Known vulnerabilities in macOS - page 10

Vendor: Apple Inc.
Software: macOS
Software CPE: cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Total vulnerabilities: 3367
Public exploits: 126
Known exploited (KEV): 83
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting macOS macOS is affected by 3367 known vulnerabilities: 39 critical, 535 high, 533 medium, 2260 low Critical High Medium Low

Vulnerabilities (3367)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124406 - Exposure of sensitive information to an unauthorized actor
CVE-2026-20691
CWE-200 Medium
No
No
26.4 25E246 25.03.2026 SB2026032503
SB2026032504
SB2026032505
and 20 more
#VU124405 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-28871
CWE-79 Medium
No
No
26.4 25E246 25.03.2026 SB2026032503
SB2026032504
SB2026032505
and 18 more
#VU124404 - Permissions, Privileges, and Access Controls
CVE-2026-28833
CWE-264 Low
No
No
26.4 25E246 25.03.2026 SB2026032504
SB2026032514
SB2026032541
#VU124402 - Memory corruption
CVE-2026-28859
CWE-119 High
No
No
26.4 25E246 25.03.2026 SB2026032503
SB2026032504
SB2026032505
and 21 more
#VU124401 - State Issues
CVE-2026-28861
CWE-371 Low
No
No
26.4 25E246 25.03.2026 SB2026032503
SB2026032504
SB2026032505
and 8 more
#VU124400 - State Issues
CVE-2026-20665
CWE-371 High
No
No
26.4 25E246 25.03.2026 SB2026032503
SB2026032504
SB2026032505
and 22 more
#VU124389 - Improper input validation
CVE-2026-28841
CWE-20 Low
No
No
26.4 25E246 25.03.2026 SB2026032504
#VU124388 - Exposure of sensitive information to an unauthorized actor
CVE-2026-28881
CWE-200 Low
No
No
26.4 25E246 25.03.2026 SB2026032504
#VU124387 - Exposure of sensitive information to an unauthorized actor
CVE-2026-28870
CWE-200 Low
No
No
26.4 25E246 25.03.2026 SB2026032504
SB2026032514
SB2026032539
and 3 more
#VU124386 - Memory corruption
CVE-2026-28857
CWE-119 Low
No
No
26.4 25E246 25.03.2026 SB2026032503
SB2026032504
SB2026032505
and 19 more
#VU124385 - Memory corruption
CVE-2026-20664
CWE-119 Low
No
No
26.4 25E246 25.03.2026 SB2026032503
SB2026032504
SB2026032505
and 19 more
#VU124381 - Improper input validation
CVE-2026-28844
CWE-20 Low
No
No
26.4 25E246 25.03.2026 SB2026032504
#VU124380 - Improper Access Control
CVE-2026-28837
CWE-284 Low
No
No
26.4 25E246 25.03.2026 SB2026032504
#VU124379 - Improper Access Control
CVE-2026-28820
CWE-284 Low
No
No
26.4 25E246 25.03.2026 SB2026032504
#VU124364 - State Issues
CVE-2026-28845
CWE-371 Low
No
No
26.4 25E246 25.03.2026 SB2026032504
#VU124362 - Exposure of sensitive information to an unauthorized actor
CVE-2026-28893
CWE-200 Low
No
No
26.4 25E246 25.03.2026 SB2026032504
#VU124361 - Memory corruption
CVE-2026-20698
CWE-119 Low
No
No
26.4 25E246 25.03.2026 SB2026032504
SB2026032514
SB2026032539
and 2 more
#VU124359 - Memory corruption
CVE-2026-28842
CWE-119 Low
No
No
26.4 25E246 25.03.2026 SB2026032504
#VU124345 - Permissions, Privileges, and Access Controls
CVE-2026-20684
CWE-264 Low
No
No
26.4 25E246 25.03.2026 SB2026032504
#VU124338 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-28823
CWE-22 Low
No
No
26.4 25E246 25.03.2026 SB2026032504


Showing elements 181 - 200 out of 3367