CVE-2025-46281

CVE-2025-46281 involves a logic issue that could allow an app to break out of its sandbox on macOS Tahoe. The vulnerability is fixed in macOS Tahoe 26.2. Affected component details are centered on sandbox checks; Apple’s advisory and Red Hat/NVD references reiterate the same sandbox-bypass risk w...

CVE-2025-46297

CVE-2025-46297 describes a permissions issue in macOS Tahoe up to 26.1 that could allow an app to access protected files inside an App Sandbox container. The Red Hat and EUVD entries reiterate the same underlying problem. Apple’s security content indicates the fix is in macOS Tahoe 26.2, addressi...

CVE-2025-43278

CVE-2025-43278 affects macOS Sequoia prior to 15.4; the issue arises from improper handling of symlinks and is addressed in macOS Sequoia 15.4. The description notes that an app may be able to access protected user data due to this flaw. According to the connected sources, the vulnerability is mi...

CVE-2025-43404

CVE-2025-43404 is a permissions/sandbox issue in macOS Tahoe that allowed an app to access sensitive user data due to insufficient sandbox restrictions. Multiple sources (NVD, Red Hat, CNVD, RH, etc.) describe a vulnerability resolved in macOS Tahoe 26.1 with the sandbox tightened. The NVD entry ...

CVE-2025-43416

CVE-2025-43416 is a logic-issue vulnerability fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3, and macOS Tahoe 26.2. The issue could allow an app to access protected user data due to insufficient restrictions. Affected components are addressed by these macOS security updates, which implement s...

CVE-2025-43446

CVE-2025-43446 affects macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1 (and related builds). The issue stems from insufficient validation of symbolic links, enabling an app to modify protected parts of the filesystem. The CVE is mitigated by patches in the listed OS versions (Sono...

CVE-2025-43471

CVE-2025-43471 affects macOS Tahoe before 26.1, with the issue described as an access to sensitive user data due to insufficient or improved checks. Apple’s security content for macOS Tahoe 26.1 attributes the fix to the Admin Framework and states: “The issue was addressed with improved checks” a...

CVE-2025-43473

CVE-2025-43473 affects macOS Tahoe 26.1 and earlier, where an issue with improved state management could allow an app to access sensitive user data. The vulnerability is fixed in macOS Tahoe 26.1. Impact is described as local access with high confidentiality impact and no integrity/availability i...

CVE-2025-43481

The CVE-2025-43481 entry affects macOS Sequoia (15.7.2) and macOS Tahoe (26.1). It describes a sandbox-bypass vulnerability in which an app may escape sandbox protections; Apple’s security notes indicate the issue was addressed with improved checks, with the fix shipped in Sequoia 15.7.2 and Taho...

CVE-2025-43288

The CVE-2025-43288 issue affects macOS Sequoia and is tied to Archive Utility’s handling of symlinks. The vulnerability could allow an app to bypass Privacy preferences due to insufficient validation of symbolic links. Apple states the flaw is addressed with improved validation of symlinks and is...

CVE-2025-43527

CVE-2025-43527 is a permissions-related elevation-privilege issue affecting macOS Sequoia 15.7.3 and macOS Tahoe 26.2. The advisory notes that an app may be able to gain root privileges due to insufficient restrictions. Affected products/versions are fixed in Sequoia 15.7.3 and Tahoe 26.2. The av...

CVE-2024-44286

CVE-2024-44286 affects macOS Sequoia 15.1 and earlier, where an attacker with physical access can inject keyboard events into apps running on a locked device. The root cause is described as improved state management. The issue is fixed in macOS Sequoia 15.1. Remediation: update to macOS 15.1 or l...

CVE-2024-44219

CVE-2024-44219 affects macOS Sequoia (15.1) where a permissions issue could allow a malicious application with root privileges to access private information. Public documents confirm the flaw and its fix in Sequoia 15.1; remediation is to upgrade to macOS 15.1 or later. The exact root cause is de...

CVE-2026-86869

CVE-2026-86869 is an out-of-bounds write vulnerability in iOS 26.7 , iPadOS 26.7 , and macOS Golden Gate 27 . The root cause is addressed with improved bounds checking. Processing a maliciously crafted image may lead to unexpected app termination , representing a denial-of-service impact. The CVS...

CVE-2026-84584

CVE-2026-84584 is a sandbox escape vulnerability in macOS Golden Gate 27 , caused by improper handling of symlinks . An app may be able to break out of its sandbox, with a CVSS 3.1 score of 8.4 (HIGH) reflecting local attack vector, low complexity, low privileges required, and changed scope with ...

CVE-2026-84533

CVE-2026-84533 is a cryptographic issue in Apple's operating systems affecting iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, and watchOS 27 . The vulnerability was addressed through improved integrity checks. An attacker in a privileged network position may be able to modify network traffic, ...

CVE-2026-64752

CVE-2026-64752 is a memory corruption vulnerability in Apple's CoreMedia framework, disclosed by researcher Nik Tsytsarkin (Meta Red Team X). The fix removes the vulnerable code entirely. Processing a maliciously crafted image may lead to arbitrary code execution . The vulnerability affects iOS 2...

CVE-2026-65398

CVE-2026-65398 is an out-of-bounds access vulnerability in Apple's operating systems, addressed with improved bounds checking. An app may be able to cause unexpected system termination or corrupt kernel memory . The flaw affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS , and is fixed in iO...

CVE-2026-84635

CVE-2026-84635 is a logic issue in WebKit , addressed with improved state management (WebKit Bugzilla 310457, credited to Souta Sugiyama). Processing maliciously crafted web content may lead to an unexpected process termination . Apple confirmed the fix in Safari 27, iOS 27, iPadOS 27, macOS Gold...

CVE-2026-86901

CVE-2026-86901 is an out-of-bounds write vulnerability in Apple macOS related to the handling of exFAT volumes . Mounting a maliciously crafted exFAT volume can lead to unexpected system termination or kernel memory disclosure . The issue was addressed with improved bounds checking and is fixed i...

CVE-2026-86905

CVE-2026-86905 affects the Authentication Services component across iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 . An app may be able to delete credentials stored in Keychain , representing a high-integrity impact with no confidentiality or availability impact. The root cause was addr...

CVE-2026-64753

CVE-2026-64753 is a permissions issue in WebKit , resolved by removing the vulnerable code. Processing maliciously crafted web content may disclose sensitive user information . The flaw affects Safari 27 , iOS 27 , iPadOS 27 , macOS Golden Gate 27 , tvOS 27 , visionOS 27 , and watchOS 27 , as wel...

CVE-2026-65380

CVE-2026-65380 is a vulnerability in Apple macOS related to improper handling of snapshots , where insufficient permissions logic could allow an app to access protected user data . The issue is fixed in macOS Golden Gate 27 ; the connected NCSC advisory also lists Sequoia 15.8 and Tahoe 26.7 amon...

CVE-2026-65391

CVE-2026-65391 is an out-of-bounds write in Apple's WebKit WebRTC component, tracked as WebKit Bugzilla 322761 . Processing maliciously crafted web content may lead to memory corruption . The issue was fixed with improved bounds checking in Safari 26.6.1 , iOS/iPadOS 26.6.1 , macOS Tahoe 26.6.2 ,...

CVE-2026-86903

CVE-2026-86903 is an out-of-bounds read in Apple's operating systems, addressed with improved input validation. The affected products are iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 . An application may be able to disclose kernel memory . The vulnerability has a ...

CVE-2026-43688

CVE-2026-43688 is a memory corruption vulnerability in Apple iOS 27, iPadOS 27, and macOS Golden Gate 27 , addressed through improved input validation. Processing a maliciously crafted file may lead to unexpected app termination . The flaw scores CVSS 7.8 (High) with a local attack vector requiri...

CVE-2026-84520

CVE-2026-84520 affects Apple macOS Golden Gate 27 and involves a buffer overflow addressed with improved size validation. Per the CNA description, a local attacker may cause unexpected system termination or corrupt kernel memory. The CNA-assigned CVSS 3.1 score is 9.8 (CRITICAL) with a network at...

CVE-2026-84569

CVE-2026-84569 is an access issue in macOS Golden Gate 27 involving the system pasteboards , resolved through additional sandbox restrictions . A malicious app could potentially access sensitive user data from other applications' pasteboard content. The NVD-assigned CVSS 3.1 score is 5.5 (MEDIUM)...

CVE-2026-84601

CVE-2026-84601 is a permissions issue in the Apple Intelligence component of macOS , addressed with improved state management. The vulnerability allows an app to bypass Apple Intelligence security prompts , resulting in a high integrity impact with no confidentiality or availability impact (CVSS ...

CVE-2026-84631

CVE-2026-84631 is a privilege escalation vulnerability in macOS Golden Gate 27 where a local application may be able to gain root privileges . The root cause involves insufficient entitlement checks , which were addressed in the fix. The vulnerability has a CVSS 3.1 score of 7.8 (HIGH) with a loc...

CVE-2026-86884

CVE-2026-86884 is a permissions issue in Apple platforms, addressed through additional restrictions . An app may be able to access sensitive user data . The issue is fixed in iOS 27 , iPadOS 27 , macOS Golden Gate 27 , tvOS 27 , and watchOS 27 . The CNA-assigned CVSS 3.1 score is 5.5 (MEDIUM) wit...

CVE-2026-86894

CVE-2026-86894 is a logic issue in Apple macOS Golden Gate 27 that was resolved with improved checks, allowing a malicious app to break out of its sandbox . Apple assigned a CVSS 3.1 score of 7.5 (High) with a network vector requiring no privileges or user interaction, impacting integrity. The CI...

CVE-2026-43783

CVE-2026-43783 is a race condition in macOS Tahoe that was addressed with improved locking in version 26.6 . A malicious app may be able to gain root privileges . The vulnerability requires local access with low privileges and no user interaction , and has a CVSS 3.1 score of 7.8 (HIGH) with full...

CVE-2026-65352

CVE-2026-65352 is an information disclosure flaw in Apple's Private Relay feature, where a website may be able to determine a user's IP address even with Private Relay enabled. The issue was addressed with improved state management . Fixed versions: iOS 26.6.1 , iPadOS 26.6.1 , macOS Tahoe 26.6.2...

CVE-2026-84530

CVE-2026-84530 is an information disclosure vulnerability in Apple operating systems where an app may be able to disclose kernel memory , caused by insufficient memory management. It affects iOS/iPadOS 26.7 , iOS/iPadOS 27 , macOS Golden Gate 27 , macOS Tahoe 26.7 , tvOS 27 , visionOS 27 , and wa...

CVE-2026-84558

CVE-2026-84558 is a double free memory management vulnerability in macOS Golden Gate 27 . A malicious app may cause unexpected system termination , representing a denial-of-service impact with no confidentiality or integrity loss. The NVD-assigned CVSS 3.1 score is 5.5 (Medium) with a vector of A...

CVE-2026-84588

CVE-2026-84588 is a memory corruption vulnerability in macOS Golden Gate 27 , fixed by removing the vulnerable code. The trigger is mounting a maliciously crafted disk image , which may cause unexpected system termination or kernel memory corruption . The fix removes the vulnerable code path enti...

CVE-2026-84589

CVE-2026-84589 is a permissions issue in macOS Golden Gate 27 that could allow an app to modify Privacy preferences . Apple addressed the issue with additional restrictions. The NVD-assigned CVSS v3.1 score is 5.5 (Medium) , reflecting a local attack vector with low complexity, low privileges req...

CVE-2026-65354

CVE-2026-65354 is a permissions issue in Apple's iOS 27, iPadOS 27, and macOS Golden Gate 27 that allows a malicious app to break out of its sandbox . The vulnerability was addressed with additional restrictions. The CVSS 3.1 score is 8.2 (HIGH) with a local attack vector, low complexity, and req...

CVE-2026-84560

CVE-2026-84560 is an authorization flaw in the Bluetooth subsystem of Apple's operating systems, addressed through improved state management. A local app with low privileges may gain unauthorized access to Bluetooth , with high integrity impact and low confidentiality impact (CVSS 6.1, MEDIUM). T...

CVE-2026-84586

CVE-2026-84586 is an information disclosure flaw in the Apple Account component, addressed with improved state management . A malicious application may be able to leak sensitive user information from macOS or watchOS. The issue affects macOS Golden Gate 27 (MacBook Neo 2026, MacBook Air/Pro with ...

CVE-2026-84596

CVE-2026-84596 is an out-of-bounds read in Apple's CoreText framework, fixed with improved bounds checking. It affects iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 . Processing a maliciously crafted font may lead to the disclosure of process memory . The CVSS 3.1 ...

CVE-2026-84600

CVE-2026-84600 is an authorization issue in Apple's Shortcuts feature, addressed through improved state management. A malicious shortcut may be able to send messages without user confirmation , allowing an attacker with network access (requiring user interaction) to achieve low-impact confidentia...

CVE-2026-84606

This privacy vulnerability in Apple products allows an app to identify a user across reinstalls due to improper handling of identifiers. It affects iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 , all of which include the fix. The CVSS 3.1 score is 7.5 (HIGH) , with the primary impact o...

CVE-2026-86897

CVE-2026-86897 is an improper access control vulnerability in the Safe Browsing component of Safari (macOS Sequoia and macOS Tahoe). Due to insufficient entitlement checks, an app may be able to access sensitive user data . Apple addressed the issue by adding additional entitlement checks. The fi...

CVE-2026-28836

CVE-2026-28836 is a correctness issue in macOS Sonoma , fixed in version 14.8.8 . An attacker with physical access to a device may be able to silently persist an Apple Account on an erased device , resulting in high confidentiality and integrity impact with no availability impact. The underlying ...

CVE-2026-65393

CVE-2026-65393 is a permissions issue in the Xcode IDE component, available for macOS Tahoe 26.6 and later . The underlying cause was insufficient validation of permissions, which was addressed with improved validation. An application may be able to access user-sensitive data . The fix is availab...

CVE-2026-84522

CVE-2026-84522 is a race condition in macOS Golden Gate 27 where an app may be able to access sensitive user data . The vulnerability was addressed through improved state management. The NVD-assigned CVSS 3.1 score is 5.9 (Medium) , with a network attack vector, high complexity, no required privi...

CVE-2026-84531

CVE-2026-84531 is an out-of-bounds write vulnerability in Apple iOS 27, iPadOS 27, and macOS Golden Gate 27 , addressed with improved bounds checking. The root cause involves improper handling of maliciously crafted NTLM input , which may lead to unexpected app termination (denial of service). Th...

CVE-2026-84551

CVE-2026-84551 affects Apple's iOS 27 , iPadOS 27 , macOS Golden Gate 27 , visionOS 27 , and watchOS 27 . It stems from a logic issue addressed through improved validation, which may allow an app to bypass network restrictions . The NVD-assigned CVSS 3.1 score is 4.4 (Medium) with a local attack ...