Skip to content

Known vulnerabilities in Apple macOS

Is your version affected?

CVE Summary Score Published
CVE-2026-28954 A file quarantine bypass was addressed with additional checks 7.5 High May 11, 2026
CVE-2026-28903 The issue was addressed with improved memory handling 6.5 Medium May 11, 2026
CVE-2026-28846 A buffer overflow was addressed with improved bounds checking 7.5 High May 11, 2026
CVE-2026-28915 A parsing issue in the handling of directory paths was addressed with improved path validation 7.8 High May 11, 2026
CVE-2026-28942 A use-after-free issue was addressed with improved memory management 6.5 Medium May 11, 2026
CVE-2026-28978 A permissions issue was addressed with additional restrictions 8.8 High May 11, 2026
CVE-2026-28996 A race condition was addressed with additional validation 5.5 Medium May 11, 2026
CVE-2026-28943 A logging issue was addressed with improved data redaction 7.5 High May 11, 2026
CVE-2026-28914 A logic issue was addressed with improved file handling 5.5 Medium May 11, 2026
CVE-2026-43666 An out-of-bounds write issue was addressed with improved bounds checking 6.2 Medium May 11, 2026
CVE-2026-28902 The issue was addressed with improved memory handling 6.5 Medium May 11, 2026
CVE-2026-28847 The issue was addressed with improved memory handling 8.8 High May 11, 2026
CVE-2026-28955 The issue was addressed with improved memory handling 8.8 High May 11, 2026
CVE-2026-28922 This issue was addressed through improved state management 6.5 Medium May 11, 2026
CVE-2026-28830 A race condition was addressed with additional validation 4.7 Medium May 11, 2026
CVE-2026-28918 An out-of-bounds access issue was addressed with improved bounds checking 6.5 Medium May 11, 2026
CVE-2026-39870 The issue was addressed with improved memory handling 7.5 High May 11, 2026
CVE-2026-28959 A buffer overflow was addressed with improved bounds checking 7.5 High May 11, 2026
CVE-2026-28909 Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry… 6.5 Medium Apr 30, 2026
CVE-2026-28815 A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C… 7.5 High Apr 3, 2026
CVE-2025-43236 A type confusion issue was addressed with improved memory handling 3.3 Low Apr 2, 2026
CVE-2025-43257 This issue was addressed with improved handling of symlinks 8.7 High Apr 2, 2026
CVE-2024-40849 A race condition was addressed with additional validation 7.5 High Apr 2, 2026
CVE-2024-44303 The issue was addressed with improved checks 7.5 High Apr 2, 2026
CVE-2025-43210 An out-of-bounds access issue was addressed with improved bounds checking 6.3 Medium Apr 2, 2026

Other Apple products