Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

23 records

Release: Apple macOS 26.4 Clear all filters
TI-2026-16720 CVE-2026-20664 · GHSA-v2g6-mw74-wfj3

Out-of-bounds write in Apple Safari

Priority LOW 21

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00748 Published 2026-03-25 Partial fix · 26.4 CWE-787
TI-2026-23038 CVE-2026-28845 · GHSA-gffw-527m-r476

Improper authorization in Apple macOS

Priority LOW 24

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00129 Published 2026-03-25 Fixed in 26.4 CWE-285
TI-2026-16721 CVE-2026-20665 · GHSA-w9qh-3c3h-mc7x

Protection mechanism failure in Apple Safari

Priority LOW 36

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00634 Published 2026-03-25 Partial fix · 26.4, 18.7.7 CWE-693
TI-2026-16689 CVE-2026-20632 · GHSA-95vg-2cxx-w7p3

Improper access control in Apple macOS

Priority LOW 30

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00311 Published 2026-03-25 Fixed in 26.4 CWE-284
TI-2026-23069 CVE-2026-28881 · GHSA-6fm3-x8p8-w9j8

Improper authorization in Apple macOS

Priority LOW 30

A privacy issue was addressed by moving sensitive data.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0018 Published 2026-03-25 Fixed in 26.4 CWE-285
TI-2026-23036 CVE-2026-28842 · GHSA-xvfm-vcfx-8599

Heap-based buffer overflow in Apple macOS

Priority LOW 39

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00399 Published 2026-03-25 Fixed in 26.4 CWE-122
TI-2026-23017 CVE-2026-28823 · GHSA-j9xp-j7mg-j47f

Improper access control in Apple macOS

Priority LOW 22

A path handling issue was addressed with improved validation.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00305 Published 2026-03-25 Fixed in 26.4 CWE-284
TI-2026-23048 CVE-2026-28859 · GHSA-q74v-rxg6-m2w6

Out-of-bounds read in Apple Safari

Priority LOW 21

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00661 Published 2026-03-25 Partial fix · 26.4 CWE-125
TI-2026-23031 CVE-2026-28837 · GHSA-2jc7-5j3r-jr6p

Improper access control in Apple macOS

Priority LOW 39

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00354 Published 2026-03-25 Fixed in 26.4 CWE-284
TI-2026-23050 CVE-2026-28861 · GHSA-mf24-ggcw-q27g

Cross-site scripting in Apple Safari

Priority LOW 20

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00322 Published 2026-03-25 Fixed in 26.4, 18.7.7 CWE-79
TI-2026-23014 CVE-2026-28820 · GHSA-764c-2rh3-p2wj

Information disclosure in Apple macOS

Priority LOW 24

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00217 Published 2026-03-25 Fixed in 26.4 CWE-200
TI-2026-16753 CVE-2026-20698 · GHSA-fc7w-w2c7-j46c

Memory corruption in Apple iOS and iPadOS

Priority LOW 34

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00339 Published 2026-03-25 Fixed in 26.4 CWE-119
TI-2026-23046 CVE-2026-28857 · GHSA-xc63-96v5-38fr

Out-of-bounds read in Apple Safari

Priority LOW 30

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00671 Published 2026-03-25 Partial fix · 26.4 CWE-125
TI-2026-23035 CVE-2026-28841 · GHSA-wvgh-gjp7-2cm6

Buffer overflow in Apple macOS

Priority LOW 27

A buffer overflow was addressed with improved size validation.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00169 Published 2026-03-25 Fixed in 26.4 CWE-120
TI-2026-23059 CVE-2026-28871 · GHSA-m46v-chmw-rw9m

Cross-site scripting in Apple Safari

Priority LOW 20

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00287 Published 2026-03-25 Partial fix · 26.4, 18.7.7 CWE-79
TI-2026-16740 CVE-2026-20684 · GHSA-8j6h-jv9f-2r4r

Improper access control in Apple macOS

Priority LOW 15

A permissions issue was addressed with additional restrictions.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00135 Published 2026-03-25 Fixed in 26.4 CWE-284