Known vulnerabilities in macOS 26.0 25A354 - page 22

Vendor: Apple Inc.
Software: macOS
Version: 26.0 25A354
Software CPE: cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Total vulnerabilities: 609
Public exploits: 10
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting macOS version 26.0 25A354 macOS 26.0 25A354 is affected by 609 vulnerabilities: 2 critical, 20 high, 94 medium, 493 low Critical High Medium Low

Vulnerabilities (609)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124438 - Permissions, Privileges, and Access Controls
CVE-2026-20622
CWE-264 Low
No
No
26.3 25D125, 15.7.4 24G517 25.03.2026 SB2026021188
SB2026021189
#VU124437 - Permissions, Privileges, and Access Controls
CVE-2026-28855
CWE-264 Low
No
No
26.3 25D125 25.03.2026 SB2026021188
SB2026021194
#VU124435 - State Issues
CVE-2026-20670
CWE-371 Low
No
No
14.8.4 23J319, 26.3 25D125 25.03.2026 SB2026021190
SB2026021188
#VU124410 - Improper input validation
CVE-2026-20651
CWE-20 Low
No
No
15.7.5 24G624, 14.8.4 23J319, 26.3 25D125 25.03.2026 SB2026032506
SB2026021190
SB2026021188
#VU124408 - Integer overflow
CVE-2026-20639
CWE-190 Low
No
No
15.7.5 24G624, 14.8.5 23J423, 26.3 25D125 25.03.2026 SB2026032506
SB2026032507
SB2026021188
#VU124409 - Information Exposure Through Log Files
CVE-2026-20668
CWE-532 Low
No
No
15.7.5 24G624, 14.8.5 23J423, 26.3 25D125 25.03.2026 SB2026032506
SB2026032507
SB2026032509
and 3 more
#VU124407 - Use After Free
CVE-2026-20637
CWE-416 Low
No
No
15.7.5 24G624, 14.8.5 23J423, 26.3 25D125 25.03.2026 SB2026032506
SB2026032507
SB2026032509
and 5 more
#VU122712 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-20677
CWE-362 Low
No
No
26.3 25D125, 14.8.4 23J319 11.02.2026 SB2026021188
SB2026021190
SB2026021191
and 2 more
#VU122711 - Protection Mechanism Failure
CVE-2026-20673
CWE-693 Medium
No
No
26.3 25D125, 14.8.4 23J319, 15.7.4 24G517 11.02.2026 SB2026021188
SB2026021189
SB2026021190
and 1 more
#VU122710 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2026-20671
CWE-300 Medium
No
No
26.3 25D125, 14.8.4 23J319, 15.7.4 24G517 11.02.2026 SB2026021188
SB2026021189
SB2026021190
and 5 more
#VU122709 - Out-of-bounds read
CVE-2026-20620
CWE-125 Low
No
No
26.3 25D125, 14.8.4 23J319, 15.7.4 24G517 11.02.2026 SB2026021188
SB2026021189
SB2026021190
#VU122687 - Improper Access Control
CVE-2026-20667
CWE-284 Low
No
No
26.3 25D125, 14.8.4 23J319, 15.7.4 24G517 11.02.2026 SB2026021188
SB2026021189
SB2026021190
and 2 more
#VU122686 - Permissions, Privileges, and Access Controls
CVE-2026-20630
CWE-264 Low
No
No
26.3 25D125 11.02.2026 SB2026021188
#VU122685 - Improper Access Control
CVE-2026-20626
CWE-284 Low
No
No
26.3 25D125, 15.7.4 24G517 11.02.2026 SB2026021188
SB2026021189
SB2026021191
and 1 more
#VU122684 - Memory corruption
CVE-2026-20654
CWE-119 Low
No
No
26.3 25D125 11.02.2026 SB2026021188
SB2026021191
SB2026021192
and 2 more
#VU122683 - Out-of-bounds read
CVE-2026-20634
CWE-125 Medium
No
No
26.3 25D125, 14.8.4 23J319, 15.7.4 24G517 11.02.2026 SB2026021188
SB2026021189
SB2026021190
and 5 more
#VU122682 - Integer overflow
CVE-2026-20675
CWE-190 High
No
No
26.3 25D125, 14.8.4 23J319, 15.7.4 24G517 11.02.2026 SB2026021188
SB2026021189
SB2026021190
and 5 more
#VU119943 - Permissions, Privileges, and Access Controls
CVE-2025-43516
CWE-264 Low
No
No
26.2 25C56, 14.8.3 23J220, 15.7.3 24G419 13.12.2025 SB2025121304
SB2025121308
SB2025121311
#VU119927 - Improper input validation
CVE-2025-43410
CWE-20 Low
No
No
26.2 25C56, 14.8.2 23J126, 15.7.2 24G325 13.12.2025 SB2025121304
SB2025110423
SB2025110424
#VU115751 - Resource exhaustion
CVE-2025-59375
CWE-400 Medium
No
No
14.8.4 23J319, 15.7.4 24G517, 26.3 25D125 17.09.2025 SB2025091783
SB2025091789
SB2025091790
and 107 more


Showing elements 421 - 440 out of 609