Apple Macos vulnerabilities

CVE-2026-43788 Medium · 6.6 CWE-190 Sep 14, 2026

Integer Overflow or Wraparound in Apple Macos

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents.

CVE-2026-43787 Medium · 5.9 CWE-693 Sep 14, 2026

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden…

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to leak sensitive user information.

CVE-2026-43786 High · 7.8 CWE-280 Sep 14, 2026

This issue was addressed with additional entitlement checks. This issue is fixed in…

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

CVE-2026-43785 Medium · 5.5 CWE-863 Sep 14, 2026

Incorrect Authorization in Apple Ipados

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to modify a file it only had permission to read.

CVE-2026-43783 High · 7.8 CWE-362 Sep 14, 2026

Race Condition in Apple Macos

A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges.

CVE-2026-43762 Medium · 5.5 CWE-284 Sep 14, 2026

Improper Access Control in Apple Ipados

The issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6. An app may be able to access user-sensitive data.

CVE-2026-43761 Medium · 6.5 CWE-787 Sep 14, 2026

Out-of-bounds Write in Apple Macos

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a malicious disk image may cause unexpected system termination.

CVE-2026-43741 Medium · 5.5 CWE-284 Sep 14, 2026

Improper Access Control in Apple Macos

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access protected user data.

CVE-2026-43737 Medium · 5.5 CWE-863 Sep 14, 2026

Incorrect Authorization in Apple Ipados

An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, watchOS 27. An app may be able to access motion data from headphones without user consent.

CVE-2026-43719 Medium · 6.5 CWE-416 Sep 14, 2026

Use After Free in Apple Macos

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a maliciously crafted SMB network share may lead to system termination.

CVE-2026-43702 High · 7.8 CWE-119 Sep 14, 2026

Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Ipados

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.

CVE-2026-43697 High · 7.1 CWE-125 Sep 14, 2026

Out-of-bounds Read in Apple Macos

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted 3D file may lead to an out-of-bounds read.

CVE-2026-43696 Medium · 5.3 CWE-862 Sep 14, 2026

Missing Authorization in Apple Macos

An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to capture Touch Bar content without authorization.

CVE-2026-43695 Medium · 5.5 CWE-863 Sep 14, 2026

Incorrect Authorization in Apple Ipados

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.

CVE-2026-43692 High · 8.8 CWE-20 Sep 14, 2026

Improper Input Validation in Apple Macos

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote user may cause an unexpected app termination or arbitrary code execution.

CVE-2026-43691 High · 7.8 CWE-22 Sep 14, 2026

Path Traversal in Apple Macos

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

CVE-2026-43690 Medium · 4.7 CWE-362 Sep 14, 2026

Race Condition in Apple Macos

A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A local user may be able to read kernel memory.

CVE-2026-43689 High · 7.8 CWE-862 Sep 14, 2026

Missing Authorization in Apple Ipados

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges.

CVE-2026-43688 High · 7.8 CWE-1021 Sep 14, 2026

Clickjacking in Apple Ipados

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. Processing a maliciously crafted file may lead to unexpected app termination.

CVE-2026-43687 Medium · 6.5 CWE-200 Sep 14, 2026

Exposure of Sensitive Information in Apple Ipados

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory.

CVE-2026-43686 High · 8.8 CWE-416 Sep 14, 2026

Use After Free in Apple Ipados

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may lead to kernel memory corruption.

CVE-2026-43684 High · 7.8 CWE-416 Sep 14, 2026

Use After Free in Apple Ipados

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2026-43683 High · 7.1 CWE-125 Sep 14, 2026

Out-of-bounds Read in Apple Macos

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected process termination or disclose process memory.

CVE-2026-43677 Medium · 6.5 CWE-787 Sep 14, 2026

Out-of-bounds Write in Apple Macos

An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may lead to unexpected app termination.

CVE-2026-43664 Medium · 5.5 CWE-200 Sep 14, 2026

Exposure of Sensitive Information in Apple Ipados

This issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, watchOS 27. An app may be able to access sensitive user data.