{"id":"CVE-2026-64710","state":"PUBLISHED","title":"A privacy issue was addressed by removing sensitive data. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to leak sensitive u","description":"A privacy issue was addressed by removing sensitive data. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to leak sensitive user information.","publishedAt":"2026-07-27T20:13:37.914Z","updatedAt":"2026-07-28T14:09:14.924Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","source":"CISA-ADP"},"assigner":"apple","products":["Apple macOS"],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"14.8.8","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15.7.8","versionType":"custom"},{"version":"0","status":"affected","lessThan":"26.6","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/128067","https://support.apple.com/en-us/128071","https://support.apple.com/en-us/128072"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T20:12:41.951Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/64xxx/CVE-2026-64710.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-64710","state":"PUBLISHED","datePublished":"2026-07-27T20:13:37.914Z","dateUpdated":"2026-07-28T14:09:14.924Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2026-07-20T18:09:24.049Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A privacy issue was addressed by removing sensitive data. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to leak sensitive user information."}],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"14.8.8","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15.7.8","versionType":"custom"},{"version":"0","status":"affected","lessThan":"26.6","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/128067"},{"url":"https://support.apple.com/en-us/128071"},{"url":"https://support.apple.com/en-us/128072"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"An app may be able to leak sensitive user information"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-07-27T20:13:37.914Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2026-07-28T14:09:09.639362Z","id":"CVE-2026-64710","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","type":"CWE","lang":"en","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-07-28T14:09:14.924Z"}}]}}}