AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AppleCVE-2026-20679

Apple macOS: out-of-bounds read

Apple

CVE-2026-20679 · Published Aug 21, 2026 · updated Aug 24, 2026

Medium4.3
Fix: upgrade to 14.8.5 or later (3 fixed versions below)
Apple advisory

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination.

Affected versions

PackageAffectedFixed in
macOS
Product
< 14.8.514.8.5
< 15.7.515.7.5
< 26.426.4
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-125, CWE-416

More Apple advisories

All Apple
Low 2.4Aug 21Apple watchOS: improper access controlCVE-2026-43679fixed in 26.4Medium 5.4Aug 17Apple Safari: memory corruptionCVE-2026-65341fixed in 26.6.1 +3High 7.5Aug 17Apple iOS and iPadOS: use after freeCVE-2026-65343fixed in 26.6.1 +2High 8.8Aug 17Apple iOS and iPadOS: integer overflowCVE-2026-65346fixed in 26.6.1 +3Medium 6.5Aug 17Apple iOS and iPadOS: denial of serviceCVE-2026-65347fixed in 26.6.1 +2Medium 6.6Aug 17Apple iOS and iPadOS: out-of-bounds readCVE-2026-65349fixed in 26.6.1 +3