Apple Macos vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Apple Macos: 1087 record(s), with affected versions and fixes.cpe:2.3:o:apple:macos
CVE-2026-43712
Medium · 6.5
CWE-125 Jun 29, 2026
Out-of-bounds Read in Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-43709
Medium · 6.5
CWE-416 Jun 29, 2026
Use After Free in Apple Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-43708
Medium · 4.3
CWE-20 Jun 29, 2026
Improper Input Validation in Apple Safari
The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may exfiltrate data cross-origin.
CVE-2026-43707
Medium · 6.5
CWE-119 Jun 29, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Safari
A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-43706
Medium · 6.5
CWE-415 Jun 29, 2026
Double Free in Apple Ipados
A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-43705
High · 8.8
CWE-843 Jun 29, 2026
Type Confusion in Apple Safari
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption.
CVE-2026-43704
Medium · 5.3
CWE-416 Jun 29, 2026
Use After Free in Apple Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious web extension may be able to cause an unexpected process crash.
CVE-2026-43703
Medium · 6.5
CWE-125 Jun 29, 2026
Out-of-bounds Read in Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-43701
High · 7.1
CWE-284 Jun 29, 2026
Improper Access Control in Apple Safari
The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox.
CVE-2026-43700
Medium · 6.5
CWE-346 Jun 29, 2026
A cross-origin issue was addressed with improved tracking of security origins. This…
A cross-origin issue was addressed with improved tracking of security origins. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may disclose sensitive user information.
CVE-2026-43699
Medium · 6.5
CWE-416 Jun 29, 2026
Use After Free in Apple Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-43676
Medium · 6.5
CWE-125 Jun 29, 2026
Out-of-bounds Read in Apple Safari
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-43663
Medium · 6.5
CWE-119 Jun 29, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-39872
Medium · 6.5
CWE-119 Jun 29, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-39868
Critical · 9.1
CWE-20 Jun 29, 2026
Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS Improper Input Validation Vulnerability
This issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-28979
Medium · 6.5
CWE-125 Jun 29, 2026
Out-of-bounds Read in Apple Safari
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-46315
High · 7.5
CWE-284 Jun 11, 2026
Improper Access Control in Apple Macos
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access protected user data.
CVE-2025-46313
Medium · 5.5
CWE-532 Jun 11, 2026
Insertion of Sensitive Information into Log File in Apple Macos
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVE-2025-46308
Medium · 5.3
CWE-284 Jun 11, 2026
Improper Access Control in Apple Ipados
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to leak sensitive user information.
CVE-2025-46293
Medium · 5.5
CWE-59 Jun 11, 2026
Link Following in Apple Macos
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.
CVE-2025-43339
Medium · 5.5
CWE-284 Jun 11, 2026
Improper Access Control in Apple Macos
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to access sensitive user data.
CVE-2025-43278
Medium · 5.5
CWE-61 Jun 11, 2026
This issue was addressed with improved handling of symlinks. This issue is fixed in…
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.
CVE-2025-31272
High · 7.8
CWE-269 Jun 11, 2026
Improper Privilege Management in Apple Macos
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges.
CVE-2025-30459
Medium · 5.5
CWE-359 Jun 11, 2026
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in…
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data.
CVE-2025-30431
Medium · 5.5
CWE-693 Jun 11, 2026
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4…
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access private information.