About the security content of macOS Sequoia 15.7.7 - Apple Support

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

Publishersupport.apple.com

Article IDNo stable ID in source URL

Verified snapshot26 Sept 2026, 20:28 UTC

Linked CVEs47

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2026-64705A buffer overflow was addressed with improved bounds checking
CVE-2026-28969A use after free issue was addressed with improved memory management
CVE-2026-64732An attacker with physical access may be able to access sensitive user data during iPhone Mirroring
CVE-2026-28878A privacy issue was addressed by removing sensitive data
CVE-2026-28990The issue was addressed with improved memory handling
CVE-2026-28996A race condition was addressed with additional validation
CVE-2026-28940The issue was addressed with improved memory handling
CVE-2026-43654The issue was addressed with improved memory handling
CVE-2026-28943A logging issue was addressed with improved data redaction
CVE-2026-28915A parsing issue in the handling of directory paths was addressed with improved path validation
CVE-2026-28920An information leakage was addressed with additional validation
CVE-2026-28977The issue was addressed with improved bounds checks
CVE-2026-28978A permissions issue was addressed with additional restrictions
CVE-2026-28840A permissions issue was addressed with additional restrictions
CVE-2026-28923A logging issue was addressed with improved data redaction
CVE-2026-28819An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-28951An authorization issue was addressed with improved state management
CVE-2025-43524An access issue was addressed with additional sandbox restrictions
CVE-2026-28941The issue was addressed with improved checks
CVE-2026-28959A buffer overflow was addressed with improved bounds checking
CVE-2026-28922This issue was addressed through improved state management
CVE-2026-39870The issue was addressed with improved memory handling
CVE-2026-39869The issue was addressed with improved memory handling
CVE-2026-28993This issue was addressed by adding an additional prompt for user consent
CVE-2026-43668A remote attacker may be able to cause unexpected system termination or corrupt kernel memory
CVE-2026-28906An attacker may be able to track users through their IP address
CVE-2026-28992A memory corruption vulnerability was addressed with improved locking
CVE-2026-28994An attacker in a privileged network position may be able to perform denial-of-service attack using crafted Wi-Fi packets
CVE-2026-28956A memory corruption issue was addressed with improved input validation
CVE-2026-28952An integer overflow was addressed with improved input validation
CVE-2026-28972An out-of-bounds write issue was addressed with improved input validation
CVE-2026-43656An out-of-bounds write issue was addressed with improved input validation
CVE-2026-28846A buffer overflow was addressed with improved bounds checking
CVE-2026-43666An attacker on the local network may be able to cause a denial-of-service
CVE-2026-28908A denial of service issue was addressed by removing the vulnerable code
CVE-2026-28897A buffer overflow was addressed with improved input validation
CVE-2026-28848A buffer overflow was addressed with improved bounds checking
CVE-2026-28987A logging issue was addressed with improved data redaction
CVE-2026-28929Replying to an email could display remote images in Mail in Lockdown Mode
CVE-2026-28925A buffer overflow was addressed with improved bounds checking
CVE-2026-28924A race condition was addressed with improved handling of symbolic links
CVE-2026-28986A race condition was addressed with additional validation
CVE-2026-28974This issue was addressed with improved checks to prevent unauthorized actions
CVE-2026-39871A path handling issue was addressed with improved logic
CVE-2026-28919A consistency issue was addressed with improved state handling
CVE-2026-28954A file quarantine bypass was addressed with additional checks
CVE-2026-43659A race condition was addressed with additional validation

Source and provenance

Original title: About the security content of macOS Sequoia 15.7.7 - Apple Support. Captured 26 Sept 2026, 20:28 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗