Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

40 records

Release: Apple macOS 14.8.5, 15.7.5, 26.4 Clear all filters
TI-2026-23019 CVE-2026-28825 · GHSA-v2rp-wxm3-8hxp

Out-of-bounds write in Apple macOS

Priority LOW 31

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00379 Published 2026-03-25 Fixed in 14.8.5, 15.7.5 +1 CWE-787
TI-2026-16756 CVE-2026-20701 · GHSA-5g2j-7mcf-43r8

Protection mechanism failure in Apple macOS

Priority LOW 39

An access issue was addressed with additional sandbox restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00436 Published 2026-03-25 Fixed in 14.8.5, 15.7.5 +1 CWE-693
TI-2026-16690 CVE-2026-20633 · GHSA-9cv6-73mr-84fw

Link following in Apple macOS

Priority LOW 24

This issue was addressed with improved handling of symlinks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00218 Published 2026-03-25 Fixed in 14.8.5, 15.7.5 +1 CWE-59
TI-2026-23023 CVE-2026-28829 · GHSA-hw9m-xc44-8wmp

Incorrect permission assignment in Apple macOS

Priority LOW 24

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00173 Published 2026-03-25 Fixed in 14.8.5, 15.7.5 +1 CWE-732
TI-2026-23076 CVE-2026-28891 · GHSA-w5rf-7qr8-hm2m

Race condition in Apple macOS

Priority LOW 36

A race condition was addressed with additional validation.

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.0015 Published 2026-03-25 Fixed in 14.8.5, 15.7.5 +1 CWE-362
TI-2026-23022 CVE-2026-28828 · GHSA-g62v-q2rm-gw7j

Improper access control in Apple macOS

Priority LOW 30

A permissions issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00357 Published 2026-03-25 Fixed in 14.8.5, 15.7.5 +1 CWE-284
TI-2026-23072 CVE-2026-28886 · GHSA-3gqw-qcrw-37vv

NULL pointer dereference in Apple iOS and iPadOS

Priority LOW 28

A null pointer dereference was addressed with improved input validation.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00665 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-476
TI-2026-23018 CVE-2026-28824 · GHSA-hjh5-wqfv-vmx9

Improper access control in Apple macOS

Priority LOW 30

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00357 Published 2026-03-25 Fixed in 14.8.5, 15.7.5 +1 CWE-284
TI-2026-23026 CVE-2026-28832 · GHSA-gcmr-7g8c-mq4f

Out-of-bounds read in Apple macOS

Priority LOW 38

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00204 Published 2026-03-25 Fixed in 14.8.5, 15.7.5 +1 CWE-125
TI-2026-16745 CVE-2026-20690 · GHSA-9q8x-28q7-g3j2

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 30

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00752 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-125
TI-2026-23054 CVE-2026-28865 · GHSA-g677-cg8f-8p94

Improper authorization in Apple iOS and iPadOS

Priority LOW 34

An authentication issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00794 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-285
TI-2026-23033 CVE-2026-28839 · GHSA-p882-fhhg-97p6

Improper authorization in Apple macOS

Priority LOW 30

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00411 Published 2026-03-25 Fixed in 14.8.5, 15.7.5 +1 CWE-285
TI-2026-23051 CVE-2026-28862 · GHSA-pwfm-qvvq-w8j5

Improper access control in Apple macOS

Priority LOW 32

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00819 Published 2026-03-25 Fixed in 14.8.5, 15.7.5 +1 CWE-284
TI-2026-16752 CVE-2026-20697 · GHSA-3mjv-8f83-6r45

Improper access control in Apple macOS

Priority LOW 30

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00411 Published 2026-03-25 Fixed in 14.8.5, 15.7.5 +1 CWE-284
TI-2026-23029 CVE-2026-28835 · GHSA-7x5f-fmvg-2g7r

Use after free in Apple macOS

Priority LOW 29

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00468 Published 2026-03-25 Fixed in 14.8.5, 15.7.5 +1 CWE-416
TI-2026-23012 CVE-2026-28818 · GHSA-v87q-9639-7vgq

Improper access control in Apple macOS

Priority LOW 30

A logging issue was addressed with improved data redaction.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00411 Published 2026-03-25 Fixed in 14.8.5, 15.7.5 +1 CWE-284
TI-2026-23016 CVE-2026-28822 · GHSA-v459-vpgq-97pg

Type confusion in Apple iOS and iPadOS

Priority LOW 27

A type confusion issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0021 Published 2026-03-25 Fixed in 26.4, 14.8.5 +1 CWE-843
TI-2026-23028 CVE-2026-28834 · GHSA-552g-3pcr-rj34

Race condition in Apple macOS

Priority LOW 22

A race condition was addressed with improved state handling.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00152 Published 2026-03-25 Fixed in 14.8.5, 15.7.5 +1 CWE-362
TI-2026-23067 CVE-2026-28879 · GHSA-r6xf-37w8-p5j6

Use after free in Apple iOS and iPadOS

Priority LOW 29

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00458 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-416
TI-2026-23032 CVE-2026-28838 · GHSA-7j45-7q44-56w8

Improper access control in Apple macOS

Priority LOW 31

A permissions issue was addressed with additional sandbox restrictions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0049 Published 2026-03-25 Fixed in 14.8.5, 15.7.5 +1 CWE-284
TI-2026-23068 CVE-2026-28880 · GHSA-wh29-fhm6-hqrh

Improper access control in Apple iOS and iPadOS

Priority LOW 36

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00794 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-284
TI-2026-23011 CVE-2026-28817 · GHSA-p8x5-crg3-hj6v

Race condition in Apple macOS

Priority LOW 36

A race condition was addressed with improved state handling.

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.00164 Published 2026-03-25 Fixed in 14.8.5, 15.7.5 +1 CWE-362
TI-2026-23064 CVE-2026-28876 · GHSA-xp9f-jj97-j8gx

Improper access control in Apple iOS and iPadOS

Priority LOW 33

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00487 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-284
TI-2026-23015 CVE-2026-28821 · GHSA-7jx6-r36g-7pwq

Improper input validation in Apple macOS

Priority LOW 38

A validation issue existed in the entitlement verification.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00218 Published 2026-03-25 Fixed in 14.8.5, 15.7.5 +1 CWE-20
Load more