Known vulnerabilities in macOS 26.2 25C56 - page 21

Vendor: Apple Inc.
Software: macOS
Version: 26.2 25C56
Software CPE: cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Total vulnerabilities: 440
Public exploits: 7
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting macOS version 26.2 25C56 macOS 26.2 25C56 is affected by 440 vulnerabilities: 2 critical, 15 high, 75 medium, 348 low Critical High Medium Low

Vulnerabilities (440)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122707 - Permissions, Privileges, and Access Controls
CVE-2026-20601
CWE-264 Low
No
No
26.3 25D125 11.02.2026 SB2026021188
#VU122706 - Memory corruption
CVE-2026-20700
CWE-119 High
No
Exploited
26.3 25D125 11.02.2026 SB2026021188
SB2026021191
SB2026021192
and 2 more
#VU122705 - Improper input validation
CVE-2026-20650
CWE-20 Low
No
No
26.3 25D125 11.02.2026 SB2026021188
SB2026021191
SB2026021192
and 2 more
#VU122704 - Improper input validation
CVE-2026-20602
CWE-20 Low
No
No
26.3 25D125, 14.8.4 23J319, 15.7.4 24G517 11.02.2026 SB2026021188
SB2026021189
SB2026021190
#VU122691 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-20614
CWE-22 Low
No
No
26.3 25D125, 14.8.4 23J319, 15.7.4 24G517 11.02.2026 SB2026021188
SB2026021189
SB2026021190
#VU122689 - Exposure of sensitive information to an unauthorized actor
CVE-2026-20603
CWE-200 Low
No
No
26.3 25D125 11.02.2026 SB2026021188
#VU122688 - Out-of-bounds write
CVE-2026-20616
CWE-787 High
No
No
26.3 25D125, 14.8.4 23J319 11.02.2026 SB2026021188
SB2026021190
SB2026021191
and 1 more
#VU122680 - Improper input validation
CVE-2026-20629
CWE-20 Low
No
No
26.3 25D125 11.02.2026 SB2026021188
#VU122679 - Improper input validation
CVE-2026-20627
CWE-20 Low
No
No
26.3 25D125, 14.8.4 23J319 11.02.2026 SB2026021188
SB2026021190
SB2026021191
and 2 more
#VU122678 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-20615
CWE-22 Low
No
No
26.3 25D125, 14.8.4 23J319 11.02.2026 SB2026021188
SB2026021190
SB2026021191
and 1 more
#VU122677 - State Issues
CVE-2026-20617
CWE-371 Low
No
No
26.3 25D125, 14.8.4 23J319 11.02.2026 SB2026021188
SB2026021190
SB2026021191
and 3 more
#VU122676 - Memory corruption
CVE-2026-20609
CWE-119 Medium
No
No
26.3 25D125, 14.8.4 23J319, 15.7.4 24G517 11.02.2026 SB2026021188
SB2026021189
SB2026021190
and 5 more
#VU122675 - Out-of-bounds write
CVE-2026-20611
CWE-787 High
No
No
26.3 25D125, 14.8.4 23J319, 15.7.4 24G517 11.02.2026 SB2026021188
SB2026021189
SB2026021190
and 5 more
#VU122668 - Information Exposure Through Log Files
CVE-2026-20681
CWE-532 Low
No
No
26.3 25D125 11.02.2026 SB2026021188
#VU122667 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-20660
CWE-22 Low
No
No
26.3 25D125, 14.8.4 23J319, 15.7.5 24G624 11.02.2026 SB2026021188
SB2026021190
SB2026021191
and 4 more
#VU122666 - Improper input validation
CVE-2026-20624
CWE-20 Low
No
No
26.3 25D125, 14.8.4 23J319, 15.7.4 24G517 11.02.2026 SB2026021188
SB2026021189
SB2026021190
#VU122665 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-20625
CWE-22 Low
No
No
26.3 25D125, 14.8.4 23J319, 15.7.4 24G517 11.02.2026 SB2026021188
SB2026021189
SB2026021190
and 1 more
#VU122664 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-20669
CWE-22 Low
No
No
26.3 25D125 11.02.2026 SB2026021188
#VU119902 - Use After Free
CVE-2025-43529
CWE-416 Critical
Public exploit available
Exploited
26.2 25C56, 26.3 25D125 13.12.2025 SB2025121301
SB2025121303
SB2025121304
and 29 more
#VU119833 - Out-of-bounds write
CVE-2025-14174
CWE-787 Critical
Public exploit available
Exploited
26.2 25C56, 26.3 25D125 11.12.2025 SB2025121118
SB2025121301
SB2025121303
and 21 more


Showing elements 401 - 420 out of 440