CVE-2025-46281

CVE-2025-46281 involves a logic issue that could allow an app to break out of its sandbox on macOS Tahoe. The vulnerability is fixed in macOS Tahoe 26.2. Affected component details are centered on sandbox checks; Apple’s advisory and Red Hat/NVD references reiterate the same sandbox-bypass risk w...

CVE-2025-46297

CVE-2025-46297 describes a permissions issue in macOS Tahoe up to 26.1 that could allow an app to access protected files inside an App Sandbox container. The Red Hat and EUVD entries reiterate the same underlying problem. Apple’s security content indicates the fix is in macOS Tahoe 26.2, addressi...

CVE-2025-43278

CVE-2025-43278 affects macOS Sequoia prior to 15.4; the issue arises from improper handling of symlinks and is addressed in macOS Sequoia 15.4. The description notes that an app may be able to access protected user data due to this flaw. According to the connected sources, the vulnerability is mi...

CVE-2025-43404

CVE-2025-43404 is a permissions/sandbox issue in macOS Tahoe that allowed an app to access sensitive user data due to insufficient sandbox restrictions. Multiple sources (NVD, Red Hat, CNVD, RH, etc.) describe a vulnerability resolved in macOS Tahoe 26.1 with the sandbox tightened. The NVD entry ...

CVE-2025-43416

CVE-2025-43416 is a logic-issue vulnerability fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3, and macOS Tahoe 26.2. The issue could allow an app to access protected user data due to insufficient restrictions. Affected components are addressed by these macOS security updates, which implement s...

CVE-2025-43446

CVE-2025-43446 affects macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1 (and related builds). The issue stems from insufficient validation of symbolic links, enabling an app to modify protected parts of the filesystem. The CVE is mitigated by patches in the listed OS versions (Sono...

CVE-2025-43471

CVE-2025-43471 affects macOS Tahoe before 26.1, with the issue described as an access to sensitive user data due to insufficient or improved checks. Apple’s security content for macOS Tahoe 26.1 attributes the fix to the Admin Framework and states: “The issue was addressed with improved checks” a...

CVE-2025-43473

CVE-2025-43473 affects macOS Tahoe 26.1 and earlier, where an issue with improved state management could allow an app to access sensitive user data. The vulnerability is fixed in macOS Tahoe 26.1. Impact is described as local access with high confidentiality impact and no integrity/availability i...

CVE-2025-43288

The CVE-2025-43288 issue affects macOS Sequoia and is tied to Archive Utility’s handling of symlinks. The vulnerability could allow an app to bypass Privacy preferences due to insufficient validation of symbolic links. Apple states the flaw is addressed with improved validation of symlinks and is...

CVE-2025-43481

The CVE-2025-43481 entry affects macOS Sequoia (15.7.2) and macOS Tahoe (26.1). It describes a sandbox-bypass vulnerability in which an app may escape sandbox protections; Apple’s security notes indicate the issue was addressed with improved checks, with the fix shipped in Sequoia 15.7.2 and Taho...

CVE-2025-43527

CVE-2025-43527 is a permissions-related elevation-privilege issue affecting macOS Sequoia 15.7.3 and macOS Tahoe 26.2. The advisory notes that an app may be able to gain root privileges due to insufficient restrictions. Affected products/versions are fixed in Sequoia 15.7.3 and Tahoe 26.2. The av...

CVE-2024-44286

CVE-2024-44286 affects macOS Sequoia 15.1 and earlier, where an attacker with physical access can inject keyboard events into apps running on a locked device. The root cause is described as improved state management. The issue is fixed in macOS Sequoia 15.1. Remediation: update to macOS 15.1 or l...

CVE-2024-44219

CVE-2024-44219 affects macOS Sequoia (15.1) where a permissions issue could allow a malicious application with root privileges to access private information. Public documents confirm the flaw and its fix in Sequoia 15.1; remediation is to upgrade to macOS 15.1 or later. The exact root cause is de...

CVE-2026-84584

CVE-2026-84584 is a sandbox escape vulnerability in macOS Golden Gate 27 , caused by improper handling of symlinks . An app may be able to break out of its sandbox, with a CVSS 3.1 score of 8.4 (HIGH) reflecting local attack vector, low complexity, low privileges required, and changed scope with ...

CVE-2026-84533

CVE-2026-84533 is a cryptographic issue in Apple's operating systems affecting iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, and watchOS 27 . The vulnerability was addressed through improved integrity checks. An attacker in a privileged network position may be able to modify network traffic, ...

CVE-2026-65398

CVE-2026-65398 is an out-of-bounds access vulnerability in Apple's operating systems, addressed with improved bounds checking. An app may be able to cause unexpected system termination or corrupt kernel memory . The flaw affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS , and is fixed in iO...

CVE-2026-65391

CVE-2026-65391 is an out-of-bounds write in Apple's WebKit WebRTC component, tracked as WebKit Bugzilla 322761 . Processing maliciously crafted web content may lead to memory corruption . The issue was fixed with improved bounds checking in Safari 26.6.1 , iOS/iPadOS 26.6.1 , macOS Tahoe 26.6.2 ,...

CVE-2026-86905

CVE-2026-86905 affects the Authentication Services component across iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 . An app may be able to delete credentials stored in Keychain , representing a high-integrity impact with no confidentiality or availability impact. The root cause was addr...

CVE-2026-43688

CVE-2026-43688 is a memory corruption vulnerability in Apple iOS 27, iPadOS 27, and macOS Golden Gate 27 , addressed through improved input validation. Processing a maliciously crafted file may lead to unexpected app termination . The flaw scores CVSS 7.8 (High) with a local attack vector requiri...

CVE-2026-64752

CVE-2026-64752 is a memory corruption vulnerability in Apple's CoreMedia framework, disclosed by researcher Nik Tsytsarkin (Meta Red Team X). The fix removes the vulnerable code entirely. Processing a maliciously crafted image may lead to arbitrary code execution . The vulnerability affects iOS 2...

CVE-2026-64753

CVE-2026-64753 is a permissions issue in WebKit , resolved by removing the vulnerable code. Processing maliciously crafted web content may disclose sensitive user information . The flaw affects Safari 27 , iOS 27 , iPadOS 27 , macOS Golden Gate 27 , tvOS 27 , visionOS 27 , and watchOS 27 , as wel...

CVE-2026-65380

CVE-2026-65380 is a vulnerability in Apple macOS related to improper handling of snapshots , where insufficient permissions logic could allow an app to access protected user data . The issue is fixed in macOS Golden Gate 27 ; the connected NCSC advisory also lists Sequoia 15.8 and Tahoe 26.7 amon...

CVE-2026-84631

CVE-2026-84631 is a privilege escalation vulnerability in macOS Golden Gate 27 where a local application may be able to gain root privileges . The root cause involves insufficient entitlement checks , which were addressed in the fix. The vulnerability has a CVSS 3.1 score of 7.8 (HIGH) with a loc...

CVE-2026-86903

CVE-2026-86903 is an out-of-bounds read in Apple's operating systems, addressed with improved input validation. The affected products are iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 . An application may be able to disclose kernel memory . The vulnerability has a ...

CVE-2026-65352

CVE-2026-65352 is an information disclosure flaw in Apple's Private Relay feature, where a website may be able to determine a user's IP address even with Private Relay enabled. The issue was addressed with improved state management . Fixed versions: iOS 26.6.1 , iPadOS 26.6.1 , macOS Tahoe 26.6.2...

CVE-2026-84520

CVE-2026-84520 affects Apple macOS Golden Gate 27 and involves a buffer overflow addressed with improved size validation. Per the CNA description, a local attacker may cause unexpected system termination or corrupt kernel memory. The CNA-assigned CVSS 3.1 score is 9.8 (CRITICAL) with a network at...

CVE-2026-84558

CVE-2026-84558 is a double free memory management vulnerability in macOS Golden Gate 27 . A malicious app may cause unexpected system termination , representing a denial-of-service impact with no confidentiality or integrity loss. The NVD-assigned CVSS 3.1 score is 5.5 (Medium) with a vector of A...

CVE-2026-84569

CVE-2026-84569 is an access issue in macOS Golden Gate 27 involving the system pasteboards , resolved through additional sandbox restrictions . A malicious app could potentially access sensitive user data from other applications' pasteboard content. The NVD-assigned CVSS 3.1 score is 5.5 (MEDIUM)...

CVE-2026-84588

CVE-2026-84588 is a memory corruption vulnerability in macOS Golden Gate 27 , fixed by removing the vulnerable code. The trigger is mounting a maliciously crafted disk image , which may cause unexpected system termination or kernel memory corruption . The fix removes the vulnerable code path enti...

CVE-2026-84601

CVE-2026-84601 is a permissions issue in the Apple Intelligence component of macOS , addressed with improved state management. The vulnerability allows an app to bypass Apple Intelligence security prompts , resulting in a high integrity impact with no confidentiality or availability impact (CVSS ...

CVE-2026-86894

CVE-2026-86894 is a logic issue in Apple macOS Golden Gate 27 that was resolved with improved checks, allowing a malicious app to break out of its sandbox . Apple assigned a CVSS 3.1 score of 7.5 (High) with a network vector requiring no privileges or user interaction, impacting integrity. The CI...

CVE-2026-84560

CVE-2026-84560 is an authorization flaw in the Bluetooth subsystem of Apple's operating systems, addressed through improved state management. A local app with low privileges may gain unauthorized access to Bluetooth , with high integrity impact and low confidentiality impact (CVSS 6.1, MEDIUM). T...

CVE-2026-84586

CVE-2026-84586 is an information disclosure flaw in the Apple Account component, addressed with improved state management . A malicious application may be able to leak sensitive user information from macOS or watchOS. The issue affects macOS Golden Gate 27 (MacBook Neo 2026, MacBook Air/Pro with ...

CVE-2026-84596

CVE-2026-84596 is an out-of-bounds read in Apple's CoreText framework, fixed with improved bounds checking. It affects iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 . Processing a maliciously crafted font may lead to the disclosure of process memory . The CVSS 3.1 ...

CVE-2026-84606

This privacy vulnerability in Apple products allows an app to identify a user across reinstalls due to improper handling of identifiers. It affects iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 , all of which include the fix. The CVSS 3.1 score is 7.5 (HIGH) , with the primary impact o...

CVE-2026-86897

CVE-2026-86897 is an improper access control vulnerability in the Safe Browsing component of Safari (macOS Sequoia and macOS Tahoe). Due to insufficient entitlement checks, an app may be able to access sensitive user data . Apple addressed the issue by adding additional entitlement checks. The fi...

CVE-2026-43783

CVE-2026-43783 is a race condition in macOS Tahoe that was addressed with improved locking in version 26.6 . A malicious app may be able to gain root privileges . The vulnerability requires local access with low privileges and no user interaction , and has a CVSS 3.1 score of 7.8 (HIGH) with full...

CVE-2026-84522

CVE-2026-84522 is a race condition in macOS Golden Gate 27 where an app may be able to access sensitive user data . The vulnerability was addressed through improved state management. The NVD-assigned CVSS 3.1 score is 5.9 (Medium) , with a network attack vector, high complexity, no required privi...

CVE-2026-84551

CVE-2026-84551 affects Apple's iOS 27 , iPadOS 27 , macOS Golden Gate 27 , visionOS 27 , and watchOS 27 . It stems from a logic issue addressed through improved validation, which may allow an app to bypass network restrictions . The NVD-assigned CVSS 3.1 score is 4.4 (Medium) with a local attack ...

CVE-2026-84589

CVE-2026-84589 is a permissions issue in macOS Golden Gate 27 that could allow an app to modify Privacy preferences . Apple addressed the issue with additional restrictions. The NVD-assigned CVSS v3.1 score is 5.5 (Medium) , reflecting a local attack vector with low complexity, low privileges req...

CVE-2026-84597

CVE-2026-84597 is an out-of-bounds read vulnerability in Apple's FontParser component, addressed with improved input validation. Processing a maliciously crafted font may result in the disclosure of process memory . The issue affects iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, ...

CVE-2026-43788

CVE-2026-43788 is an integer overflow in macOS Golden Gate 27 , addressed with improved input validation . Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents . The vulnerability requires local access , low privileges , and user interactio...

CVE-2026-65353

CVE-2026-65353 is an authorization flaw in Apple's Apple Account component affecting iOS 26.6 , iPadOS 26.6 , and macOS Tahoe 26.6 (iPhone 11 and later, various iPad models, and macOS Tahoe). The root cause was addressed through improved state management , preventing an app from accessing sensiti...

CVE-2026-65393

CVE-2026-65393 is a permissions issue in the Xcode IDE component, available for macOS Tahoe 26.6 and later . The underlying cause was insufficient validation of permissions, which was addressed with improved validation. An application may be able to access user-sensitive data . The fix is availab...

CVE-2026-65415

CVE-2026-65415 is a race condition in Apple's operating systems, addressed with additional validation. The vulnerability affects iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 , all of which contain the fix. A local user may be able to cause unexpected system termin...

CVE-2026-84491

CVE-2026-84491 is a permissions issue in Apple platforms, fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 . An app may be able to access sensitive user data due to insufficient access restrictions. The CVSS 3.1 score is 5.5 (Medium) wi...

CVE-2026-43696

CVE-2026-43696 is an authorization flaw in macOS where an app may be able to capture Touch Bar content without user authorization. The root cause is insufficient entitlement checks, addressed in the fix. The issue is resolved in macOS Golden Gate 27 , which is the recommended remediation. NVD ass...

CVE-2026-43808

CVE-2026-43808 is a use-after-free vulnerability in Apple's operating systems, addressed through improved memory management. The affected products are iOS, iPadOS, macOS (Tahoe), tvOS, and watchOS , all fixed in version 26.6 . The impact is that a local app may be able to cause unexpected system ...

CVE-2026-65390

CVE-2026-65390 is an integer overflow in Safari's WebKit WebRTC component, addressed with improved input validation. Processing maliciously crafted web content may lead to memory corruption . The vulnerability is available for macOS Sonoma and macOS Sequoia , and is fixed in Safari 26.6.1 , iOS 2...

CVE-2026-84518

CVE-2026-84518 is an information disclosure vulnerability in Apple products affecting Safari, iOS, iPadOS, and macOS . The root cause is a flaw in state management , which allowed a malicious website to determine which apps a user has installed. The issue was addressed through improved state mana...