MA
Operating System
macOS
On CISA KEVExploited in the wildRansomware-linked
3,597
CVEs
79
On KEV
10.0
Max CVSS
336
New 30D
Severity mix
Critical 234High 255Medium 11Low 0
Watch
Add macOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-8605 In wildKEV | 7.8 | Dec 18 | Apple Multiple Products Use-After-Free Vulnerability Affected: before macOS Mojave 10.14.5 |
| CVE-2019-8526 In wildKEV | 7.8 | Dec 18 | Apple macOS Use-After-Free Vulnerability Affected: before macOS Mojave 10.14.4 |
| CVE-2019-7286 In wildKEV | 7.8 | Dec 18 | Apple Multiple Products Memory Corruption Vulnerability Affected: before macOS Mojave 10.14.3 Supplemental Update |
| CVE-2015-1130 In wildKEV | 7.8 | Apr 10 | Apple OS X Authentication Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2014-4404 In wildKEV | 7.8 | Sep 18 | Apple OS X Heap-Based Buffer Overflow Vulnerability Affected: All versions, or not specified |
| CVE-2021-31010 In wildKEV | 7.5 | Aug 24 | Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability Affected: before 11.6; before 2021 |
| CVE-2019-6223 In wildKEV | 7.5 | Mar 5 | Apple iOS and macOS Group Facetime Vulnerability Affected: before macOS Mojave 10.14.3 |
| CVE-2022-48618 In wildKEV | 7.0 | Jan 9 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 13.1 |
| CVE-2021-1782 In wildKEV | 7.0 | Apr 2 | Apple Multiple Products Race Condition Vulnerability Affected: before 11.2; before 7.3; before 14.4 |
| CVE-2026-86929 New | 8.8 | Oct 26 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 15.8.2; before 26.7.2; before 27 |
| CVE-2026-112637 New | 8.8 | Oct 26 | A use-after-free issue was addressed with improved memory management Affected: before 27.2 |
| CVE-2026-112688 New | 8.8 | Oct 26 | A memory corruption issue was addressed with improved memory handling Affected: before 15.8.2; before 26.7.2; before 27.2 |
| CVE-2026-112626 New | 8.8 | Oct 26 | A use-after-free issue was addressed with improved memory management Affected: before 27.2 |
| CVE-2026-112651 New | 8.8 | Oct 26 | A use-after-free issue was addressed with improved memory management Affected: before 27.2 |
| CVE-2026-113947 New | 8.8 | Oct 26 | This issue was addressed with improved access restrictions Affected: before 27.2 |
| CVE-2026-112655 New | 8.8 | Oct 26 | A use-after-free issue was addressed with improved memory management Affected: before 27.2 |
| CVE-2026-112659 New | 8.8 | Oct 26 | A type confusion issue was addressed with improved memory handling Affected: before 27.2 |
| CVE-2026-112623 New | 8.8 | Oct 26 | A use-after-free issue was addressed with improved memory management Affected: before 27.2 |
| CVE-2026-112438 New | 8.8 | Oct 26 | A logic issue was addressed with improved state management Affected: before 15.8.2; before 26.7.2; before 27.2 |
| CVE-2026-64759 New | 8.8 | Oct 26 | An integer overflow was addressed with improved input validation Affected: before 15.8; before 26.7; before 27 |
| CVE-2026-86922 | 8.8 | Oct 20 | A type confusion issue was addressed with improved state management Affected: before 27 |
| CVE-2026-86919 | 8.8 | Oct 20 | A stack overflow was addressed with improved input validation Affected: before 15.8; before 26.7; before 27 |
| CVE-2026-43686 | 8.8 | Sep 14 | A use-after-free issue was addressed with improved memory management Affected: before 15.8; before 26.7; before 27 |
| CVE-2026-84578 | 8.8 | Sep 14 | A logic issue was addressed with improved checks Affected: before 15.8; before 26.7; before 27 |
| CVE-2026-84512 | 8.8 | Sep 14 | A buffer overflow was addressed with improved bounds checking Affected: before 15.8; before 26.7; before 27 |
| CVE-2026-43815 | 8.8 | Sep 14 | A buffer overflow was addressed with improved bounds checking Affected: before 14.8.8; before 15.7.8; before 26.6 |
| CVE-2026-65374 | 8.8 | Sep 14 | A memory corruption issue was addressed with improved validation Affected: before 15.8; before 26.7; before 27 |
| CVE-2026-43692 | 8.8 | Sep 14 | A validation issue was addressed with improved input sanitization Affected: before 15.8; before 26.7; before 27 |
| CVE-2026-65391 | 8.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.6.2 |
| CVE-2026-65390 | 8.8 | Sep 14 | An integer overflow was addressed with improved input validation Affected: before 26.6.2 |
| CVE-2026-43670 | 8.8 | Aug 25 | A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts Affected: before 26.5 |
| CVE-2026-43794 | 8.8 | Aug 17 | A memory corruption issue was addressed with improved memory handling Affected: before 26.6.2 |
| CVE-2026-65346 | 8.8 | Aug 17 | An integer overflow was addressed with improved input validation Affected: before 15.8; before 26.6.2 |
| CVE-2026-64783 | 8.8 | Jul 27 | A use-after-free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-64757 | 8.8 | Jul 27 | A memory corruption issue was addressed with improved state management Affected: before 26.6 |
| CVE-2026-28931 | 8.8 | Jul 27 | A buffer overflow was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-43818 | 8.8 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 14.8.8; before 15.7.8; before 26.6 |
| CVE-2026-64739 | 8.8 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 14.8.8; before 15.7.8; before 26.6 |
| CVE-2026-43731 | 8.8 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 26.5.2 |
| CVE-2026-43705 | 8.8 | Jun 29 | A type confusion issue was addressed with improved checks Affected: before 26.5.2 |
| CVE-2026-43715 | 8.8 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 26.5.2 |
| CVE-2025-24284 | 8.8 | Jun 11 | This issue was addressed with improved checks to prevent unauthorized actions Affected: before 15.4 |
| CVE-2025-43524 | 8.8 | May 12 | An access issue was addressed with additional sandbox restrictions Affected: 14.0 before 14.8.7; 15.0 before 15.7.7; 26.0 before 26.2 |
| CVE-2026-28995 | 8.8 | May 11 | A logic issue was addressed with improved restrictions Affected: before 14.8.4; before 15.7.4; before 26.5 |
| CVE-2026-28940 | 8.8 | May 11 | The issue was addressed with improved memory handling Affected: before 15.7.7; before 26.5 |
| CVE-2026-28947 | 8.8 | May 11 | A use-after-free issue was addressed with improved memory management Affected: before 26.5 |
| CVE-2026-28923 | 8.8 | May 11 | A logging issue was addressed with improved data redaction Affected: before 14.8.7; before 15.7.7; before 26.5 |
| CVE-2026-28978 | 8.8 | May 11 | A permissions issue was addressed with additional restrictions Affected: before 14.8.7; before 15.7.7; before 26.5 |
| CVE-2026-28847 | 8.8 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-28955 | 8.8 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
The 500 most important CVEs for this product (exploited first, then by severity)