Apple macOS vulnerabilities
31 known CVE vulnerabilities in Apple macOS, translated and rated.
- CVE-2026-64767Critical
A buffer overflow vulnerability in macOS allows a remote attacker to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-64731Critical
Path validation was improved. The issue affects macOS Sequoia 15.7.8 and macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.
- CVE-2026-64704Critical
A type confusion issue was addressed with improved memory handling. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
- CVE-2026-64703Critical
A use after free issue was addressed with improved memory management. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to cause a denial-of-service.
- CVE-2026-64702Critical
An access issue was addressed with additional sandbox restrictions. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to break out of its sandbox.
- CVE-2026-64698Critical
A memory handling issue was fixed with improved memory management. The vulnerability affects macOS systems. An app may cause unexpected system termination or read kernel memory.
- CVE-2026-64697Critical
A memory handling issue was fixed with improved memory management. The vulnerability affects macOS systems. An app may cause unexpected system termination or corrupt kernel memory.
- CVE-2026-64696Critical
A memory handling issue was fixed with improved memory management. The vulnerability affects macOS systems. A remote user may cause unexpected system termination or corrupt kernel memory.
- CVE-2026-64694Critical
An integer overflow issue was fixed with improved input validation. The vulnerability affects macOS systems. An app may cause unexpected system termination.
- CVE-2026-43793Critical
Improved validation of environment variables in macOS. An app may cause unexpected system termination.
- CVE-2026-43779Critical
Improved logic restrictions in macOS. An app may intercept network connections intended for another process.
- CVE-2026-39873Critical
Connecting to a malicious SMB server may lead to unexpected system termination. The issue was addressed with improved memory handling.
- CVE-2026-28982Critical
A remote user may be able to cause unexpected system termination or corrupt kernel memory. A race condition was addressed with improved locking.
- CVE-2026-28911Critical
A memory handling vulnerability in macOS systems. A malicious app may corrupt memory of a system process.
- CVE-2026-64705Medium
A buffer overflow was addressed with improved bounds checking in macOS. An app may cause unexpected system termination or write kernel memory.
- CVE-2026-64710Medium
A privacy issue was addressed by removing sensitive data. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to leak sensitive user information.
- CVE-2026-64708Medium
A file quarantine bypass was addressed with additional checks. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may bypass Gatekeeper checks.
- CVE-2026-64699Medium
A memory initialization issue was fixed with improved memory handling. The vulnerability affects macOS systems. An app may disclose kernel memory.
- CVE-2026-43819Medium
Additional sandbox restrictions were introduced in macOS Tahoe. An app may be able to access sensitive user data.
- CVE-2026-43782Medium
Improved checks in macOS. An app may access sensitive user data.
- CVE-2026-43781Medium
Improved race condition handling in macOS. An app may access sensitive user data.
- CVE-2026-43777High
Improved input validation in macOS. A remote attacker may cause a denial of service.
- CVE-2026-43672High
A malicious application may be able to bypass Privacy preferences. An authorization issue was addressed with improved state management.
- CVE-2026-43665Medium
A local attacker may be able to determine the legacy VNC password configured for Screen Sharing. This issue was addressed with additional entitlement checks.
- CVE-2026-28981High
Processing a maliciously crafted image may lead to arbitrary code execution. A buffer overflow was addressed with improved bounds checking.
- CVE-2026-28945High
An app may be able to bypass network restrictions. A permissions issue was addressed with additional sandbox restrictions.
- CVE-2026-28932Medium
An app may be able to cause a denial of service. A logic issue existed resulting in memory corruption, addressed with improved state management.
- CVE-2026-28912High
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.7, macOS Tahoe 26.6. A user may be able to elevate privileges.
- CVE-2026-20622High
A privacy issue was addressed with improved handling of temporary files. This issue affects macOS. An app may be able to capture a user's screen.
- CVE-2025-46291High
A logic issue was addressed with improved validation. This issue affects macOS. An app may bypass Gatekeeper checks.
- CVE-2025-46281High
A logic issue was addressed with improved checks. This issue affects macOS. An app may be able to break out of its sandbox.

