About the security content of macOS Tahoe 26.2 - Apple Support

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

Publishersupport.apple.com

Article IDNo stable ID in source URL

Verified snapshot29 Sept 2026, 20:25 UTC

Linked CVEs50

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2025-43529Apple Multiple Products Use-After-Free WebKit Vulnerability
CVE-2025-14174Google Chromium Out of Bounds Memory Access Vulnerability
CVE-2025-9086Out of bounds read for cookie path
CVE-2025-5918Libarchive: reading past eof may be triggered for piped file streams
CVE-2025-46281A logic issue was addressed with improved checks
CVE-2025-46291An app may bypass Gatekeeper checks
CVE-2025-43417A path handling issue was addressed with improved logic
CVE-2025-46283A logic issue was addressed with improved validation
CVE-2025-43511A use-after-free issue was addressed with improved memory management
CVE-2025-43524An access issue was addressed with additional sandbox restrictions
CVE-2025-46304The issue was addressed with improved bounds checks
CVE-2025-43518A logic issue was addressed with improved checks
CVE-2025-43522A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions
CVE-2025-43514The issue was addressed with improved handling of caches
CVE-2025-43410An attacker with physical access may be able to view deleted notes
CVE-2025-46297A permissions issue was addressed with additional restrictions
CVE-2025-46278The issue was addressed with improved handling of caches
CVE-2025-43538A logging issue was addressed with improved data redaction
CVE-2025-43539The issue was addressed with improved bounds checks
CVE-2025-46279A permissions issue was addressed with additional restrictions
CVE-2025-43542This issue was addressed with improved state management
CVE-2025-43535The issue was addressed with improved memory handling
CVE-2025-43523A permissions issue was addressed with additional restrictions
CVE-2025-43519A permissions issue was addressed with additional restrictions
CVE-2025-43512A logic issue was addressed with improved checks
CVE-2025-43416A logic issue was addressed with improved restrictions
CVE-2025-46301The issue was addressed with improved bounds checks
CVE-2025-43482The issue was addressed with improved input validation
CVE-2025-46287An attacker may be able to spoof their FaceTime caller ID
CVE-2025-43532A memory corruption issue was addressed with improved bounds checking
CVE-2025-43533The issue was addressed with improved bounds checks
CVE-2025-43509This issue was addressed with improved data protection
CVE-2025-46290A remote attacker may be able to cause a denial-of-service
CVE-2025-46300The issue was addressed with improved bounds checks
CVE-2025-43513A permissions issue was addressed by removing the vulnerable code
CVE-2025-46285An integer overflow was addressed by adopting 64-bit timestamps
CVE-2025-46303The issue was addressed with improved bounds checks
CVE-2025-43530This issue was addressed with improved checks
CVE-2025-46289A logic issue was addressed with improved file handling
CVE-2025-43526This issue was addressed with improved URL validation
CVE-2025-43527A permissions issue was addressed with additional restrictions
CVE-2025-46288A permissions issue was addressed with additional restrictions
CVE-2025-43531A race condition was addressed with improved state handling
CVE-2025-46302The issue was addressed with improved bounds checks
CVE-2025-43536A use-after-free issue was addressed with improved memory management
CVE-2025-46276An information disclosure issue was addressed with improved privacy controls
CVE-2025-46299A memory initialization issue was addressed with improved memory handling
CVE-2025-43428A configuration issue was addressed with additional restrictions
CVE-2025-46305The issue was addressed with improved bounds checks
CVE-2025-43516A session management issue was addressed with improved checks

Source and provenance

Original title: About the security content of macOS Tahoe 26.2 - Apple Support. Captured 29 Sept 2026, 20:25 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗