Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

14 records

Release: Apple macOS 26.2 Clear all filters
TI-2025-28215 CVE-2025-43514 · GHSA-fjjx-6whr-m5gc

Information disclosure in Apple macOS

Priority LOW 24

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0018 Published 2025-12-17 Fixed in 26.2 CWE-200
TI-2025-29030 CVE-2025-46278 · GHSA-933v-66rf-7rgx

Information disclosure in Apple macOS

Priority LOW 24

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00163 Published 2025-12-17 Fixed in 26.2 CWE-200
TI-2025-29031 CVE-2025-46279 · GHSA-f622-m9vg-8hcm

Information disclosure in Apple iOS and iPadOS

Priority MEDIUM 49

A permissions issue was addressed with additional restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00367 Published 2025-12-17 Fixed in 18.7.3, 26.2 CWE-200
TI-2025-28228 CVE-2025-43529 · GHSA-m9mp-fmfc-g6gc

Use after free in Apple Safari

Priority CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.2565 Published 2025-12-17 Partial fix · 26.2, 18.7.3 CWE-416
TI-2025-28226 CVE-2025-43526 · GHSA-338x-j9c9-2c8v

Open redirect in Apple Safari

Priority MEDIUM 50

This issue was addressed with improved URL validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00533 Published 2025-12-17 Fixed in 26.2 CWE-601
TI-2025-28230 CVE-2025-43531 · GHSA-g838-wh9m-v2pq

Race condition in Apple Safari

Priority LOW 16

A race condition was addressed with improved state handling.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00454 Published 2025-12-17 Partial fix · 26.2, 18.7.3 CWE-362
TI-2025-28235 CVE-2025-43536 · GHSA-9q7c-3v6c-w3ww

Use after free in Apple Safari

Priority LOW 21

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00577 Published 2025-12-17 Partial fix · 26.2, 18.7.3 CWE-416
TI-2025-28132 CVE-2025-43428 · GHSA-rj66-hjxf-452x

Missing authentication in Apple iOS and iPadOS

Priority MEDIUM 50

A configuration issue was addressed with additional restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00712 Published 2025-12-17 Fixed in 26.2 CWE-306
TI-2025-28239 CVE-2025-43541 · GHSA-cv7x-j8xj-r7m8

Type confusion in Apple Safari

Priority MEDIUM 47

A type confusion issue was addressed with improved state handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.3414 Published 2025-12-17 Partial fix · 26.2, 18.7.3 CWE-843
TI-2025-28202 CVE-2025-43501 · GHSA-vf3c-qw39-5vqw

Buffer overflow in Apple Safari

Priority LOW 23

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00773 Published 2025-12-17 Partial fix · 26.2, 18.7.3 CWE-120
TI-2025-29034 CVE-2025-46282 · GHSA-59j9-9vvv-34jx

Improper access control in Apple Safari

Priority LOW 24

The issue was addressed with additional permissions checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00156 Published 2025-12-17 Fixed in 26.2 CWE-284