Known vulnerabilities in macOS

Vendor: Apple Inc.
Software: macOS
Software CPE: cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Total vulnerabilities: 3775
Public exploits: 130
Known exploited (KEV): 84
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting macOS macOS is affected by 3775 known vulnerabilities: 39 critical, 549 high, 583 medium, 2604 low Critical High Medium Low

Vulnerabilities (3775)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU149920 - Improper Authorization
CVE-2026-86905
CWE-285 Low
No
No
27.0 26A428 15.09.2026 SB2026091504
SB2026091557
SB2026091575
#VU149919 - Protection Mechanism Failure
CVE-2026-84601
CWE-693 Low
No
No
27.0 26A428 15.09.2026 SB2026091504
#VU149918 - Exposure of sensitive information to an unauthorized actor
CVE-2026-84586
CWE-200 Low
No
No
27.0 26A428 15.09.2026 SB2026091504
SB2026091576
#VU149917 - Improper Authorization
CVE-2026-65404
CWE-285 Low
No
No
27.0 26A428, 14.8.8 23J620, 15.7.8 24G824 15.09.2026 SB2026091504
SB2026091557
SB2026081774
and 1 more
#VU149882 - Improper Access Control
CVE-2026-84569
CWE-284 Low
No
No
27.0 26A428 15.09.2026 SB2026091504
#VU149881 - Improper input validation
CVE-2026-84597
CWE-20 Medium
No
No
27.0 26A428 15.09.2026 SB2026091504
SB2026091557
SB2026091575
and 2 more
#VU149879 - Improper input validation
CVE-2026-86900
CWE-20 Low
No
No
27.0 26A428 15.09.2026 SB2026091504
#VU149880 - Improper input validation
CVE-2026-43688
CWE-20 Low
No
No
27.0 26A428 15.09.2026 SB2026091504
SB2026091557
#VU149878 - Out-of-bounds write
CVE-2026-86901
CWE-787 Low
No
No
27.0 26A428 15.09.2026 SB2026091504
#VU149877 - Memory corruption
CVE-2026-84571
CWE-119 Low
No
No
27.0 26A428 15.09.2026 SB2026091504
SB2026091557
SB2026091575
and 2 more
#VU149876 - Memory corruption
CVE-2026-84489
CWE-119 Low
No
No
27.0 26A428, 14.8.8 23J620, 15.7.8 24G824 15.09.2026 SB2026091504
SB2026091557
SB2026081774
and 1 more
#VU149875 - Memory corruption
CVE-2026-84596
CWE-119 Medium
No
No
27.0 26A428 15.09.2026 SB2026091504
SB2026091557
SB2026091575
and 2 more
#VU149874 - Improper input validation
CVE-2026-64752
CWE-20 Medium
No
No
27.0 26A428 15.09.2026 SB2026091504
SB2026091557
SB2026091575
#VU149873 - Improper Access Control
CVE-2026-84631
CWE-284 Low
No
No
27.0 26A428 15.09.2026 SB2026091504
#VU149872 - State Issues
CVE-2026-84560
CWE-371 Low
No
No
27.0 26A428 15.09.2026 SB2026091504
SB2026091557
SB2026091575
and 2 more
#VU149871 - State Issues
CVE-2026-84522
CWE-371 Low
No
No
27.0 26A428 15.09.2026 SB2026091504
#VU149869 - Improper Privilege Management
CVE-2026-84520
CWE-269 Low
No
No
27.0 26A428 15.09.2026 SB2026091504
#VU149870 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-84584
CWE-59 Low
No
No
27.0 26A428 15.09.2026 SB2026091504
#VU143793 - Memory corruption
CVE-2026-43738
CWE-119 Medium
No
No
15.7.8 24G824, 14.8.8 23J620, 27.0 26A428 17.08.2026 SB2026081773
SB2026081774
SB2026081827
and 2 more
#VU124812 - Heap-based Buffer Overflow
CVE-2026-34979
CWE-122 Medium
No
No
27.0 26A428 02.04.2026 SB2026040206
SB20260417108
SB20260417109
and 12 more


Showing elements 1 - 20 out of 3775