VulnSea

macOS vulnerabilities

CVEs whose affected-version data names the macOS package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

832 CVEsRSS

CVE-2026-86969None
yesterday

An out-of-bounds write was addressed with improved input validation

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to c…

▾ SunlitApple · iOS and iPadOSEPSS 0.23%via CVEORG
CVE-2026-84610None
yesterday

A file quarantine bypass was addressed with additional checks

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A maliciously crafted ZIP archive may bypass Gatekeeper checks.

▾ SunlitApple · macOSEPSS 0.24%via CVEORG
CVE-2026-86986None
yesterday

A use-after-free issue was addressed with improved memory management

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web c…

▾ SunlitApple · SafariEPSS 0.18%via CVEORG
CVE-2026-86990None
yesterday

An access issue was addressed with improved access restrictions

An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2. A …

▾ SunlitApple · iOS and iPadOSEPSS 0.25%via CVEORG
CVE-2026-112565None
yesterday

An integer overflow was addressed with improved input validation

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a ma…

▾ SunlitApple · iOS and iPadOSEPSS 0.23%via CVEORG
CVE-2026-112532None
yesterday

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory.

▾ SunlitApple · macOSEPSS 0.22%via CVEORG
CVE-2026-112498None
yesterday

An access issue was addressed with additional sandbox restrictions

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.

▾ SunlitApple · macOSEPSS 0.22%via CVEORG
CVE-2026-84542None
yesterday

An access issue was addressed with improved access restrictions

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to read files outside of its sandbox.

▾ SunlitApple · macOSEPSS 0.23%via CVEORG
CVE-2026-112477None
yesterday

A race condition was addressed with improved locking

A race condition was addressed with improved locking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2…

▾ SunlitApple · iOS and iPadOSEPSS 0.23%via CVEORG
CVE-2026-65384None
yesterday

An out-of-bounds read issue was addressed with improved input validation

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may cause an unexpected process termination.

▾ SunlitApple · macOSEPSS 0.25%via CVEORG
CVE-2026-113909None
yesterday

A memory corruption issue was addressed with improved input validation

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An attacker in physical proximity may be able t…

▾ SunlitApple · iOS and iPadOSEPSS 0.23%via CVEORG
CVE-2026-112524None
yesterday

A use-after-free issue was addressed with improved memory management

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt kernel me…

▾ SunlitApple · macOSEPSS 0.22%via CVEORG
CVE-2026-112461None
yesterday

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Pro…

▾ SunlitApple · iOS and iPadOSEPSS 0.22%via CVEORG
CVE-2026-65392None
yesterday

A permissions issue was addressed with additional restrictions

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7. An app with root privileges may be able to access private information.

▾ SunlitApple · macOSEPSS 0.23%via CVEORG
CVE-2026-113948None
yesterday

A permissions issue was addressed with additional restrictions

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2. An app may be able to modify protected parts of the file system.

▾ SunlitApple · macOSEPSS 0.20%via CVEORG
CVE-2026-112695None
yesterday

A use-after-free issue was addressed with improved memory management

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web c…

▾ SunlitApple · SafariEPSS 0.19%via CVEORG
CVE-2026-112441None
yesterday

This issue was addressed by removing the vulnerable code

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.

▾ SunlitApple · macOSEPSS 0.22%via CVEORG
CVE-2026-112504None
yesterday

A parsing issue in the handling of directory paths was addressed with improved path validation

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the …

▾ SunlitApple · macOSEPSS 0.22%via CVEORG
CVE-2026-112416None
yesterday

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionO…

▾ SunlitApple · iOS and iPadOSEPSS 0.22%via CVEORG
CVE-2026-112553None
yesterday

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to unexpected app termination.

▾ SunlitApple · macOSEPSS 0.22%via CVEORG
CVE-2026-112683None
yesterday

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Pro…

▾ SunlitApple · iOS and iPadOSEPSS 0.23%via CVEORG
CVE-2026-112545None
yesterday

A parsing issue in the handling of directory paths was addressed with improved path validation

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.

▾ SunlitApple · macOSEPSS 0.22%via CVEORG
CVE-2026-86973None
yesterday

An out-of-bounds read was addressed with improved bounds checking

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. Processing maliciously crafted web content may lead to…

▾ SunlitApple · SafariEPSS 0.19%via CVEORG
CVE-2026-112512None
yesterday

A path handling issue was addressed with improved validation

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to bypass Gatekeeper checks.

▾ SunlitApple · macOSEPSS 0.23%via CVEORG
CVE-2026-112705None
yesterday

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2. An app …

▾ SunlitApple · iOS and iPadOSEPSS 0.24%via CVEORG
CVE-2026-113952None
yesterday

A logic issue was addressed with improved checks

A logic issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. A website may be able to use a media format that should be restricted i…

▾ SunlitApple · SafariEPSS 0.23%via CVEORG
CVE-2026-112640None
yesterday

A use-after-free issue was addressed with improved memory management

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing …

▾ SunlitApple · SafariEPSS 0.19%via CVEORG
CVE-2026-112569None
yesterday

An access issue was addressed with additional sandbox restrictions

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.

▾ SunlitApple · macOSEPSS 0.22%via CVEORG
CVE-2026-86877None
yesterday

A path traversal issue was addressed with improved path validation

A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to delete files for which it does not have privileges.

▾ SunlitApple · macOSEPSS 0.15%via CVEORG
CVE-2026-112601None
yesterday

An integer overflow was addressed with improved input validation

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.8.2. An app may be able to cause a denial-of-service.

▾ SunlitApple · macOSEPSS 0.20%via CVEORG
macOS vulnerabilities (CVEs) — page 3 · VulnSea