Vulnerability Details CVE-2026-64731
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 5.5%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2026-64731
-
cpe:2.3:o:apple:macos:15.0
-
cpe:2.3:o:apple:macos:15.1
-
cpe:2.3:o:apple:macos:15.1.1
-
cpe:2.3:o:apple:macos:15.2
-
cpe:2.3:o:apple:macos:15.3
-
cpe:2.3:o:apple:macos:15.3.1
-
cpe:2.3:o:apple:macos:15.3.2
-
cpe:2.3:o:apple:macos:15.4
-
cpe:2.3:o:apple:macos:15.4.1
-
cpe:2.3:o:apple:macos:15.5
-
cpe:2.3:o:apple:macos:15.6
-
cpe:2.3:o:apple:macos:15.6.1
-
cpe:2.3:o:apple:macos:15.7
-
cpe:2.3:o:apple:macos:15.7.1
-
cpe:2.3:o:apple:macos:15.7.2
-
cpe:2.3:o:apple:macos:15.7.3
-
cpe:2.3:o:apple:macos:15.7.4
-
cpe:2.3:o:apple:macos:15.7.5
-
cpe:2.3:o:apple:macos:15.7.7
-
cpe:2.3:o:apple:macos:26.0
-
cpe:2.3:o:apple:macos:26.0.0
-
cpe:2.3:o:apple:macos:26.1
-
cpe:2.3:o:apple:macos:26.2
-
cpe:2.3:o:apple:macos:26.3
-
cpe:2.3:o:apple:macos:26.3.1
-
cpe:2.3:o:apple:macos:26.4
-
cpe:2.3:o:apple:macos:26.5