AppYour homeOperatorJournalAlerts
Request an introduction
Advisory

macOS Sequoia before 15.8.1

macOS Sequoia 15.8.1 came out on 28 Sep 2026 with one security fix, for a flaw being used in attacks. Any older macOS Sequoia is missing it, and the further back it is, the more it's missing.

macOS Sequoia before 15.8.1Critical
Affected
macOS Sequoia before 15.8.1
Fix
macOS Sequoia 15.8.1, released 28 Sep 2026
In this release
One security fix: CVE-2026-86950, a memory flaw in Apple's graphics code that lets a booby-trapped file run code
Used in attacks
  • CVE-2026-86950, a memory flaw in Apple's graphics code that lets a booby-trapped file run code
  • CVE-2026-65400, a flaw in macOS Screen Sharing that lets an attacker on the network in without a password
What's missing.Counted from Apple’s security notes, the same way the HARD app counts it, checked 23 Oct 2026.

Of CVE-2026-86950, Apple says: “Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.” Apple lists the same flaw in macOS, and fixed it there on the same day.

Being used in attacks

  1. Used in attacks
    CVE-2026-86950

    A memory flaw in Apple's graphics code that lets a booby-trapped file run code.

    What it is, and the sources
  2. Used in attacks
    CVE-2026-65400

    A flaw in macOS Screen Sharing that lets an attacker on the network in without a password.

    What it is, and the sources

What to do

  1. Install macOS Sequoia 15.8.1.System Settings → General → Software Update, then restart. Save your work first: the restart closes everything.
  2. Check it took.Apple menu → About This Mac should say macOS Sequoia 15.8.1 or later.

Release by release

ReleaseFixesBehind
macOS Sequoia 15.8.1 · CVE-2026-86950 1 1
macOS Sequoia 15.8 173 174
macOS Sequoia 15.7.9 · CVE-2026-65400 1 175
macOS Sequoia 15.7.8 148 322
Newest first.Every macOS Sequoia security release since Jun 2026, with the number of flaws Apple lists. “Behind” is what you’re missing if your Mac is older than that release. Apple doesn’t rate the severity of the flaws it fixes.

Sources

  1. About the security content of macOS Sequoia 15.8.1One security fix: CVE-2026-86950.support.apple.com ·
  2. About the security content of macOS Sequoia 15.8173 security fixes.support.apple.com ·
  3. About the security content of macOS Sequoia 15.7.9One security fix: CVE-2026-65400.support.apple.com ·
  4. Apple security releasesEvery Apple security release, newest first.support.apple.com
  5. Known Exploited Vulnerabilities catalog: CVE-2026-86950CVE-2026-86950, added 29 Sep 2026.cisa.gov ·
  6. Known Exploited Vulnerabilities catalog: CVE-2026-65400CVE-2026-65400, added 18 Aug 2026.cisa.gov ·
Every advisoryLook up any app, company or CVEThe HARD Mac app links its warnings here.