CVE-2026-64731

Analyzed Analyzed - Analysis Complete

macOS Sequoia Sandbox Escape via Path Handling

Publication date: 2026-07-27

Last updated on: 2026-07-28

Assigner: Apple Inc.

Description

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-27

Last Modified

2026-07-28

Generated

2026-08-17

AI Q&A

2026-07-28

EPSS Evaluated

2026-08-15

NVD

CVE-2026-64731

EUVD

EUVD-2026-49564

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	From 15.0 (inc) to 15.7.8 (exc)
apple	macos	From 26.0 (inc) to 26.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability is a path handling issue caused by insufficient validation. A malicious application could exploit this to escape its sandbox restrictions, potentially gaining unauthorized access to system resources or other apps.

Detection Guidance

This vulnerability is specific to macOS Sequoia and Tahoe and involves sandbox escape. Detection requires checking system version and sandbox integrity. Use 'sw_vers' to check macOS version and 'sandbox-exec -p /usr/bin/true' to test sandbox functionality.

Impact Analysis

If exploited, this vulnerability could allow an attacker to break out of a sandboxed app's restricted environment. This might lead to unauthorized access to sensitive data, system files, or other apps on your device.

Compliance Impact

The vulnerability allows a malicious app to break out of its sandbox, which could lead to unauthorized access to sensitive data. This may impact compliance with GDPR by potentially exposing personal data without consent and HIPAA by risking protected health information breaches.

Mitigation Strategies

Update to the latest version of macOS Sequoia (15.7.8) or macOS Tahoe (26.6) to address the path handling issue and sandbox escape vulnerability.

Hi! I’m here to help you understand CVE-2026-64731. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70