Vendor CVEs

Apple Inc.

All CVEs

9,252 total · sorted by risk

CVE	Vendor / Product	Sev	CVSS	EPSS	Published	Description
CVE-2026-43775	Apple Inc. macOS	Med	5.5	0.00	Jul 27, 2026	An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. An app may be able to access sensitive user data.
CVE-2026-43774	Apple Inc. macOS	Med	5.5	0.00	Jul 27, 2026	An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data.
CVE-2026-43773	Apple Inc. macOS	Cri	9.8	0.01	Jul 27, 2026	An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
CVE-2026-43772	Apple Inc. macOS	Hig	8.2	0.00	Jul 27, 2026	A path traversal issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to break out of its sandbox.
CVE-2026-43771	Apple Inc. macOS	Hig	7.1	0.00	Jul 27, 2026	A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service.
CVE-2026-43770	Apple Inc. macOS	Med	4.7	0.00	Jul 27, 2026	A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. An app may be able to access sensitive user data.
CVE-2026-43768	Apple Inc. macOS	Med	5.5	0.00	Jul 27, 2026	The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43767	Apple Inc. macOS	Med	5.0	0.00	Jul 27, 2026	The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43766	Apple Inc. macOS	Med	4.6	0.00	Jul 27, 2026	An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker with physical access to a locked device may be able to view sensitive user information.
CVE-2026-43765	Apple Inc. macOS	Med	5.5	0.00	Jul 27, 2026	This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to modify protected parts of the file system.
CVE-2026-43764	Apple Inc. macOS	Cri	9.8	0.01	Jul 27, 2026	An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43759	Apple Inc. macOS	Med	5.5	0.00	Jul 27, 2026	An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.6, watchOS 26.6. An app may be able to access sensitive user data.
CVE-2026-43758	Apple Inc. macOS	Med	5.5	0.00	Jul 27, 2026	An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be able to access sensitive user data.
CVE-2026-43756	Apple Inc. macOS	Med	5.5	0.00	Jul 27, 2026	A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access user-sensitive data.
CVE-2026-43755	Apple Inc. macOS	Hig	7.0	0.00	Jul 27, 2026	A race condition was addressed with improved state management. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.
CVE-2026-43753	Apple Inc. macOS	Med	4.6	0.00	Jul 27, 2026	An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker with physical access to a locked device may be able to view sensitive user information.
CVE-2026-43750	Apple Inc. macOS	Cri	9.8	0.01	Jul 27, 2026	A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
CVE-2026-43749	Apple Inc. macOS	Hig	7.8	0.00	Jul 27, 2026	A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.
CVE-2026-43747	Apple Inc. macOS	Hig	7.1	0.00	Jul 27, 2026	An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Parsing a maliciously crafted file may lead to an unexpected app termination.
CVE-2026-43739	Apple Inc. macOS	Med	5.5	0.00	Jul 27, 2026	An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43730	Apple Inc. macOS	Cri	9.8	0.01	Jul 27, 2026	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to fingerprint the user.
CVE-2026-43728	Apple Inc. macOS	Hig	7.5	0.00	Jul 27, 2026	This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26.6. An attacker may be able to modify the state of the Keychain.
CVE-2026-43710	Apple Inc. macOS	Cri	9.8	0.01	Jul 27, 2026	The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-43694	Apple Inc. macOS	Cri	9.8	0.01	Jul 27, 2026	The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2026-43693	Apple Inc. macOS	Hig	7.0	0.00	Jul 27, 2026	A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.
CVE-2026-43682	Apple Inc. macOS	Cri	9.8	0.01	Jul 27, 2026	The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-43681	Apple Inc. macOS	Hig	7.1	0.00	Jul 27, 2026	A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A local user may be able to read kernel memory.
CVE-2026-43672	Apple Inc. macOS	Hig	7.1	0.00	Jul 27, 2026	An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious application may be able to bypass Privacy preferences.
CVE-2026-43665	Apple Inc. macOS	Med	5.5	0.00	Jul 27, 2026	This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A local attacker may be able to determine the legacy VNC password configured for Screen Sharing.
CVE-2026-39874	Apple Inc. macOS	Hig	7.8	0.00	Jul 27, 2026	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.
CVE-2026-39873	Apple Inc. macOS	Cri	9.8	0.01	Jul 27, 2026	The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious SMB server may lead to unexpected system termination.
CVE-2026-28982	Apple Inc. macOS	Cri	9.8	0.00	Jul 27, 2026	A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-28981	Apple Inc. macOS	Hig	7.8	0.00	Jul 27, 2026	A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2026-28945	Apple Inc. macOS	Hig	7.1	0.00	Jul 27, 2026	A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to bypass network restrictions.
CVE-2026-28932	Apple Inc. macOS	Med	5.5	0.00	Jul 27, 2026	A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial of service.
CVE-2026-28931	Apple Inc. macOS	Hig	8.8	0.00	Jul 27, 2026	A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. Connecting to a malicious NFS server may lead to kernel memory corruption.
CVE-2026-28928	Apple Inc. macOS	Cri	9.8	0.01	Jul 27, 2026	A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-28911	Apple Inc. macOS	Cri	9.8	0.00	Jul 27, 2026	The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process.
CVE-2026-64483	Linux Kernel		—	0.00	Jul 25, 2026	In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire: isight: bound the sample count to the packet payload isight_packet() takes the frame count from the device iso packet and checks it only against the device claimed iso length. count =…
CVE-2025-68640	Apple Inc. Find My	Med	5.3	0.00	Jul 21, 2026	The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET (Private Endpoint Token) to enumerate devices and remove offline devices from an Apple ID account without triggering two-factor authentication or ownership verification. This may…
CVE-2026-43718	Apple Inc. macOS	Med	6.5	0.00	Jun 29, 2026	A stack overflow was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-43709	Apple Inc. macOS	Med	6.5	0.00	Jun 29, 2026	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process…
CVE-2026-43706	Apple Inc. macOS	Med	6.5	0.00	Jun 29, 2026	A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to…
CVE-2026-43704	Apple Inc. macOS	Med	5.3	0.00	Jun 29, 2026	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious web extension may be able to cause an unexpected process crash.
CVE-2026-43703	Apple Inc. macOS	Med	6.5	0.00	Jun 29, 2026	The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected…
CVE-2026-28975	Apple Inc. Swift Nio Extras		—	0.00	Jun 12, 2026	### Impact When `NIOHTTPRequestDecompressor` is configured with `.ratio(N)`, the decompression limit is enforced using the `Content-Length` header value from the incoming request rather than the actual number of compressed bytes received. Since `Content-Length` is…
CVE-2026-28970	Apple Inc. SwiftNIO		—	0.00	Jun 12, 2026	Programs using swift-nio is vulnerable to HTTP request smuggling and HTTP response splitting attacks, caused by insufficient validation of outbound HTTP/1.1 request and response start line components. This vulnerability affects all swift-nio versions from 2.0.0 to 2.99.0. It is…
CVE-2026-46312	Linux Kernel		—	0.00	Jun 8, 2026	In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap vb2_dma_contig sets VMA flags VM_DONTEXPAND and VM_DONTDUMP and I do not see a reason why vb2_dma_sg should behave differently. This avoids hitting…
CVE-2024-27301	Root3 Support App	Hig	7.3	0.00	Mar 14, 2024	Support App is an opensource application specialized in managing Apple devices. It's possible to abuse a vulnerability inside the postinstall installer script to make the installer execute arbitrary code as root. The cause of the vulnerability is the fact that the shebang…
CVE-2023-38403	iperf iperf	Hig	7.5	0.02	Jul 17, 2023	iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

CVE-2026-43775MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 5.5epss 0.00
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. An app may be able to access sensitive user data.
CVE-2026-43774MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 5.5epss 0.00
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data.
CVE-2026-43773CriJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 9.8epss 0.01
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
CVE-2026-43772HigJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 8.2epss 0.00
A path traversal issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to break out of its sandbox.
CVE-2026-43771HigJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 7.1epss 0.00
A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service.
CVE-2026-43770MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 4.7epss 0.00
A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. An app may be able to access sensitive user data.
CVE-2026-43768MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 5.5epss 0.00
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43767MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 5.0epss 0.00
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43766MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 4.6epss 0.00
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker with physical access to a locked device may be able to view sensitive user information.
CVE-2026-43765MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 5.5epss 0.00
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to modify protected parts of the file system.
CVE-2026-43764CriJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 9.8epss 0.01
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43759MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 5.5epss 0.00
An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.6, watchOS 26.6. An app may be able to access sensitive user data.
CVE-2026-43758MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 5.5epss 0.00
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be able to access sensitive user data.
CVE-2026-43756MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 5.5epss 0.00
A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access user-sensitive data.
CVE-2026-43755HigJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 7.0epss 0.00
A race condition was addressed with improved state management. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.
CVE-2026-43753MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 4.6epss 0.00
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker with physical access to a locked device may be able to view sensitive user information.
CVE-2026-43750CriJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 9.8epss 0.01
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
CVE-2026-43749HigJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 7.8epss 0.00
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.
CVE-2026-43747HigJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 7.1epss 0.00
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Parsing a maliciously crafted file may lead to an unexpected app termination.
CVE-2026-43739MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 5.5epss 0.00
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43730CriJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 9.8epss 0.01
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to fingerprint the user.
CVE-2026-43728HigJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 7.5epss 0.00
This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26.6. An attacker may be able to modify the state of the Keychain.
CVE-2026-43710CriJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 9.8epss 0.01
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-43694CriJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 9.8epss 0.01
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2026-43693HigJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 7.0epss 0.00
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.
CVE-2026-43682CriJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 9.8epss 0.01
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-43681HigJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 7.1epss 0.00
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A local user may be able to read kernel memory.
CVE-2026-43672HigJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 7.1epss 0.00
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious application may be able to bypass Privacy preferences.
CVE-2026-43665MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 5.5epss 0.00
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A local attacker may be able to determine the legacy VNC password configured for Screen Sharing.
CVE-2026-39874HigJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 7.8epss 0.00
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.
CVE-2026-39873CriJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 9.8epss 0.01
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious SMB server may lead to unexpected system termination.
CVE-2026-28982CriJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 9.8epss 0.00
A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-28981HigJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 7.8epss 0.00
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2026-28945HigJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 7.1epss 0.00
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to bypass network restrictions.
CVE-2026-28932MedJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 5.5epss 0.00
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial of service.
CVE-2026-28931HigJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 8.8epss 0.00
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. Connecting to a malicious NFS server may lead to kernel memory corruption.
CVE-2026-28928CriJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 9.8epss 0.01
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-28911CriJul 27, 2026
Apple Inc.
macOS
risk 0.00cvss 9.8epss 0.00
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process.
CVE-2026-64483Jul 25, 2026
Linux
Kernel
risk 0.00cvss —epss 0.00
In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire: isight: bound the sample count to the packet payload isight_packet() takes the frame count from the device iso packet and checks it only against the device claimed iso length. count =…
CVE-2025-68640MedJul 21, 2026
Apple Inc.
Find My
risk 0.00cvss 5.3epss 0.00
The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET (Private Endpoint Token) to enumerate devices and remove offline devices from an Apple ID account without triggering two-factor authentication or ownership verification. This may…
CVE-2026-43718MedJun 29, 2026
Apple Inc.
macOS
risk 0.00cvss 6.5epss 0.00
A stack overflow was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-43709MedJun 29, 2026
Apple Inc.
macOS
risk 0.00cvss 6.5epss 0.00
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process…
CVE-2026-43706MedJun 29, 2026
Apple Inc.
macOS
risk 0.00cvss 6.5epss 0.00
A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to…
CVE-2026-43704MedJun 29, 2026
Apple Inc.
macOS
risk 0.00cvss 5.3epss 0.00
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious web extension may be able to cause an unexpected process crash.
CVE-2026-43703MedJun 29, 2026
Apple Inc.
macOS
risk 0.00cvss 6.5epss 0.00
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected…
CVE-2026-28975Jun 12, 2026
Apple Inc.
Swift Nio Extras
risk 0.00cvss —epss 0.00
### Impact When `NIOHTTPRequestDecompressor` is configured with `.ratio(N)`, the decompression limit is enforced using the `Content-Length` header value from the incoming request rather than the actual number of compressed bytes received. Since `Content-Length` is…
CVE-2026-28970Jun 12, 2026
Apple Inc.
SwiftNIO
risk 0.00cvss —epss 0.00
Programs using swift-nio is vulnerable to HTTP request smuggling and HTTP response splitting attacks, caused by insufficient validation of outbound HTTP/1.1 request and response start line components. This vulnerability affects all swift-nio versions from 2.0.0 to 2.99.0. It is…
CVE-2026-46312Jun 8, 2026
Linux
Kernel
risk 0.00cvss —epss 0.00
In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap vb2_dma_contig sets VMA flags VM_DONTEXPAND and VM_DONTDUMP and I do not see a reason why vb2_dma_sg should behave differently. This avoids hitting…
CVE-2024-27301HigMar 14, 2024
Root3
Support App
risk 0.00cvss 7.3epss 0.00
Support App is an opensource application specialized in managing Apple devices. It's possible to abuse a vulnerability inside the postinstall installer script to make the installer execute arbitrary code as root. The cause of the vulnerability is the fact that the shebang…
CVE-2023-38403HigJul 17, 2023
iperf
iperf
risk 0.00cvss 7.5epss 0.02
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

Page 128 of 186