Full Disclosure mailing list archives

---

From: Apple Product Security via Fulldisclosure <fulldisclosure () seclists org>
Date: Mon, 28 Sep 2026 15:13:29 -0700

---

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1

macOS Tahoe 26.7.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/149228.

Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.

CoreGraphics
Available for: macOS Tahoe
Impact: Processing a maliciously crafted file may lead to arbitrary code
execution. Apple is aware of a report that this issue may have been
exploited in an extremely sophisticated attack against specific targeted
individuals on versions of iOS before iOS 27.
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-86950: Meta Product Security

macOS Tahoe 26.7.1 may be obtained from the Mac App Store or
Apple's Software Downloads web site:
https://support.apple.com/downloads/

All information is also posted on the Apple Security Releases
web site: https://support.apple.com/100100.

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----
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=yI+o
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/

---

Current thread:

• APPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1 Apple Product Security via Fulldisclosure (Sep 28)