CVE Intelligence

Apple Macos vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Apple Macos: 1020 record(s), with affected versions and fixes.
cpe:2.3:o:apple:macos

CVE-2026-84631 High · 7.8 CWE-280 Sep 14, 2026
This issue was addressed with additional entitlement checks. This issue is fixed in…
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to gain root privileges.
CVE-2026-84630 Medium · 4.7 CWE-362 Sep 14, 2026
Race Condition in Apple Ipados
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
CVE-2026-84628 Medium · 5.5 CWE-863 Sep 14, 2026
Incorrect Authorization in Apple Ipados
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to access the System Keychain.
CVE-2026-84626 Low · 3.3 CWE-200 Sep 14, 2026
Exposure of Sensitive Information in Apple Ipados
An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user has installed.
CVE-2026-84625 Critical · 9.1 CWE-200 Sep 14, 2026
Exposure of Sensitive Information in Apple Ipados
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to fingerprint the user.
CVE-2026-84624 Medium · 5.5 CWE-22 Sep 14, 2026
Path Traversal in Apple Ipados
A permissions issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. A sandboxed app may be able to access restricted files.
CVE-2026-84622 Medium · 6.2 CWE-908 Sep 14, 2026
Use of Uninitialized Resource in Apple Ipados
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app with root privileges may be able to read uninitialized kernel memory.
CVE-2026-84621 Medium · 5.5 CWE-285 Sep 14, 2026
Improper Authorization in Apple Ipados
An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.
CVE-2026-84620 High · 7.3 CWE-190 Sep 14, 2026
Integer Overflow or Wraparound in Apple Ipados
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption.
CVE-2026-84619 Medium · 6.1 CWE-787 Sep 14, 2026
Out-of-bounds Write in Apple Macos
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2026-84618 Medium · 5.5 CWE-863 Sep 14, 2026
Incorrect Authorization in Apple Macos
A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.
CVE-2026-84617 Medium · 5.5 CWE-863 Sep 14, 2026
Incorrect Authorization in Apple Ipados
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27. An app may be able to access sensitive user data.
CVE-2026-84616 Medium · 5.5 CWE-441 Sep 14, 2026
A type confusion issue was addressed with improved memory handling. This issue is fixed…
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
CVE-2026-84612 Medium · 5.5 CWE-863 Sep 14, 2026
Incorrect Authorization in Apple Ipados
An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to read persistent device identifiers.
CVE-2026-84611 High · 7.3 CWE-787 Sep 14, 2026
Out-of-bounds Write in Apple Ipados
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption.
CVE-2026-84609 Critical · 9.8 CWE-120 Sep 14, 2026
Classic Buffer Overflow in Apple Ipados
A permissions issue was addressed with improved path validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to modify protected system files.
CVE-2026-84607 High · 7.8 CWE-362 Sep 14, 2026
Race Condition in Apple Ipados
A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to execute arbitrary code with kernel privileges.
CVE-2026-84606 High · 7.5 CWE-287 Sep 14, 2026
Improper Authentication in Apple Ipados
A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to identify a user across reinstalls.
CVE-2026-84602 Medium · 5.5 CWE-843 Sep 14, 2026
Type Confusion in Apple Ipados
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
CVE-2026-84601 Medium · 5.5 CWE-863 Sep 14, 2026
Incorrect Authorization in Apple Macos
A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Apple Intelligence security prompts.
CVE-2026-84600 Medium · 5.4 CWE-285 Sep 14, 2026
Improper Authorization in Apple Ipados
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A malicious shortcut may be able to send messages without user confirmation.
CVE-2026-84597 Medium · 6.5 CWE-125 Sep 14, 2026
Out-of-bounds Read in Apple Ipados
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory.
CVE-2026-84596 Medium · 6.5 CWE-125 Sep 14, 2026
Out-of-bounds Read in Apple Ipados
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory.
CVE-2026-84589 Medium · 5.5 CWE-863 Sep 14, 2026
Incorrect Authorization in Apple Macos
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to modify Privacy preferences.
CVE-2026-84588 Medium · 6.5 CWE-787 Sep 14, 2026
Out-of-bounds Write in Apple Macos
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.