Apple vulnerabilities
Published CVEs affecting Apple products: 1165 record(s), with severity, exploitation and fixes.
Macos 1020Iphone Os 667Ipados 646iOS and iPadOS 644Visionos 431Watchos 404Tvos 372Safari 172Mac Os X 57iOS 18Xcode 10Icloud 6Itunes 5Container 4Swiftnio Http/2 3iOS-1 2macOS Monterey 2Containerization 2Swift-crypto 2Private Cloud Compute Server Software 1Swiftnio Ssh 1Swiftnio 1Servicetalk 1Swiftnio Ssl 1Mac Os X Server 1macOS Tahoe 1macOS Sonoma 1macOS Sequoia 1watchOS-1 1iTunes for Windows 1Pages 1Keynote 1iCloud for Windows 1Compressor 1Private Cloud Compute 1Safari (v and ) 1Os X Server 1
CVE-2026-64736
High · 7.1
CWE-125 Sep 14, 2026
Out-of-bounds Read in Apple Ipados
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-64717
Medium · 6.3
CWE-362 Sep 14, 2026
Race Condition in Apple Ipados
A race condition was addressed with improved state handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-64714
Medium · 5.5
CWE-119 Sep 14, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Ipados
A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted image may lead to a denial-of-service.
CVE-2026-64712
High · 7.8
CWE-284 Sep 14, 2026
Improper Access Control in Apple Macos
This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.
CVE-2026-64701
High · 7.8
CWE-280 Sep 14, 2026
A permissions issue was addressed with additional restrictions. This issue is fixed in…
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.
CVE-2026-43815
High · 8.8
CWE-787 Sep 14, 2026
Out-of-bounds Write in Apple Macos
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious afpfs server may lead to kernel memory corruption.
CVE-2026-43808
Medium · 5.5
CWE-416 Sep 14, 2026
Use After Free in Apple Ipados
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43791
Medium · 6.5
CWE-22 Sep 14, 2026
Path Traversal in Apple Macos
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to read arbitrary files.
CVE-2026-43790
Critical · 9.1
CWE-787 Sep 14, 2026
Out-of-bounds Write in Apple Macos
The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-43789
High · 7.5
CWE-862 Sep 14, 2026
Missing Authorization in Apple Macos
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data.
CVE-2026-43788
Medium · 6.6
CWE-190 Sep 14, 2026
Integer Overflow or Wraparound in Apple Macos
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents.
CVE-2026-43787
Medium · 5.9
CWE-693 Sep 14, 2026
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden…
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to leak sensitive user information.
CVE-2026-43786
High · 7.8
CWE-280 Sep 14, 2026
This issue was addressed with additional entitlement checks. This issue is fixed in…
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.
CVE-2026-43785
Medium · 5.5
CWE-863 Sep 14, 2026
Incorrect Authorization in Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to modify a file it only had permission to read.
CVE-2026-43783
High · 7.8
CWE-362 Sep 14, 2026
Race Condition in Apple Macos
A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges.
CVE-2026-43762
Medium · 5.5
CWE-284 Sep 14, 2026
Improper Access Control in Apple Ipados
The issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6. An app may be able to access user-sensitive data.
CVE-2026-43761
Medium · 6.5
CWE-787 Sep 14, 2026
Out-of-bounds Write in Apple Macos
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a malicious disk image may cause unexpected system termination.
CVE-2026-43741
Medium · 5.5
CWE-284 Sep 14, 2026
Improper Access Control in Apple Macos
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access protected user data.
CVE-2026-43737
Medium · 5.5
CWE-863 Sep 14, 2026
Incorrect Authorization in Apple Ipados
An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, watchOS 27. An app may be able to access motion data from headphones without user consent.
CVE-2026-43719
Medium · 6.5
CWE-416 Sep 14, 2026
Use After Free in Apple Macos
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a maliciously crafted SMB network share may lead to system termination.
CVE-2026-43702
High · 7.8
CWE-119 Sep 14, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.
CVE-2026-43697
High · 7.1
CWE-125 Sep 14, 2026
Out-of-bounds Read in Apple Macos
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted 3D file may lead to an out-of-bounds read.
CVE-2026-43696
Medium · 5.3
CWE-862 Sep 14, 2026
Missing Authorization in Apple Macos
An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to capture Touch Bar content without authorization.
CVE-2026-43695
Medium · 5.5
CWE-863 Sep 14, 2026
Incorrect Authorization in Apple Ipados
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.
CVE-2026-43692
High · 8.8
CWE-20 Sep 14, 2026
Improper Input Validation in Apple Macos
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote user may cause an unexpected app termination or arbitrary code execution.