[UPDATE] [hoch] Apple macOS Sonoma, macOS Sequoia und macOS Tahoe: Mehrere Schwachstellen

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-05-13 07:20 UTC
Importiert: 2026-05-15 08:54 UTC
CVSS: 8.8
Quelle-ID: cert_bund
uid_hash: 09c68a104d61699323f13cbfb5f39be63f3ea93cabd7a57f397f461c828a67c8

CERT-Bund (BSI)

Inhalt

Ein Angreifer kann mehrere Schwachstellen in Apple macOS Sonoma, macOS Sequoia und macOS Tahoe ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um beliebigen Programmcode auszuführen, und um Sicherheitsvorkehrungen zu umgehen.

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	Veroeffentlicht (CVE.org)
CVE-2025-43524	HIGH	8.8	HIGH	8.8	2026-05-12
CVE-2026-1837	HIGH	8.8	HIGH	8.8	2026-02-11
CVE-2026-28819	HIGH	8.8	MEDIUM	5.4	2026-05-11
CVE-2026-28840	HIGH	8.8	HIGH	7.8	2026-05-11
CVE-2026-28846	HIGH	8.8	HIGH	7.5	2026-05-11
CVE-2026-28847	HIGH	8.8	HIGH	8.8	2026-05-11
CVE-2026-28848	HIGH	8.8	HIGH	7.5	2026-05-11
CVE-2026-28878	HIGH	8.8	MEDIUM	6.5	2026-03-25
CVE-2026-28883	HIGH	8.8	HIGH	8.8	2026-05-11
CVE-2026-28897	HIGH	8.8	MEDIUM	6.2	2026-05-11
CVE-2026-28901	HIGH	8.8	HIGH	8.8	2026-05-11
CVE-2026-28902	HIGH	8.8	HIGH	8.8	2026-05-11
CVE-2026-28903	HIGH	8.8	HIGH	8.8	2026-05-11
CVE-2026-28904	HIGH	8.8	HIGH	8.8	2026-05-11
CVE-2026-28905	HIGH	8.8	HIGH	8.8	2026-05-11
CVE-2026-28906	HIGH	8.8	HIGH	7.5	2026-05-11
CVE-2026-28907	HIGH	8.8	HIGH	8.1	2026-05-11
CVE-2026-28908	HIGH	8.8	HIGH	7.5	2026-05-11
CVE-2026-28913	HIGH	8.8	HIGH	7.5	2026-05-11
CVE-2026-28914	HIGH	8.8	MEDIUM	5.5	2026-05-11
CVE-2026-28915	HIGH	8.8	HIGH	7.8	2026-05-11
CVE-2026-28917	HIGH	8.8	MEDIUM	4.3	2026-05-11
CVE-2026-28918	HIGH	8.8	MEDIUM	6.5	2026-05-11
CVE-2026-28919	HIGH	8.8	HIGH	7.8	2026-05-11
CVE-2026-28920	HIGH	8.8	MEDIUM	6.5	2026-05-11
CVE-2026-28922	HIGH	8.8
CVE-2026-28923	HIGH	8.8
CVE-2026-28924	HIGH	8.8
CVE-2026-28925	HIGH	8.8
CVE-2026-28929	HIGH	8.8	HIGH	7.5	2026-05-11
CVE-2026-28930	HIGH	8.8	HIGH	7.5	2026-05-11
CVE-2026-28936	HIGH	8.8	HIGH	7.5	2026-05-11
CVE-2026-28940	HIGH	8.8	HIGH	7.5	2026-05-11
CVE-2026-28941	HIGH	8.8	HIGH	7.1	2026-05-11
CVE-2026-28942	HIGH	8.8	HIGH	8.8	2026-05-11
CVE-2026-28943	HIGH	8.8
CVE-2026-28944	HIGH	8.8	HIGH	7.5	2026-05-11
CVE-2026-28946	HIGH	8.8	HIGH	8.8	2026-05-11
CVE-2026-28947	HIGH	8.8	HIGH	8.8	2026-05-11
CVE-2026-28951	HIGH	8.8
CVE-2026-28952	HIGH	8.8
CVE-2026-28953	HIGH	8.8	HIGH	8.8	2026-05-11
CVE-2026-28954	HIGH	8.8
CVE-2026-28955	HIGH	8.8	HIGH	8.8	2026-05-11
CVE-2026-28956	HIGH	8.8
CVE-2026-28958	HIGH	8.8	MEDIUM	5.5	2026-05-11
CVE-2026-28959	HIGH	8.8
CVE-2026-28961	HIGH	8.8	MEDIUM	4.6	2026-05-11
CVE-2026-28962	HIGH	8.8	HIGH	7.5	2026-05-11
CVE-2026-28969	HIGH	8.8	HIGH	7.5	2026-05-11
CVE-2026-28971	HIGH	8.8	MEDIUM	4.3	2026-05-11
CVE-2026-28972	HIGH	8.8
CVE-2026-28974	HIGH	8.8
CVE-2026-28976	HIGH	8.8
CVE-2026-28977	HIGH	8.8
CVE-2026-28978	HIGH	8.8
CVE-2026-28983	HIGH	8.8	HIGH	7.5	2026-05-11
CVE-2026-28985	HIGH	8.8
CVE-2026-28986	HIGH	8.8
CVE-2026-28987	HIGH	8.8
CVE-2026-28988	HIGH	8.8
CVE-2026-28990	HIGH	8.8	HIGH	7.5	2026-05-11
CVE-2026-28991	HIGH	8.8
CVE-2026-28992	HIGH	8.8
CVE-2026-28993	HIGH	8.8
CVE-2026-28994	HIGH	8.8
CVE-2026-28995	HIGH	8.8
CVE-2026-28996	HIGH	8.8	MEDIUM	5.5	2026-05-11
CVE-2026-39869	HIGH	8.8
CVE-2026-39870	HIGH	8.8
CVE-2026-39871	HIGH	8.8
CVE-2026-43652	HIGH	8.8
CVE-2026-43653	HIGH	8.8
CVE-2026-43654	HIGH	8.8
CVE-2026-43655	HIGH	8.8
CVE-2026-43656	HIGH	8.8
CVE-2026-43658	HIGH	8.8	HIGH	8.8	2026-05-11
CVE-2026-43659	HIGH	8.8
CVE-2026-43660	HIGH	8.8	HIGH	7.5	2026-05-11
CVE-2026-43661	HIGH	8.8	HIGH	7.5	2026-05-11
CVE-2026-43666	HIGH	8.8
CVE-2026-43668	HIGH	8.8

Externe Referenzen

Bezeichnung	Typ	CVE	Quelle
Apple Security Advisory 127115 vom 2026-05-11	EXTERNAL	-	wid_csaf
Apple Security Advisory 127116 vom 2026-05-11	EXTERNAL	-	wid_csaf
Apple Security Advisory 127117 vom 2026-05-11	EXTERNAL	-	wid_csaf

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
CERT-Bund (BSI)	cert_bund	government_cert		-	de	https://wid.cert-bund.de/content/public/securityAdvisory/rss

Zurueck zur Eintrags-Liste