Vulnerability in Apple macOS

[ Description ]Official description

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A maliciously crafted ZIP archive may bypass Gatekeeper checks.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• NCSC-NL27 Oct 2026NCSC-2026-0455

  Vulnerabilities fixed in Apple MacOS Translated from Dutch

  Probability/damage M/HCVE-2022-26704CVE-2026-20648CVE-2026-20649+296 more CVEs
• CERT-FR27 Oct 2026CERTFR-2026-AVI-1387

  Multiple vulnerabilities in Apple products Translated from French

  Multiple vulnerabilities have been discovered in Apple products. Some of them allow an attacker to cause arbitrary code execution, privilege escalation and a breach of data confidentiality. Apple reports that…

  CVE-2026-112483CVE-2026-112566CVE-2026-84539+326 more CVEs
• BSI CERT-Bund26 Oct 2026WID-SEC-2026-4165

  Apple iOS, iPadOS, macOS and Safari: Multiple vulnerabilities Translated from German

  CVE-2026-112442CVE-2026-112684CVE-2026-112563+325 more CVEs

[ References ]References

• support.apple.com/en-us/149035Release NotesVendor Advisory
• support.apple.com/en-us/149522Release NotesVendor Advisory
• support.apple.com/en-us/149523Release NotesVendor Advisory