About the security content of macOS Sonoma 14.8.8 - Apple Support

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

Publishersupport.apple.com

Article IDNo stable ID in source URL

Verified snapshot26 Sept 2026, 16:54 UTC

Linked CVEs50

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2026-4424Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
CVE-2026-43815A buffer overflow was addressed with improved bounds checking
CVE-2026-28836An attacker with physical access may be able to silently persist an Apple Account on an erased device
CVE-2026-86902A parsing issue in the handling of directory paths was addressed with improved path validation
CVE-2026-64714A memory corruption issue was addressed with improved bounds checking
CVE-2026-65404A malicious application may be able to bypass Privacy preferences
CVE-2026-28933A use-after-free issue was addressed with improved memory management
CVE-2026-84489A buffer overflow was addressed with improved bounds checking
CVE-2026-43761An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-3784wrong proxy connection reuse with credentials
CVE-2026-3783token leak with redirect and netrc
CVE-2025-14819OpenSSL partial chain store policy bypass
CVE-2025-14017broken TLS options for threaded LDAPS
CVE-2026-43760An access issue was addressed with improved access restrictions
CVE-2026-43661A buffer overflow issue was addressed with improved memory handling
CVE-2026-43698An injection issue was addressed with improved validation
CVE-2026-64708A file quarantine bypass was addressed with additional checks
CVE-2026-43738The issue was addressed with improved memory handling
CVE-2026-43763A permissions issue was addressed by removing the vulnerable code
CVE-2026-28900A file quarantine bypass was addressed with additional checks
CVE-2026-28849A maliciously crafted ZIP archive may bypass Gatekeeper checks
CVE-2026-39877A memory corruption issue was addressed with improved memory handling
CVE-2026-20672An information disclosure issue was addressed with improved privacy controls
CVE-2026-28926A race condition was addressed with improved state handling
CVE-2026-28896An attacker may be able to cause unexpected system termination or read kernel memory
CVE-2026-43757An out-of-bounds read was addressed with improved bounds checking
CVE-2026-64721This issue was addressed through improved state management
CVE-2026-64740A parsing issue in the handling of directory paths was addressed with improved path validation
CVE-2026-43673The issue was addressed with improved memory handling
CVE-2026-43809An out-of-bounds read was addressed with improved bounds checking
CVE-2026-43799A use after free issue was addressed with improved memory management
CVE-2026-39868This issue was addressed with improved input validation
CVE-2026-64716The issue was addressed with improved memory handling
CVE-2026-64700A use after free issue was addressed with improved memory management
CVE-2026-64707A permissions issue was addressed with improved validation
CVE-2026-64766An integer overflow was addressed with improved input validation
CVE-2026-43803A remote attacker may be able to cause unexpected system termination
CVE-2026-64770A remote attacker may be able to cause unexpected application termination or heap corruption
CVE-2026-43802An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-43711A memory corruption issue was addressed with improved memory handling
CVE-2026-43818An integer overflow was addressed with improved input validation
CVE-2026-43822A use after free issue was addressed with improved memory management
CVE-2026-64747A buffer overflow was addressed with improved size validation
CVE-2026-43724The issue was addressed with improved input sanitization
CVE-2026-64768A remote attacker may cause an unexpected app termination
CVE-2026-64695The issue was addressed with improved memory handling
CVE-2026-64744An information leakage was addressed with additional validation
CVE-2026-64725An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-43801This issue was addressed with improved checks
CVE-2026-64764An out-of-bounds write issue was addressed with improved bounds checking

Source and provenance

Original title: About the security content of macOS Sonoma 14.8.8 - Apple Support. Captured 26 Sept 2026, 16:54 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗