CVE-2026-28933: Use After Free

Published Sep 14, 2026

Updated

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

Affected Software

3 affected components

Apple macOS Sequoia=15.7.8

Apple macOS Sonoma=14.8.8

Apple macOS Tahoe=26.6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade macOS Sequoia to a version that resolves this vulnerability.
Fixed in 15.7.8
Upgrade
Upgrade macOS Sonoma to a version that resolves this vulnerability.
Fixed in 14.8.8
Upgrade
Upgrade macOS Tahoe to a version that resolves this vulnerability.
Fixed in 26.6

Event History

Sep 14, 2026

CVE Published

via MITRE·08:49 PM

Data Sourced

via MITRE·08:49 PM

DescriptionWeakness

Data Sourced

via NVD·09:17 PM

Description

Frequently Asked Questions

What level of access does an attacker need to trigger this issue?

An attacker would need to be able to run an app on the affected Mac. The reported impact is that an app may cause an unexpected system termination.

Which macOS releases contain the fix?

The issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.