Apple Macos vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Apple Macos: 1087 record(s), with affected versions and fixes.cpe:2.3:o:apple:macos
CVE-2025-43238
Medium · 6.2
CWE-190 Apr 2, 2026
Integer Overflow or Wraparound in Apple Macos
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination.
CVE-2025-43236
Low · 3.3
CWE-843 Apr 2, 2026
Type Confusion in Apple Macos
A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An attacker may be able to cause unexpected app termination.
CVE-2025-43219
High · 8.8
CWE-787 Apr 2, 2026
Out-of-bounds Write in Apple Macos
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted image may corrupt process memory.
CVE-2025-43210
Medium · 6.3
CWE-125 Apr 2, 2026
Out-of-bounds Read in Apple Ipados
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
CVE-2025-43202
High · 8.8
CWE-787 Apr 2, 2026
Out-of-bounds Write in Apple Ipados
This issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6. Processing a file may lead to memory corruption.
CVE-2024-44303
High · 7.5
CWE-284 Apr 2, 2026
Improper Access Control in Apple Macos
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1. A malicious application may be able to modify protected parts of the file system.
CVE-2024-44286
High · 7.5
CWE-288 Apr 2, 2026
Authentication Bypass Using an Alternate Path or Channel in Apple Macos
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. An attacker with physical access can input keyboard events to apps running on a locked device.
CVE-2024-44250
High · 8.2
CWE-269 Apr 2, 2026
Improper Privilege Management in Apple Macos
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
CVE-2024-44219
High · 7.5
CWE-284 Apr 2, 2026
Improper Access Control in Apple Macos
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. A malicious application with root privileges may be able to access private information.
CVE-2024-40858
High · 7.1
CWE-284 Apr 2, 2026
Improper Access Control in Apple Macos
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. An app may be able to access Contacts without user consent.
CVE-2024-40849
High · 7.5
CWE-362 Apr 2, 2026
Race Condition in Apple Macos
A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.1. An app may be able to break out of its sandbox.
CVE-2026-28894
High · 7.5
CWE-20 Mar 24, 2026
Improper Input Validation in Apple Ipados
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. A remote attacker may be able to cause a denial-of-service.
CVE-2026-28893
Low · 3.3
Mar 24, 2026
A privacy issue was addressed with improved handling of temporary files. This issue is…
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.4. A document may be written to a temporary file when using print preview.
CVE-2026-28892
Medium · 5.5
Mar 24, 2026
A permissions issue was addressed by removing the vulnerable code. This issue is fixed…
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to modify protected parts of the file system.
CVE-2026-28891
High · 8.1
CWE-362 Mar 24, 2026
Race Condition in Apple Macos
A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to break out of its sandbox.
CVE-2026-28888
Medium · 5.1
CWE-362 Mar 24, 2026
Race Condition in Apple Macos
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to gain root privileges.
CVE-2026-28886
Medium · 5.9
CWE-476 Mar 24, 2026
NULL Pointer Dereference in Apple Ipados
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. A user in a privileged network position may be able to cause a denial-of-service.
CVE-2026-28882
Medium · 4.0
Mar 24, 2026
This issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and…
This issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to enumerate a user's installed apps.
CVE-2026-28881
Medium · 5.5
CWE-285 Mar 24, 2026
Improper Authorization in Apple Macos
A privacy issue was addressed by moving sensitive data. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data.
CVE-2026-28880
Medium · 6.5
CWE-284 Mar 24, 2026
Improper Access Control in Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. An app may be able to enumerate a user's installed apps.
CVE-2026-28879
Medium · 6.5
CWE-416 Mar 24, 2026
Use After Free in Apple Ipados
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28878
Medium · 6.5
CWE-200 Mar 24, 2026
Exposure of Sensitive Information in Apple Ipados
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.7, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to enumerate a user's installed apps.
CVE-2026-28877
Medium · 5.5
CWE-200 Mar 24, 2026
Exposure of Sensitive Information in Apple Ipados
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. An app may be able to access sensitive user data.
CVE-2026-28876
High · 7.5
CWE-284 Mar 24, 2026
Improper Access Control in Apple Ipados
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. An app may be able to access sensitive user data.
CVE-2026-28871
Medium · 4.3
CWE-79 Mar 24, 2026
Cross-site Scripting (XSS) in Apple Safari
A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4. Visiting a maliciously crafted website may lead to a cross-site scripting attack.