← Back

Macos

macos

Vendor: Apple • 3,171 CVEs

CVEs (3,171)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-20658
1Apple
1Macos
Jun 17, 2026
Feb 11, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
A package validation issue was addressed by blocking the vulnerable package. This issue is fixed in macOS Tahoe 26.3. An app may be able to gain root privileges.
CVE-2026-20656
1Apple
4Ipados
Iphone OsMacos+1 more
Jun 17, 2026
Feb 11, 2026
N/A· v4
3.3 LOW· v3
N/A· v2
A logic issue was addressed with improved validation. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, macOS Tahoe 26.3. An app may be able to access a user's Safari history.
CVE-2026-20654
1Apple
6Ipados
Iphone OsMacos+3 more
Jun 17, 2026
Feb 11, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to cause unexpected system termination.
CVE-2026-20653
1Apple
4Ipados
Iphone OsMacos+1 more
Jun 17, 2026
Feb 11, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, ma...Show more
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. An app may be able to access sensitive user data.Show less
CVE-2026-20652
1Apple
5Ipados
Iphone OsMacos+2 more
Jul 15, 2026
Feb 11, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A remote attacker may be able to cause a...Show more
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A remote attacker may be able to cause a denial-of-service.Show less
CVE-2026-20650
1Apple
6Ipados
Iphone OsMacos+3 more
Jun 17, 2026
Feb 11, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker in a privileged network position ma...Show more
A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker in a privileged network position may be able to perform denial-of-service attack using crafted Bluetooth packets.Show less
CVE-2026-20649
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Feb 11, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, watchOS 26.3. A user may be able to view sensitive user information.
CVE-2026-20648
1Apple
1Macos
Jun 17, 2026
Feb 11, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to access notifications from other iCloud devices.
CVE-2026-20647
1Apple
1Macos
Jun 17, 2026
Feb 11, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
This issue was addressed with improved data protection. This issue is fixed in macOS Tahoe 26.3. An app may be able to access sensitive user data.
CVE-2026-20646
1Apple
1Macos
Jun 17, 2026
Feb 11, 2026
N/A· v4
3.3 LOW· v3
N/A· v2
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to read sensitive location information.
CVE-2026-20644
1Apple
5Ipados
Iphone OsMacos+2 more
Jul 15, 2026
Feb 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web conte...Show more
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.Show less
CVE-2026-20641
1Apple
6Ipados
Iphone OsMacos+3 more
Jun 17, 2026
Feb 11, 2026
N/A· v4
7.1 HIGH· v3
N/A· v2
A privacy issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, wa...Show more
A privacy issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to identify what other apps a user has installed.Show less
CVE-2026-20636
1Apple
5Ipados
Iphone OsMacos+2 more
Jul 15, 2026
Feb 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected p...Show more
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.Show less
CVE-2026-20635
1Apple
7Ipados
Iphone OsMacos+4 more
Jul 15, 2026
Feb 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing mali...Show more
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.Show less
CVE-2026-20634
1Apple
6Ipados
Iphone OsMacos+3 more
Jun 17, 2026
Feb 11, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3,...Show more
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted image may result in disclosure of process memory.Show less
CVE-2026-20630
1Apple
1Macos
Aug 21, 2026
Feb 11, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to access protected user data.
CVE-2026-20629
1Apple
1Macos
Jun 17, 2026
Feb 11, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.3. An app may be able to access user-sensitive data.
CVE-2026-20628
1Apple
6Ipados
Iphone OsMacos+3 more
Jun 17, 2026
Feb 11, 2026
N/A· v4
7.1 HIGH· v3
N/A· v2
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visio...Show more
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to break out of its sandbox.Show less
CVE-2026-20627
1Apple
5Ipados
Iphone OsMacos+2 more
Aug 21, 2026
Feb 11, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3,...Show more
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3, watchOS 26.3. An app may be able to access sensitive user data.Show less
CVE-2026-20626
1Apple
4Ipados
Iphone OsMacos+1 more
Jun 17, 2026
Feb 11, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
This issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Tahoe 26.3, visionOS 26.3. A malicious app may be able to gain root privileges.