macOS Sequoia: 25 Vulnerabilities Disclosed Together, Ranging from Memory Corruption to Privilege Escalation
Apple patched 25 vulnerabilities in macOS Sequoia and other operating systems on October 26, 2026, including memory corruption and privilege escalation risks.
Key findings
- Apple disclosed 25 vulnerabilities in macOS Sequoia and other operating systems on October 26, 2026.
- The batch includes memory corruption, authorization bypass, and information disclosure flaws.
- Key vulnerabilities could lead to system termination, privilege escalation, or unauthorized data access.
- All affected systems were patched in macOS Sequoia version 15.8.2 and corresponding updates for other Apple OSs.
- No vulnerabilities in this batch were reported as actively exploited in the wild.
On October 26, 2026, Apple Inc. disclosed a significant batch of 25 vulnerabilities affecting macOS Sequoia, alongside other operating systems including iOS, iPadOS, macOS Golden Gate, macOS Tahoe, tvOS, watchOS, and visionOS. The vulnerabilities, all disclosed on the same day, range in severity and impact, with several allowing malicious applications to cause unexpected system termination, corrupt kernel memory, or gain unauthorized access to sensitive user data. The fixes address issues such as buffer overflows, out-of-bounds writes, use-after-free vulnerabilities, and logic flaws, impacting system stability and memory integrity.
Several vulnerabilities fall into the category of memory corruption. CVE-2026-86991, CVE-2026-86971, and CVE-2026-86969 describe out-of-bounds write issues, while CVE-2026-86992 and CVE-2026-84595 detail buffer overflow vulnerabilities. Additionally, CVE-2026-86946 and CVE-2026-84545 involve use-after-free flaws, and CVE-2026-84590 presents another out-of-bounds write. These memory-related issues could lead to unexpected application termination or system instability.
Other vulnerabilities focus on authorization and access control. CVE-2026-86966 addresses an issue with symbolic link handling, potentially allowing an app to modify protected file system areas. CVE-2026-86937 and CVE-2026-65368 describe logic issues that could allow an app to bypass Gatekeeper checks. Furthermore, CVE-2026-10, CVE-2026-86945, and CVE-2026-113900 highlight vulnerabilities that could permit an app to create files in protected directories or gain root privileges. CVE-2026-65327 is a high-severity vulnerability allowing a local attacker to elevate privileges.
Information disclosure is another theme, with CVE-2026-86923 and CVE-2026-84528 related to logging issues that could expose sensitive user data. CVE-2026-84498 details an issue where an app might disclose kernel memory. CVE-2026-113898 also relates to logging and could allow a malicious application to bypass Privacy preferences.
The batch includes vulnerabilities fixed in various versions of Apple's operating systems. Specifically for macOS Sequoia, the fixes are included in version 15.8.2. Other affected and patched versions mentioned include iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.
While no vulnerabilities in this specific batch were reported as actively exploited in the wild according to the provided news coverage, the sheer volume and variety of issues underscore the importance of timely patching for all Apple users. Keeping systems updated to the latest versions is crucial for mitigating risks associated with memory corruption, unauthorized access, and privilege escalation.
The disclosure of these 25 vulnerabilities on a single day highlights a coordinated patching effort by Apple. Users of macOS Sequoia and other affected Apple operating systems should prioritize applying the available security updates to protect their systems from potential compromise. The fixes address a wide range of potential impacts, from application crashes to more severe security implications like privilege escalation and data breaches.
The vulnerabilities patched include: CVE-2026-86992, CVE-2026-86991, CVE-2026-86971, CVE-2026-86969, CVE-2026-86966, CVE-2026-86958, CVE-2026-86946, CVE-2026-86945, CVE-2026-86937, CVE-2026-86936, CVE-2026-86923, CVE-2026-84595, CVE-2026-84590, CVE-2026-84545, CVE-2026-84528, CVE-2026-84498, CVE-2026-84495, CVE-2026-65368, CVE-2026-65327, CVE-2026-113912, CVE-2026-113907, CVE-2026-113900, CVE-2026-113898, CVE-2026-112708, CVE-2026-112705.