able to cause unexpected system termination or corrupt kernel memory NoYesYesYesNoNoNoNo CVE-2026-64704 SMB An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo CVE-2026-43774 Spotlight An app may be able to access sensitive user data NoYesYesYesNoNoNoNo CVE-2026-43770 StorageKit An app may be able to access sensitive user data NoYesYesYesYesNoNoNo CVE-2026-43768 udf An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo CVE-2026-43704 Web Extensions A malicious web extension may be able to cause an unexpected process crash NoNoNoNoYesYesYesNo CVE-2026-64699 WebDAV An app may be able to disclose kernel memory NoYesYesYesNoNoNoNo CVE-2026-64703 WebDAV An app may be able to cause a denial-of-service NoYesYesYesNoNoNoNo CVE-2026-39872 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo CVE-2026-43663 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo CVE-2026-43676 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash NoNoNoNoNoYesYesNo CVE-2026-43699 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo CVE-2026-43700 WebKit Processing maliciously crafted web content may disclose sensitive user information NoNoNoNoYesYesYesNo CVE-2026-43701 WebKit A malicious website may be able to process restricted web content outside the sandbox NoNoNoNoYesYesYesNo CVE-2026-43705 WebKit Processing maliciously crafted web content may lead to memory corruption NoNoNoNoYesYesYesNo CVE-2026-43707 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo CVE-2026-43708 WebKit A malicious website may exfiltrate data cross-origin NoNoNoNoYesYesYesNo CVE-2026-43709 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo CVE-2026-43712 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo CVE-2026-43713 WebKit Visiting a website may leak sensitive data NoNoNoNoYesYesYesNo CVE-2026-43715 WebKit Processing maliciously crafted web content may lead to memory corruption NoNoNoNoYesYesYesNo CVE-2026-43725 WebKit A malicious website may be able to process restricted web content outside the sandbox NoNoNoNoYesYesYesNo CVE-2026-43726 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo CVE-2026-43727 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash NoNoNoNoNoYesYesNo CVE-2026-43731 WebKit Processing maliciously crafted web content may lead to memory corruption NoNoNoNoYesYesYesNo CVE-2026-43732 WebKit Processing maliciously crafted web content may disclose sensitive user information NoNoNoNoYesYesYesNo CVE-2026-43734 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo CVE-2026-43735 WebKit A malicious website may exfiltrate data cross-origin NoNoNoNoYesYesYesNo CVE-2026-43740 WebKit Processing maliciously crafted web content may result in the disclosure of process memory YesNoNoNoYesYesYesYes CVE-2026-43742 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo CVE-2026-43745 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash NoNoNoNoYesYesYesNo CVE-2026-43804 WebKit Visiting a website may lead to an app denial-of-service YesYesNoNoNoNoYesYes CVE-2026-43821 WebKit An app may be able to read files outside of its sandbox YesYesNoNoYesYesYesYes CVE-2026-64713 WebKit Websites may know if the user has visited a given link YesYesNoNoYesYesYesYes CVE-2026-64728 WebKit Maliciously crafted web content may violate iframe sandboxing policy YesYesNoNoYesYesYesYes CVE-2026-64730 WebKit Visiting a website that frames malicious content may lead to UI spoofing YesYesNoNoYesYesYesYes CVE-2026-64757 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash YesYesNoNoNoYesYesYes CVE-2026-64783 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash YesYesNoNoNoYesYesYes CVE-2026-43720 WebKit Canvas Processing maliciously crafted web content may lead to an unexpected Safari crash NoNoNoNoYesYesYesNo CVE-2026-64718 WebKit Canvas Processing maliciously crafted web content may lead to an unexpected Safari crash YesYesNoNoYesYesYesYes CVE-2026-43721 WebKit Storage A malicious website may be able to silently hijack clipboard data NoNoNoNoYesYesYesNo CVE-2026-28979 WebRTC Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo CVE-2026-43717 WebRTC Processing maliciously crafted web content may lead to an unexpected Safari crash NoNoNoNoYesYesNoNo CVE-2026-43718 WebRTC Processing maliciously crafted web content may lead to an unexpected Safari crash NoNoNoNoYesYesYesNo CVE-2026-64719 WebRTC Processing maliciously crafted web content may lead to an unexpected Safari crash YesYesNoNoYesYesYesYes CVE-2026-43750 Wi-Fi An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges NoYesYesYesNoNoNoNo CVE-2026-64726 Wi-Fi An attacker in physical proximity may be able to corrupt process memory YesYesNoNoYesYesYesNo CVE-2026-64755 WorkoutKit An app may be able to access sensitive user data YesNoNoNoNoNoNoNo CVE-2026-28932 xar An app may be able to cause a denial of service NoYesYesYesNoNoNoNo CVE-2026-28914 zip A maliciously crafted ZIP archive may bypass Gatekeeper checks NoNoYesYesNoNoNoNo

We’ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.