macOS Authorization & Sandbox Break Fix (Sequoia, Sonoma)
CVE-2026-64737 Published on July 27, 2026
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.
Vulnerability Analysis
CVE-2026-64737 can be exploited with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and no impact on availability.
Weakness Type
What is an Authorization Vulnerability?
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2026-64737 has been classified to as an Authorization vulnerability or weakness.
Products Associated with CVE-2026-64737
stack.watch emails you whenever new vulnerabilities are published in Apple macOS or Apple Macos Sonoma. Just hit a watch button to start following.
Affected Versions
Apple macOS:- Before 14.8.8 is affected.
- Before 15.7.8 is affected.
- Before 26.6 is affected.