CVE Intelligence

Apple Macos vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Apple Macos: 1051 record(s), with affected versions and fixes.
cpe:2.3:o:apple:macos

CVE-2026-84491 Medium · 5.5 CWE-284 Sep 14, 2026
Improper Access Control in Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.
CVE-2026-84489 Medium · 5.5 CWE-120 Sep 14, 2026
Classic Buffer Overflow in Apple Ipados
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to cause a denial of service.
CVE-2026-84487 Medium · 6.5 CWE-190 Sep 14, 2026
Integer Overflow or Wraparound in Apple Ipados
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may result in disclosure of process memory.
CVE-2026-65415 High · 8.1 CWE-362 Sep 14, 2026
Race Condition in Apple Ipados
A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination or read kernel memory.
CVE-2026-65414 Critical · 9.8 CWE-787 Sep 14, 2026
Out-of-bounds Write in Apple Ipados
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A remote attacker may be able to cause unexpected app termination or arbitrary code execution.
CVE-2026-65413 Medium · 5.5 CWE-190 Sep 14, 2026
Integer Overflow or Wraparound in Apple Macos
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause a denial of service.
CVE-2026-65412 Medium · 6.5 CWE-476 Sep 14, 2026
NULL Pointer Dereference in Apple Ipados
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. Processing web content may lead to a denial-of-service.
CVE-2026-65410 High · 7.5 CWE-248 Sep 14, 2026
The issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS…
The issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
CVE-2026-65409 Medium · 5.5 CWE-843 Sep 14, 2026
Type Confusion in Apple Ipados
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause a denial of service.
CVE-2026-65408 Medium · 5.5 CWE-190 Sep 14, 2026
Integer Overflow or Wraparound in Apple Ipados
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
CVE-2026-65407 Medium · 5.5 CWE-416 Sep 14, 2026
Use After Free in Apple Ipados
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, tvOS 27, visionOS 26.6, visionOS 27, watchOS 26.6, watchOS 27. An app may be able to cause unexpected system termination.
CVE-2026-65406 Medium · 5.5 CWE-693 Sep 14, 2026
A logic issue was addressed with improved validation. This issue is fixed in iOS 26.7…
A logic issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to access sensitive user data.
CVE-2026-65405 Medium · 5.5 CWE-457 Sep 14, 2026
Use of Uninitialized Variable in Apple Ipados
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to determine kernel memory layout.
CVE-2026-65404 Medium · 5.5 CWE-863 Sep 14, 2026
Incorrect Authorization in Apple Ipados
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A malicious application may be able to bypass Privacy preferences.
CVE-2026-65403 Medium · 5.5 CWE-284 Sep 14, 2026
Improper Access Control in Apple Ipados
This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An app may be able to access sensitive user data.
CVE-2026-65402 Medium · 5.5 CWE-416 Sep 14, 2026
Use After Free in Apple Ipados
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
CVE-2026-65401 Medium · 5.5 CWE-362 Sep 14, 2026
Race Condition in Apple Macos
A race condition was addressed with improved state handling. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
CVE-2026-65399 Medium · 4.4 CWE-290 Sep 14, 2026
Authentication Bypass by Spoofing in Apple Ipados
A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An archive may be able to bypass Gatekeeper.
CVE-2026-65398 High · 7.8 CWE-120 Sep 14, 2026
Classic Buffer Overflow in Apple Ipados
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-65395 Medium · 6.5 CWE-787 Sep 14, 2026
Out-of-bounds Write in Apple Ipados
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted image may result in memory corruption.
CVE-2026-65393 Medium · 5.5 CWE-863 Sep 14, 2026
Incorrect Authorization in Apple Xcode
A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data.
CVE-2026-65391 High · 8.8 CWE-190 Sep 14, 2026
Integer Overflow or Wraparound in Apple Safari
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.
CVE-2026-65390 High · 8.8 CWE-190 Sep 14, 2026
Integer Overflow or Wraparound in Apple Safari
An integer overflow was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.
CVE-2026-65383 Medium · 4.4 CWE-284 Sep 14, 2026
Improper Access Control in Apple Macos
This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may bypass Gatekeeper checks.
CVE-2026-65382 Medium · 5.5 CWE-22 Sep 14, 2026
Path Traversal in Apple Macos
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.