Apple Patches Everything (July 2026), (Wed, Jul 29th)

Sicherheitsmeldung mit Schweregrad noch nicht bewertet. Betroffene Kennungen: CVE-2025-43325, CVE-2026-20672, CVE-2026-23918, CVE-2026-28849, CVE-2026-28896. Technische Details im Tab „Originaltext“; empfohlene Schritte in der Checkliste.

Originaltext der Quelle (nicht übersetzt) – die deutsche Zusammenfassung findest du im Tab „Kurzfassung".

I am a bit late with this summary, but this week Apple released updates to all its operating systems and Safari. The Safari update, as usual, targets macOS prior to macOS 26. macOS updates covered the two older versions (14 and 15), while other operating system patches only covered the current 26 versions.

A total of 187 vulnerabilities are addressed in this update. Many cover multiple operating systems. Apple did not label any of the vulnerabilities as already being exploited.

Three vulnerabilities that caught my interest are CVE-2026-28849, CVE-2026-28900, and CVE-2026-28914. These issues appear to be the vulnerability described in https://mysk.blog/2026/07/23/macos-overwrite-app-executables/ earlier this week. But I have not seen a confirmation that this is the same issue.

Other than that, the vulnerabilities are "more of the usual". A lot of DoS and privilege-escalation/sandbox-escape issues, and the usual WebKit issues. In June, Apple announced that it may publish occasional "security update only" releases. This release does not contain any significant new functionality but is also meant as a "prep release" for iOS/macOS 27, as it makes some adjustments to Spotlight to get the system ready for the new major OS releases coming in the fall.

iOS 26.6 and iPadOS 26.6 macOS Tahoe 26.6 macOS Sequoia 15.7.8 macOS Sonoma 14.8.8 tvOS 26.6 watchOS 26.6 visionOS 26.6 Safari 26.6 CVE-2025-43325: An app may be able to access sensitive user data. Affects Icons     x x         CVE-2026-20672: An app may be able to access sensitive user …

Vollständiger Originalartikel ↗

• Betroffenheit im eigenen Stack prüfen (CVE-2025-43325, CVE-2026-20672, CVE-2026-23918, CVE-2026-28849, CVE-2026-28896): Versionen/Komponenten abgleichen.
• Originalquelle / Hersteller-Advisory lesen: https://isc.sans.edu/diary/rss/33196
• Verfügbaren Patch oder Workaround einspielen und dokumentieren.