Apple Software and Device Maker
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any Apple product.
RSS Feeds for Apple security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in Apple products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by Apple Sorted by Most Security Vulnerabilities since 2018
Recent Apple Security Advisories
| Advisory | Title | Published |
|---|---|---|
| 128071 | macOS Sequoia 15.7.8 - Apple Security Content | July 27, 2026 |
| 128073 | Safari 26.6 - Apple Security Content | July 27, 2026 |
| 128068 | watchOS 26.6 - Apple Security Content | July 27, 2026 |
| 128070 | visionOS 26.6 - Apple Security Content | July 27, 2026 |
| 128072 | macOS Sonoma 14.8.8 - Apple Security Content | July 27, 2026 |
| 128069 | tvOS 26.6 - Apple Security Content | July 27, 2026 |
| 128067 | macOS Tahoe 26.6 - Apple Security Content | July 27, 2026 |
| 128066 | iOS 26.6 and iPadOS 26.6 - Apple Security Content | July 27, 2026 |
| 127594 | iOS 26.5.2 and iPadOS 26.5.2 - Apple Security Content | June 29, 2026 |
| 127595 | macOS Tahoe 26.5.2 - Apple Security Content | June 29, 2026 |
Known Exploited Apple Vulnerabilities
The following Apple vulnerabilities have recently been marked by CISA as Known to be Exploited by threat actors.
| Title | Description | Added |
|---|---|---|
| Apple Multiple Products Classic Buffer Overflow Vulnerability |
Apple watchOS, iOS, iPadOS, macOS, visionOS, tvOS, and iPadOS contain a classic buffer overflow vulnerability which could allow a malicious application to cause unexpected system termination or write kernel memory. CVE-2025-43520 Exploit Probability: 0.4% |
March 20, 2026 |
| Apple Multiple Products Improper Locking Vulnerability |
Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes. CVE-2025-43510 Exploit Probability: 0.4% |
March 20, 2026 |
| Apple Multiple Products Buffer Overflow Vulnerability |
Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could allow the processing of maliciously crafted web content which may lead to memory corruption. CVE-2025-31277 Exploit Probability: 1.5% |
March 20, 2026 |
| Apple Multiple products Use-After-Free Vulnerability |
Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory corruption. CVE-2023-43000 Exploit Probability: 3.9% |
March 5, 2026 |
| Apple iOS and iPadOS Use-After-Free Vulnerability |
Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges. CVE-2023-41974 Exploit Probability: 1.4% |
March 5, 2026 |
| Apple Multiple Products Integer Overflow or Wraparound Vulnerability |
Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution. CVE-2021-30952 Exploit Probability: 7.6% |
March 5, 2026 |
| Apple Multiple Buffer Overflow Vulnerability |
Apple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow an attacker with memory write the capability to execute arbitrary code. CVE-2026-20700 Exploit Probability: 1.3% |
February 12, 2026 |
| Apple Multiple Products Use-After-Free WebKit Vulnerability |
Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. CVE-2025-43529 Exploit Probability: 8.6% |
December 15, 2025 |
| Apple Multiple Products Unspecified Vulnerability |
Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead to arbitrary code execution. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. CVE-2022-48503 Exploit Probability: 3.2% |
October 20, 2025 |
| Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability |
Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework. CVE-2025-43300 Exploit Probability: 20.4% |
August 21, 2025 |
| Apple Multiple Products Unspecified Vulnerability |
Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link. CVE-2025-43200 Exploit Probability: 1.1% |
June 16, 2025 |
| Apple Multiple Products Memory Corruption Vulnerability |
Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execution when processing an audio stream in a maliciously crafted media file. CVE-2025-31200 Exploit Probability: 19.7% |
April 17, 2025 |
| Apple Multiple Products Arbitrary Read and Write Vulnerability |
Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication. CVE-2025-31201 Exploit Probability: 14.7% |
April 17, 2025 |
| Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability |
Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. CVE-2025-24201 Exploit Probability: 4.2% |
March 13, 2025 |
| Apple iOS and iPadOS Incorrect Authorization Vulnerability |
Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a locked device. CVE-2025-24200 Exploit Probability: 4.4% |
February 12, 2025 |
| Apple Multiple Products Use-After-Free Vulnerability |
Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privileges. CVE-2025-24085 Exploit Probability: 18.7% |
January 29, 2025 |
| Apple Multiple Products Code Execution Vulnerability |
Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to arbitrary code execution. CVE-2024-44308 Exploit Probability: 9.0% |
November 21, 2024 |
| Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability |
Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting (XSS) attack. CVE-2024-44309 Exploit Probability: 20.7% |
November 21, 2024 |
| Apple iOS and iPadOS Memory Corruption Vulnerability |
Apple iOS and iPadOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections. CVE-2024-23296 Exploit Probability: 1.4% |
March 6, 2024 |
| Apple iOS and iPadOS Memory Corruption Vulnerability |
Apple iOS and iPadOS kernel contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections. CVE-2024-23225 Exploit Probability: 1.5% |
March 6, 2024 |
5 known exploited Apple vulnerabilities are in the top 5% (95th percentile or greater) of the EPSS exploit probability rankings.
Top 10 Riskiest Apple Vulnerabilities
Based on the current exploit probability, these Apple vulnerabilities are on CISA's Known Exploited vulnerabilities list (KEV) and are ranked by the current EPSS exploit probability.
| Rank | CVE | EPSS | Vulnerability |
|---|---|---|---|
| 1 | CVE-2021-30860 | 76.0% | Apple iOS "FORCEDENTRY" Remote Code Execution Vulnerability |
| 2 | CVE-2021-30657 | 68.5% | Apple macOS Policy Subsystem Gatekeeper Bypass |
| 3 | CVE-2016-4657 | 63.6% | Apple iOS Webkit Memory Corruption Vulnerability |
| 4 | CVE-2023-32434 | 51.5% | Apple Multiple Products Integer Overflow Vulnerability |
| 5 | CVE-2014-4404 | 49.0% | Apple OS X Heap-Based Buffer Overflow Vulnerability |
| 6 | CVE-2016-4655 | 30.3% | Apple iOS Information Disclosure Vulnerability |
| 7 | CVE-2023-41993 | 29.2% | Apple Multiple Products WebKit Code Execution Vulnerability |
| 8 | CVE-2021-30807 | 28.8% | Apple iOS and macOS Memory Corruption Vulnerability |
| 9 | CVE-2023-28205 | 27.1% | Apple Multiple Products WebKit Use-After-Free Vulnerability |
| 10 | CVE-2023-28206 | 24.5% | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability |
By the Year
In 2026 there have been 519 vulnerabilities in Apple with an average score of 6.8 out of ten. Last year, in 2025 Apple had 757 security vulnerabilities published. If vulnerabilities keep coming in at the current rate, it appears that number of security vulnerabilities in Apple in 2026 could surpass last years number. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.25.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 519 | 6.79 |
| 2025 | 757 | 6.54 |
| 2024 | 628 | 6.30 |
| 2023 | 513 | 6.71 |
| 2022 | 464 | 7.06 |
| 2021 | 603 | 6.94 |
| 2020 | 502 | 6.89 |
| 2019 | 564 | 7.67 |
| 2018 | 226 | 7.33 |
It may take a day or so for new Apple vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Apple Security Vulnerabilities
| CVE | Date | Vulnerability | Products |
|---|---|---|---|
| CVE-2026-43757 | Jul 27, 2026 |
Out-of-Bounds Read in macOS (Sequoia/Sonoma/Tahoe) Up To 15.7.8/14.8.8/26.6An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination. |
macOS
Macos Sonoma
|
| CVE-2026-64737 | Jul 27, 2026 |
macOS Authorization & Sandbox Break Fix (Sequoia, Sonoma)An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox. |
macOS
Macos Sonoma
|
| CVE-2026-43782 | Jul 27, 2026 |
macOS App Data Access Vulnerability (Fixed in Sequoia 15.7.8)This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data. |
macOS
Macos Sonoma
|
| CVE-2026-43805 | Jul 27, 2026 |
Apple OS Race Condition Enables Kernel Write fixed in iOS 26.6, macOS 15.7.8A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-39873 | Jul 27, 2026 |
Memory Handling Leak in macOS SMB Client Causes System Termination (Pre15.7/14.8/26.6)The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious SMB server may lead to unexpected system termination. |
macOS
Macos Sonoma
|
| CVE-2026-64776 | Jul 27, 2026 |
macOS kernel memory disclosure via bounds check flaw (before Sequoia 15.7.8)The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to disclose kernel memory. |
macOS
Macos Sonoma
|
| CVE-2026-43813 | Jul 27, 2026 |
iOS/macOS Code Signing Bypass (CVE-2026-43813) Fixed in 26.6A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A maliciously crafted app may be able to bypass code signing enforcement. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-64721 | Jul 27, 2026 |
Apple OS State Management Data Leak (CVE-2026-64721) - fixed in 26.6This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-20672 | Jul 27, 2026 |
macOS Info Disclosure Vulnerability Fixed in Sequoia 15.7.8 & Sonoma 14.8.8An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to access sensitive user data. |
macOS
Macos Sonoma
|
| CVE-2026-64740 | Jul 27, 2026 |
Apple OS Sandbox Escape via Path Validation (iOS 26.6, macOS Sequoia 15.7.8)A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to break out of its sandbox. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-64691 | Jul 27, 2026 |
Buffer overflow in macOS Tahoe before 26.6A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to cause unexpected system termination. |
macOS
|
| CVE-2026-43673 | Jul 27, 2026 |
Apple OS Audio Framework Memory Corruption via Malicious Audio File (iOS 26.6+)The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted audio file may corrupt process memory. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-64783 | Jul 27, 2026 |
SAFARI USE-AFTER-FREE CRASH VULN FIXED IN 26.6A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-43809 | Jul 27, 2026 |
macOS Sequoia 15.7.8 OOB Read CVE-2026-43809An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination. |
macOS
Macos Sonoma
|
| CVE-2026-43665 | Jul 27, 2026 |
Apple macOS ScreenSharing VNC Password Disclosure Before 15.7.8/14.8.8This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A local attacker may be able to determine the legacy VNC password configured for Screen Sharing. |
macOS
Macos Sonoma
|
| CVE-2026-43777 | Jul 27, 2026 |
Remote DoS via Improper Input Validation in macOS 15.7.8/14.8.8/26.6This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote attacker may be able to cause a denial of service. |
macOS
Macos Sonoma
|
| CVE-2026-43799 | Jul 27, 2026 |
Apple OS Use-After-Free before 26.6 (iOS & macOS)A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-43776 | Jul 27, 2026 |
Apple OS Buffer Overflow Fixed in iOS 26.6 / macOS 15.7.8A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-28900 | Jul 27, 2026 |
macOS Gatekeeper ZIP Quarantine Bypass (fixed 15.7.8/14.8.8)A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gatekeeper checks. |
macOS
Macos Sonoma
|
| CVE-2026-43672 | Jul 27, 2026 |
Auth bypass via state mgmt in macOS 15.7.8, 14.8.8, 26.6An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious application may be able to bypass Privacy preferences. |
macOS
Macos Sonoma
|
| CVE-2026-43760 | Jul 27, 2026 |
macOS App Access Issue with Sensitive Data fixed in 14.8.8/26.6An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access user-sensitive data. |
macOS
Macos Sonoma
|
| CVE-2026-64741 | Jul 27, 2026 |
Apple iOS 26.6: Persistent Device ID read via Permissions flawA permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read a persistent device identifier. |
iOS
iPadOS
tvOS
And others... |
| CVE-2026-64716 | Jul 27, 2026 |
Apple OS ImageProcessor Memory Corruption (CVE-2026-64716) before 26.6The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted image may corrupt process memory. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-28982 | Jul 27, 2026 |
macOS Kernel Race Condition Causing Termination (Fixed 15.7.8/14.8.8/26.6)A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory. |
macOS
Macos Sonoma
|
| CVE-2026-64700 | Jul 27, 2026 |
Apple OSes UAF Fix in 26.6A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-64757 | Jul 27, 2026 |
Safari Memory Corruption Fixed in 26.6 (iOS, macOS, watchOS, visionOS)A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-64720 | Jul 27, 2026 |
Race Condition in Apple OS 26.6 Can Cause System CrashA race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-28849 | Jul 27, 2026 |
macOS Gatekeeper ZIP Bypass (before 15.7.8 & 14.8.8)The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gatekeeper checks. |
macOS
Macos Sonoma
|
| CVE-2026-43812 | Jul 27, 2026 |
Apple OS Use-After-Free (iOS 26.6, macOS 15.7.8)A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. An app may be able to cause unexpected system termination. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-43804 | Jul 27, 2026 |
Safari DoS via State Mgmt in 26.5+This issue was addressed through improved state management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6. Visiting a website may lead to an app denial-of-service. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-43756 | Jul 27, 2026 |
macOS logic flaw enabling app data access (fixed in 15.7.8, 14.8.8, 26.6)A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access user-sensitive data. |
macOS
Macos Sonoma
|
| CVE-2026-64707 | Jul 27, 2026 |
Apple iOS/macOS: Permission Bypass allows delete of unauthorized files (fixed before 26.6)A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6. An app may be able to delete files for which it does not have permission. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-64711 | Jul 27, 2026 |
Info Leak via Entitlement Bypass in macOS Sequoia 15.7.8This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to leak sensitive user information. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-64746 | Jul 27, 2026 |
iOS 26.6 Authorization flaw allows contact addition without permissionAn authorization issue was addressed with improved validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. An app may be able to add contacts without user authorization. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-43767 | Jul 27, 2026 |
macOS bug may cause app crash in Sequoia 15.7.8/Sonoma 14.8.8/Tahoe 26.6The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination. |
macOS
Macos Sonoma
|
| CVE-2026-64697 | Jul 27, 2026 |
macOS Kernel Mem Corrupt via App (Sequoia 15.7.8 / Sonoma 14.8.8 / Tahoe 26.6)The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory. |
macOS
Macos Sonoma
|
| CVE-2026-28911 | Jul 27, 2026 |
macOS Memory Corruption via App (pre-14.8.8)The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process. |
macOS
Macos Sonoma
|
| CVE-2026-43730 | Jul 27, 2026 |
Apple iOS/macOS Permission Fault Enabling Fingerprinting, fixed 26.6A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to fingerprint the user. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-43819 | Jul 27, 2026 |
macOS Sandbox Bypass in macOS Tahoe 26.6 Allows App Data AccessAn access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.6. An app may be able to access sensitive user data. |
macOS
|
| CVE-2026-43771 | Jul 27, 2026 |
macOS Stack Overflow (DoS) Fixed in Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service. |
macOS
Macos Sonoma
|
| CVE-2026-43747 | Jul 27, 2026 |
macOS file parser OOB read fixed in 15.7.8,14.8.8,26.6An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Parsing a maliciously crafted file may lead to an unexpected app termination. |
macOS
Macos Sonoma
|
| CVE-2026-28931 | Jul 27, 2026 |
Apple OS NFS Client Buffer Overflow Kernel Mem Corruption, Fixed 26.6A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. Connecting to a malicious NFS server may lead to kernel memory corruption. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-43710 | Jul 27, 2026 |
macOS Kernel Memory Corruption Fixed in Sequoia 15.7.8, Sonoma 14.8.8The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker may be able to cause unexpected system termination or corrupt kernel memory. |
macOS
Macos Sonoma
|
| CVE-2026-64731 | Jul 27, 2026 |
macOS Path Handling Issue Allows Sandbox Escape (Fixed in 15.7.8/26.6)A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox. |
macOS
|
| CVE-2026-64766 | Jul 27, 2026 |
Apple OS integer overflow: vulnerable pre-26.6 on iOS, iPadOS, macOS, tvOSAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-43803 | Jul 27, 2026 |
Apple iOS/macOS 26.6: OOB Write Fixed Remote Attacker Termination RiskAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote attacker may be able to cause unexpected system termination. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-39875 | Jul 27, 2026 |
macOS Privilege Escalation via Permission Issue (fixed 15.7.8,14.8.8,26.6)A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges. |
macOS
Macos Sonoma
|
| CVE-2026-64770 | Jul 27, 2026 |
Apple OS OOB Write (CVE-2026-64770): Fixed in iOS 26.6An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-64727 | Jul 27, 2026 |
macOS & tvOS Pre-26.6 Type Confusion App-Induced System CrashA type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.6, tvOS 26.6. An app may be able to cause unexpected system termination. |
macOS
tvOS
|
| CVE-2026-43792 | Jul 27, 2026 |
Safari Authorization Flaw Pre-26.6 Allows App Access to Sensitive DataAn authorization issue was addressed with improved state management. This issue is fixed in Safari 26.6, macOS Tahoe 26.6. An app may be able to access sensitive user data. |
macOS
Safari
|