Known vulnerabilities in macOS 26.3.2 (a) 25D771400a - page 23

Vendor: Apple Inc.
Software: macOS
Version: 26.3.2 (a) 25D771400a
Software CPE: cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Total vulnerabilities: 524
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting macOS version 26.3.2 (a) 25D771400a macOS 26.3.2 (a) 25D771400a is affected by 524 vulnerabilities: 17 high, 83 medium, 424 low Critical High Medium Low

Vulnerabilities (524)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131092 - Out-of-bounds read
CVE-2026-28920
CWE-125 Medium
No
No
26.5 25F71, 14.8.7 23J520, 15.7.7 24G720 12.05.2026 SB2026051205
SB2026051209
SB2026051210
and 5 more
#VU131039 - Improper input validation
CVE-2026-28952
CWE-20 Low
No
No
26.5 25F71, 14.8.7 23J520, 15.7.7 24G720 12.05.2026 SB2026051205
SB2026051209
SB2026051210
and 1 more
#VU131037 - Improper Access Control
CVE-2026-28954
CWE-284 Low
No
No
26.5 25F71, 14.8.7 23J520, 15.7.7 24G720 12.05.2026 SB2026051205
SB2026051209
SB2026051210
and 1 more
#VU131038 - Improper input validation
CVE-2026-28897
CWE-20 Low
No
No
26.5 25F71, 14.8.7 23J520, 15.7.7 24G720 12.05.2026 SB2026051205
SB2026051209
SB2026051210
and 5 more
#VU131036 - Improper input validation
CVE-2026-28908
CWE-20 Low
No
No
26.5 25F71, 14.8.7 23J520, 15.7.7 24G720 12.05.2026 SB2026051205
SB2026051209
SB2026051210
#VU131035 - Memory corruption
CVE-2026-43654
CWE-119 Low
No
No
26.5 25F71, 14.8.7 23J520, 15.7.7 24G720 12.05.2026 SB2026051205
SB2026051209
SB2026051210
and 5 more
#VU131034 - Memory corruption
CVE-2026-43655
CWE-119 Low
No
No
26.5 25F71 12.05.2026 SB2026051205
SB2026051215
SB2026051216
and 1 more
#VU124398 - Exposure of sensitive information to an unauthorized actor
CVE-2026-28864
CWE-200 Low
No
No
26.4 25E246, 14.8.5 23J423, 15.7.5 24G624 25.03.2026 SB2026032504
SB2026032506
SB2026032507
and 4 more
#VU124397 - State Issues
CVE-2026-28817
CWE-371 Low
No
No
26.4 25E246, 14.8.5 23J423, 15.7.5 24G624 25.03.2026 SB2026032504
SB2026032506
SB2026032507
#VU124396 - State Issues
CVE-2026-20693
CWE-371 Low
No
No
26.4 25E246, 14.8.5 23J423, 15.7.5 24G624 25.03.2026 SB2026032504
SB2026032506
SB2026032507
#VU124395 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-28816
CWE-22 Low
No
No
26.4 25E246, 14.8.5 23J423, 15.7.5 24G624 25.03.2026 SB2026032504
SB2026032506
SB2026032507
#VU124394 - Improper Privilege Management
CVE-2026-28891
CWE-269 Low
No
No
26.4 25E246, 14.8.5 23J423, 15.7.5 24G624 25.03.2026 SB2026032504
SB2026032506
SB2026032507
#VU124393 - Improper Access Control
CVE-2026-20701
CWE-284 Low
No
No
26.4 25E246, 14.8.5 23J423, 15.7.5 24G624 25.03.2026 SB2026032504
SB2026032506
SB2026032507
#VU124376 - Out-of-bounds write
CVE-2026-28825
CWE-787 Low
No
No
26.4 25E246, 14.8.5 23J423, 15.7.5 24G624 25.03.2026 SB2026032504
SB2026032506
SB2026032507
#VU124375 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-20688
CWE-22 Low
No
No
26.4 25E246, 14.8.5 23J423, 15.7.5 24G624 25.03.2026 SB2026032504
SB2026032506
SB2026032507
and 2 more
#VU124374 - State Issues
CVE-2026-28831
CWE-371 Low
No
No
26.4 25E246, 14.8.5 23J423, 15.7.5 24G624 25.03.2026 SB2026032504
SB2026032506
SB2026032507
#VU124373 - Information Exposure Through Log Files
CVE-2026-28862
CWE-532 Low
No
No
26.4 25E246, 14.8.5 23J423, 15.7.5 24G624 25.03.2026 SB2026032504
SB2026032506
SB2026032507
#VU124372 - Improper Access Control
CVE-2026-20631
CWE-284 Low
No
No
26.4 25E246 25.03.2026 SB2026032504
#VU124371 - Improper Access Control
CVE-2026-28826
CWE-284 Low
No
No
26.4 25E246 25.03.2026 SB2026032504
#VU124369 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-28827
CWE-22 Low
No
No
26.4 25E246, 14.8.5 23J423, 15.7.5 24G624 25.03.2026 SB2026032504
SB2026032506
SB2026032507


Showing elements 441 - 460 out of 524