Overview 7,107 matches · 41 in Waratek scope · 4 protected · 147 exploited · 91 CISA KEV · 480 public PoC · 50 EPSS ≥ 0.5
7,107matches
41in Waratek scope0.6%
4protected0.1%
147exploited2.1%
91CISA KEV1.3%
480public PoC6.8%
50EPSS ≥ 0.50.7%
Protected by Waratek
4
0.1%
Rule in development
0
0.0%
Mitigation candidate
1
0.0%
No exploit published
36
0.5%
Outside Waratek scope
43
0.6%
Not applicable
7,023
98.8%
Withdrawn CVE
0
0.0%
blocked by ARMR today
4
0.1%
partly blocked
0
0.0%
not blocked
7,103
99.9%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 1,118 / year
19971
Not applicable1
Medium1
not blocked1
No public exploit1
19980
19998
Not applicable8
High2
Medium6
not blocked8
Working exploit published2
No public exploit6
20007
Not applicable7
High3
Medium1
Low3
not blocked7
Working exploit published2
No public exploit5
200110
No exploit published1
Not applicable9
High5
Low5
not blocked10
No public exploit10
200238
Outside Waratek scope5
Not applicable33
Critical1
High20
Medium16
Low1
not blocked38
Exploited1
Working exploit published5
No public exploit32
200334
Not applicable34
Critical1
High15
Medium15
Low3
not blocked34
Exploited4
Working exploit published5
No public exploit25
200460
Not applicable60
High28
Medium25
Low7
not blocked60
Working exploit published5
No public exploit55
2005116
Not applicable116
Critical1
High43
Medium52
Low20
not blocked116
Working exploit published12
No public exploit104
2006130
No exploit published1
Not applicable129
High43
Medium67
Low20
not blocked130
Working exploit published23
Proof of concept only1
No public exploit106
2007138
No exploit published1
Not applicable137
Critical1
High78
Medium54
Low5
not blocked138
Working exploit published40
No public exploit98
2008116
Not applicable116
Critical1
High55
Medium51
Low9
not blocked116
Working exploit published7
No public exploit109
2009107
Not applicable107
Critical1
High36
Medium67
Low3
not blocked107
Working exploit published15
No public exploit92
2010135
Not applicable135
Critical4
High27
Medium99
Low5
not blocked135
Working exploit published7
No public exploit128
201186
Not applicable86
High13
Medium62
Low11
not blocked86
Exploited1
Working exploit published7
No public exploit78
201245
Not applicable45
Critical1
High10
Medium32
Low2
not blocked45
Exploited1
Proof of concept only2
No public exploit42
201376
Not applicable76
High8
Medium54
Low14
not blocked76
Working exploit published8
No public exploit68
2014180
No exploit published1
Outside Waratek scope1
Not applicable178
Critical2
High60
Medium97
Low21
not blocked180
Exploited3
Working exploit published4
Proof of concept only4
Forecast only1
No public exploit168
2015456
Outside Waratek scope3
Not applicable453
High209
Medium214
Low33
not blocked456
Exploited1
Working exploit published35
Proof of concept only3
No public exploit417
2016268
Outside Waratek scope1
Not applicable267
Critical24
High181
Medium51
Low12
not blocked268
Working exploit published36
Proof of concept only3
Forecast only1
No public exploit228
2017338
No exploit published1
Outside Waratek scope5
Not applicable332
Critical33
High211
Medium79
Low15
not blocked338
Exploited3
Working exploit published50
No public exploit285
2018173
Outside Waratek scope3
Not applicable170
Critical21
High101
Medium51
not blocked173
Exploited3
Working exploit published21
Proof of concept only1
No public exploit148
2019364
Protected by Waratek1
No exploit published2
Outside Waratek scope3
Not applicable358
Critical44
High206
Medium110
Low4
blocked by ARMR today1
not blocked363
Exploited8
Working exploit published29
Proof of concept only12
No public exploit315
2020367
No exploit published4
Outside Waratek scope3
Not applicable360
Critical29
High213
Medium112
Low13
not blocked367
Exploited8
Working exploit published7
Proof of concept only5
No public exploit347
2021551
No exploit published1
Outside Waratek scope5
Not applicable545
Critical28
High318
Medium191
Low14
not blocked551
Exploited23
Working exploit published3
Proof of concept only9
Forecast only6
No public exploit510
2022423
Protected by Waratek1
No exploit published2
Outside Waratek scope6
Not applicable414
Critical47
High228
Medium139
Low9
blocked by ARMR today1
not blocked422
Exploited25
Working exploit published2
Proof of concept only21
Forecast only1
No public exploit374
2023483
Mitigation candidate1
No exploit published13
Outside Waratek scope3
Not applicable466
Critical38
High202
Medium215
Low28
not blocked483
Exploited31
Working exploit published1
Proof of concept only45
No public exploit406
2024593
No exploit published1
Outside Waratek scope3
Not applicable589
Critical33
High220
Medium308
Low32
not blocked593
Exploited8
Working exploit published1
Proof of concept only63
No public exploit521
2025686
Protected by Waratek1
No exploit published4
Outside Waratek scope1
Not applicable680
Critical109
High178
Medium364
Low35
blocked by ARMR today1
not blocked685
Exploited20
Working exploit published1
Proof of concept only49
No public exploit616
20261,118
Protected by Waratek1
No exploit published4
Outside Waratek scope1
Not applicable1,112
Critical93
High426
Medium557
Low42
blocked by ARMR today1
not blocked1,117
Exploited7
Proof of concept only43
No public exploit1,068
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-112543 | High | 2026-10-26 | Not applicable | No public exploit | A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to break out of its sandbox. |
| CVE-2026-112542 | High | 2026-10-26 | Not applicable | No public exploit | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to intercept network traffic. |
| CVE-2026-112541 | High | 2026-10-26 | Not applicable | No public exploit | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges. |
| CVE-2026-112540 | Medium | 2026-10-26 | Not applicable | No public exploit | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to unexpected app termination. |
| CVE-2026-112539 | High | 2026-10-26 | Not applicable | No public exploit | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to read or write to protected files. |
| CVE-2026-112537 | Medium | 2026-10-26 | Not applicable | No public exploit | This issue was addressed with improved data protection. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to read sensitive location information. |
| CVE-2026-112536 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or write kernel memory. |
| CVE-2026-112535 | Medium | 2026-10-26 | Not applicable | No public exploit | A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system. |
| CVE-2026-112534 | High | 2026-10-26 | Not applicable | No public exploit | This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to bypass sandbox restrictions. |
| CVE-2026-112533 | Medium | 2026-10-26 | Not applicable | No public exploit | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data. |
| CVE-2026-112532 | High | 2026-10-26 | Not applicable | No public exploit | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-112531 | High | 2026-10-26 | Not applicable | No public exploit | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination. |
| CVE-2026-112530 | High | 2026-10-26 | Not applicable | No public exploit | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges. |
| CVE-2026-112529 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination. |
| CVE-2026-112526 | Critical | 2026-10-26 | Not applicable | No public exploit | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause unexpected app termination. |
| CVE-2026-112525 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory. |
| CVE-2026-112524 | High | 2026-10-26 | Not applicable | No public exploit | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-112523 | Medium | 2026-10-26 | Not applicable | No public exploit | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access user-sensitive data. |
| CVE-2026-112522 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to unexpected app termination. |
| CVE-2026-112521 | Critical | 2026-10-26 | Not applicable | No public exploit | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A sandboxed process may be able to circumvent sandbox restrictions. |
| CVE-2026-112519 | High | 2026-10-26 | Not applicable | No public exploit | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Connecting to a malicious VNC server may cause a denial-of-service. |
| CVE-2026-112518 | Medium | 2026-10-26 | Not applicable | No public exploit | An issue with signature validation was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker in a privileged network position may be able to impersonate a Kerberos KDC. |
| CVE-2026-112517 | High | 2026-10-26 | Not applicable | No public exploit | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-112516 | Medium | 2026-10-26 | Not applicable | No public exploit | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination. |
| CVE-2026-112515 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker may be able to cause unexpected system termination or read kernel memory. |
| CVE-2026-112514 | Critical | 2026-10-26 | Not applicable | No public exploit | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker may be able to cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-112513 | High | 2026-10-26 | Not applicable | No public exploit | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Golden Gate 27.2. An app may be able to break out of its sandbox. |
| CVE-2026-112512 | Medium | 2026-10-26 | Not applicable | No public exploit | A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to bypass Gatekeeper checks. |
| CVE-2026-112511 | Medium | 2026-10-26 | Not applicable | No public exploit | A path handling issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious Screen Sharing peer may be able to create arbitrary symlinks as root. |
| CVE-2026-112510 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause a denial-of-service. |
| CVE-2026-112508 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory. |
| CVE-2026-112506 | Medium | 2026-10-26 | Not applicable | No public exploit | A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user data. |
| CVE-2026-112505 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious Screen Sharing peer may be able to corrupt process memory. |
| CVE-2026-112504 | Medium | 2026-10-26 | Not applicable | No public exploit | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system. |
| CVE-2026-112502 | High | 2026-10-26 | Not applicable | No public exploit | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause a denial-of-service. |
| CVE-2026-112501 | Medium | 2026-10-26 | Not applicable | No public exploit | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination. |
| CVE-2026-112500 | Medium | 2026-10-26 | Not applicable | No public exploit | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. The user's original email address may be leaked when using the Hide My Email feature. |
| CVE-2026-112498 | High | 2026-10-26 | Not applicable | No public exploit | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox. |
| CVE-2026-112497 | Critical | 2026-10-26 | Not applicable | No public exploit | This issue was addressed with improved permissions checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox. |
| CVE-2026-112495 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory. |
| CVE-2026-112494 | Medium | 2026-10-26 | Not applicable | No public exploit | A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may bypass Gatekeeper checks. |
| CVE-2026-112493 | High | 2026-10-26 | Not applicable | No public exploit | A downgrade issue was addressed with additional version checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges. |
| CVE-2026-112492 | High | 2026-10-26 | Not applicable | No public exploit | A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges. |
| CVE-2026-112491 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted file may lead to unexpected app termination. |
| CVE-2026-112488 | Medium | 2026-10-26 | Not applicable | No public exploit | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted image may corrupt process memory. |
| CVE-2026-112487 | High | 2026-10-26 | Not applicable | Proof of concept only | A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges. |
| CVE-2026-112486 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a 3D model may lead to unexpected app termination. |
| CVE-2026-112485 | High | 2026-10-26 | Not applicable | No public exploit | The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption. |
| CVE-2026-112484 | High | 2026-10-26 | Not applicable | No public exploit | This issue was addressed with improved file handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application may be able to execute arbitrary code with system privileges. |
| CVE-2026-112483 | Medium | 2026-10-26 | Not applicable | No public exploit | A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system. |
| CVE-2026-112482 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker on the local network may be able to corrupt process memory. |
| CVE-2026-112481 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker on the local network may be able to cause unexpected process termination or disclose process memory. |
| CVE-2026-112480 | High | 2026-10-26 | Not applicable | No public exploit | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A user with screen sharing access may be able to view another user's screen. |
| CVE-2026-112479 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious USB device may be able to cause unexpected system termination or read kernel memory. |
| CVE-2026-112478 | Critical | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory. |
| CVE-2026-112477 | High | 2026-10-26 | Not applicable | No public exploit | A race condition was addressed with improved locking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-112476 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination. |
| CVE-2026-112475 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination. |
| CVE-2026-112474 | High | 2026-10-26 | Not applicable | No public exploit | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or write kernel memory. |
| CVE-2026-112473 | High | 2026-10-26 | Not applicable | No public exploit | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with the legacy VNC password for Screen Sharing may be able to copy files to the Mac. |
| CVE-2026-112471 | Medium | 2026-10-26 | Not applicable | No public exploit | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may lead to unexpected process termination. |
| CVE-2026-112470 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-112469 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-112468 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-112467 | Low | 2026-10-26 | Not applicable | No public exploit | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to bypass network restrictions. |
| CVE-2026-112466 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or read kernel memory. |
| CVE-2026-112464 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted file may lead to heap corruption. |
| CVE-2026-112462 | Low | 2026-10-26 | Not applicable | No public exploit | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application may be able to bypass Privacy preferences. |
| CVE-2026-112461 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption. |
| CVE-2026-112459 | High | 2026-10-26 | Not applicable | No public exploit | A race condition was addressed with improved state handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-112457 | High | 2026-10-26 | Not applicable | No public exploit | A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker on the local network may be able to cause unexpected system termination or corrupt process memory. |
| CVE-2026-112456 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to heap corruption. |
| CVE-2026-112455 | Medium | 2026-10-26 | Not applicable | No public exploit | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data. |
| CVE-2026-112454 | High | 2026-10-26 | Not applicable | No public exploit | The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory. |
| CVE-2026-112453 | High | 2026-10-26 | Not applicable | No public exploit | A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox. |
| CVE-2026-112451 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause a denial-of-service or disclose process memory. |
| CVE-2026-112449 | High | 2026-10-26 | Not applicable | No public exploit | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption. |
| CVE-2026-112447 | Medium | 2026-10-26 | Not applicable | No public exploit | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to bypass Privacy preferences. |
| CVE-2026-112446 | High | 2026-10-26 | Not applicable | No public exploit | This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27, macOS Golden Gate 27.2, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data. |
| CVE-2026-112444 | Medium | 2026-10-26 | Not applicable | No public exploit | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to bypass Gatekeeper checks. |
| CVE-2026-112443 | Critical | 2026-10-26 | Not applicable | No public exploit | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt process memory. |
| CVE-2026-112442 | Medium | 2026-10-26 | Not applicable | No public exploit | A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system. |
| CVE-2026-112441 | Low | 2026-10-26 | Not applicable | No public exploit | This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data. |
| CVE-2026-112438 | High | 2026-10-26 | Not applicable | No public exploit | A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An unprivileged attacker may be able to execute arbitrary code as root. |
| CVE-2026-112437 | High | 2026-10-26 | Not applicable | No public exploit | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges. |
| CVE-2026-112434 | High | 2026-10-26 | Not applicable | No public exploit | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges. |
| CVE-2026-112432 | Medium | 2026-10-26 | Not applicable | No public exploit | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data. |
| CVE-2026-112430 | High | 2026-10-26 | Not applicable | No public exploit | An authentication issue was addressed with improved validation of user attributes. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges. |
| CVE-2026-112429 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may disclose process memory. |
| CVE-2026-112428 | Medium | 2026-10-26 | Not applicable | No public exploit | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may bypass Gatekeeper checks. |
| CVE-2026-112427 | High | 2026-10-26 | Not applicable | No public exploit | An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execution. |
| CVE-2026-112425 | Low | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a 3D model may result in disclosure of process memory. |
| CVE-2026-112424 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory. |
| CVE-2026-112423 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents. |
| CVE-2026-112421 | Medium | 2026-10-26 | Not applicable | No public exploit | A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system. |
| CVE-2026-112416 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted video file may lead to unexpected app termination. |
| CVE-2026-112415 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to cause unexpected system termination or corrupt process memory. |
| CVE-2026-112414 | Medium | 2026-10-26 | Not applicable | No public exploit | A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted message may lead to a denial-of-service. |
| CVE-2026-112413 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted file may lead to unexpected app termination. |
| CVE-2026-112410 | High | 2026-10-26 | Not applicable | No public exploit | A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may cause an unexpected process termination. |