Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

32 records

Release: Apple macOS 26.6 Clear all filters
TI-2026-46227 CVE-2026-64691 · GHSA-jw76-wr94-p2rj

Buffer overflow in Apple macOS

Priority MEDIUM 49

A buffer overflow was addressed with improved size validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00468 Published 2026-07-27 Fixed in 26.6 CWE-120
TI-2026-46315 CVE-2026-64783 · GHSA-v4g2-v8g7-xcrm

Use after free in Apple Safari

Priority MEDIUM 40

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00429 Published 2026-07-27 Partial fix · 26.6 CWE-416
TI-2026-46290 CVE-2026-64757 · GHSA-92wj-cv26-9fx4

Memory corruption in Apple Safari

Priority MEDIUM 40

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00468 Published 2026-07-27 Partial fix · 26.6, 18.7.10 CWE-119
TI-2026-46255 CVE-2026-64720 · GHSA-w4p3-w4vf-cww2

Race condition in Apple iOS and iPadOS

Priority MEDIUM 49

A race condition was addressed with improved state handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00467 Published 2026-07-27 Fixed in 26.6 CWE-362
TI-2026-46281 CVE-2026-64746 · GHSA-4977-wv8w-jw7p

Missing authorization in Apple iOS and iPadOS

Priority MEDIUM 50

An authorization issue was addressed with improved validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0056 Published 2026-07-27 Fixed in 18.7.10, 26.6 CWE-862
TI-2026-31822 CVE-2026-43730 · GHSA-w784-p8qw-f8qf

Information disclosure in Apple iOS and iPadOS

Priority MEDIUM 50

A permissions issue was addressed with additional restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00605 Published 2026-07-27 Fixed in 26.6 CWE-200
TI-2026-31908 CVE-2026-43819 · GHSA-ch5c-cf77-9rpp

Improper access control in Apple macOS

Priority LOW 24

An access issue was addressed with additional sandbox restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00157 Published 2026-07-27 Fixed in 26.6 CWE-284
TI-2026-23113 CVE-2026-28931 · GHSA-qc34-g3j9-jc55

Buffer overflow in Apple iOS and iPadOS

Priority MEDIUM 41

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00495 Published 2026-07-27 Fixed in 26.6 CWE-120
TI-2026-46262 CVE-2026-64727 · GHSA-rgpx-f96c-9fm9

Type confusion in Apple macOS

Priority MEDIUM 49

A type confusion issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00499 Published 2026-07-27 Fixed in 26.6 CWE-843
TI-2026-31881 CVE-2026-43792 · GHSA-wrxw-76w4-3wh5

Improper authorization in Apple Safari

Priority LOW 29

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00332 Published 2026-07-27 Fixed in 26.6 CWE-285
TI-2026-46261 CVE-2026-64726 · GHSA-2mph-r28x-7hfp

Memory corruption in Apple iOS and iPadOS

Priority MEDIUM 51

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00897 Published 2026-07-27 Fixed in 18.7.10, 26.6 CWE-119
TI-2026-31903 CVE-2026-43814 · GHSA-82wv-p6cm-6c52

Use after free in Apple iOS and iPadOS

Priority MEDIUM 50

A use after free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00588 Published 2026-07-27 Fixed in 26.6 CWE-416
TI-2026-46284 CVE-2026-64751 · GHSA-7fmj-p4g6-w228

Use after free in Apple iOS and iPadOS

Priority MEDIUM 50

A use after free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00588 Published 2026-07-27 Fixed in 26.6 CWE-416
TI-2026-46264 CVE-2026-64729 · GHSA-g5r9-prr2-f7qr

Use after free in Apple iOS and iPadOS

Priority MEDIUM 50

A use after free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00588 Published 2026-07-27 Fixed in 26.6 CWE-416
TI-2026-31910 CVE-2026-43821 · GHSA-qmm8-hfhq-q8j2

Improper access control in Apple Safari

Priority LOW 29

An access issue was addressed with improved access restrictions.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00421 Published 2026-07-27 Fixed in 26.6, 18.7.10 CWE-284
TI-2026-46248 CVE-2026-64713 · GHSA-rgqw-gpjq-38pr

Observable discrepancy in Apple Safari

Priority LOW 38

This issue was addressed with improved checks.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00467 Published 2026-07-27 Partial fix · 26.6 CWE-203
TI-2026-31820 CVE-2026-43728 · GHSA-vp3q-rvxq-x2ff

Race condition in Apple macOS

Priority LOW 38

This issue was addressed through improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00263 Published 2026-07-27 Fixed in 26.6 CWE-362
TI-2026-31906 CVE-2026-43817 · GHSA-46ww-xphq-j8cv

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 24

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0016 Published 2026-07-27 Fixed in 26.6 CWE-125
TI-2026-31889 CVE-2026-43800 · GHSA-fh7w-x7pm-8vrw

Information disclosure in Apple iOS and iPadOS

Priority LOW 24

An information disclosure issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00166 Published 2026-07-27 Fixed in 18.7.10, 26.6 CWE-200
TI-2026-31905 CVE-2026-43816 · GHSA-pw2w-cc2c-542x

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 24

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0016 Published 2026-07-27 Fixed in 26.6 CWE-787
TI-2026-23110 CVE-2026-28928 · GHSA-pm9m-mp3j-hf4x

Use after free in Apple iOS and iPadOS

Priority MEDIUM 50

A use after free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00588 Published 2026-07-27 Fixed in 26.6 CWE-416
Load more