WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor apple✕
Overview 9,527 matches · 8 in Waratek scope · 2 protected · 179 exploited · 107 CISA KEV · 665 public PoC · 63 EPSS ≥ 0.5
split by peak 1,173 / year
Not applicable: 9,474Outside Waratek scope: 45No exploit published: 4Mitigation candidate: 2Protected by Waratek: 2 Low: 579Medium: 4,288High: 4,190Critical: 470 not blocked: 9,525blocked by ARMR today: 2 No public exploit: 8,685Forecast only: 16Proof of concept only: 164Working exploit published: 483Exploited: 179
19961 Not applicable1 High1 not blocked1 No public exploit1 19971 Not applicable1 Medium1 not blocked1 No public exploit1 19983 Not applicable3 High1 Medium2 not blocked3 Working exploit published1 No public exploit2 19997 Not applicable7 Medium6 Low1 not blocked7 Working exploit published2 No public exploit5 20004 Not applicable4 High2 Medium2 not blocked4 Working exploit published1 No public exploit3 200112 No exploit published1 Not applicable11 High7 Medium2 Low3 not blocked12 Working exploit published2 No public exploit10 200224 Outside Waratek scope3 Not applicable21 Critical1 High13 Medium9 Low1 not blocked24 Exploited1 Working exploit published5 No public exploit18 200347 Not applicable47 Critical1 High20 Medium23 Low3 not blocked47 Exploited4 Working exploit published4 No public exploit39 200465 Not applicable65 Critical1 High33 Medium24 Low7 not blocked65 Exploited1 Working exploit published7 No public exploit57 2005148 Not applicable148 Critical1 High56 Medium65 Low26 not blocked148 Working exploit published16 No public exploit132 2006140 Not applicable140 High43 Medium78 Low19 not blocked140 Working exploit published21 Proof of concept only1 No public exploit118 2007215 Not applicable215 Critical1 High114 Medium93 Low7 not blocked215 Exploited2 Working exploit published45 No public exploit168 2008221 Not applicable221 Critical2 High88 Medium112 Low19 not blocked221 Working exploit published21 No public exploit200 2009229 Not applicable229 Critical1 High91 Medium125 Low12 not blocked229 Working exploit published26 No public exploit203 2010322 Not applicable322 Critical4 High130 Medium176 Low12 not blocked322 Exploited2 Working exploit published26 No public exploit294 2011305 Not applicable305 High157 Medium129 Low19 not blocked305 Exploited3 Working exploit published10 Proof of concept only1 No public exploit291 2012356 Not applicable356 Critical1 High176 Medium165 Low14 not blocked356 Exploited1 Working exploit published8 Proof of concept only3 No public exploit344 2013196 Not applicable196 High38 Medium129 Low29 not blocked196 Working exploit published9 No public exploit187 2014312 Outside Waratek scope1 Not applicable311 Critical2 High81 Medium187 Low42 not blocked312 Exploited3 Working exploit published6 Proof of concept only4 Forecast only1 No public exploit298 2015703 Outside Waratek scope3 Not applicable700 High228 Medium418 Low57 not blocked703 Exploited2 Working exploit published34 Proof of concept only3 No public exploit664 2016333 Outside Waratek scope1 Not applicable332 Critical27 High190 Medium93 Low23 not blocked333 Exploited3 Working exploit published32 Proof of concept only4 Forecast only2 No public exploit292 2017602 Outside Waratek scope5 Not applicable597 Critical43 High368 Medium162 Low29 not blocked602 Exploited4 Working exploit published124 Proof of concept only2 No public exploit472 2018191 Outside Waratek scope2 Not applicable189 Critical11 High113 Medium64 Low3 not blocked191 Exploited3 Working exploit published20 Proof of concept only1 No public exploit167 2019544 Protected by Waratek1 Outside Waratek scope10 Not applicable533 Critical45 High327 Medium153 Low19 blocked by ARMR today1 not blocked543 Exploited12 Working exploit published51 Proof of concept only14 Forecast only6 No public exploit461 2020497 Mitigation candidate1 Outside Waratek scope2 Not applicable494 Critical33 High276 Medium161 Low27 not blocked497 Exploited14 Working exploit published7 Proof of concept only7 No public exploit469 2021597 Protected by Waratek1 Outside Waratek scope4 Not applicable592 Critical31 High334 Medium212 Low20 blocked by ARMR today1 not blocked596 Exploited28 Working exploit published2 Proof of concept only8 Forecast only5 No public exploit554 2022457 No exploit published3 Outside Waratek scope6 Not applicable448 Critical30 High267 Medium147 Low13 not blocked457 Exploited27 Working exploit published1 Proof of concept only21 Forecast only1 No public exploit407 2023489 Mitigation candidate1 Outside Waratek scope3 Not applicable485 Critical22 High203 Medium227 Low37 not blocked489 Exploited34 Proof of concept only31 No public exploit424 2024602 Outside Waratek scope3 Not applicable599 Critical25 High224 Medium305 Low48 not blocked602 Exploited10 Working exploit published1 Proof of concept only18 No public exploit573 2025731 Outside Waratek scope1 Not applicable730 Critical106 High191 Medium394 Low40 not blocked731 Exploited22 Working exploit published1 Proof of concept only12 Forecast only1 No public exploit695 20261,173 Outside Waratek scope1 Not applicable1,172 Critical82 High418 Medium624 Low49 not blocked1,173 Exploited3 Proof of concept only34 No public exploit1,136
19961999200220052008201120142017202020232026
9,527 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 96 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-112567 High 2026-10-26 Not applicable No public exploit This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. A malicious application may be able to bypass Privacy preferences.
CVE-2026-112566 Medium 2026-10-26 Not applicable No public exploit A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker in physical proximity may be able to cause a denial-of-service.
CVE-2026-112565 High 2026-10-26 Not applicable No public exploit An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption.
CVE-2026-112563 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-112562 High 2026-10-26 Not applicable No public exploit A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to break out of its sandbox.
CVE-2026-112561 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
CVE-2026-112560 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
CVE-2026-112559 Medium 2026-10-26 Not applicable No public exploit An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112558 Low 2026-10-26 Not applicable No public exploit A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.
CVE-2026-112557 Medium 2026-10-26 Not applicable No public exploit The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application may be able to bypass Privacy preferences.
CVE-2026-112556 Medium 2026-10-26 Not applicable No public exploit A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker may tamper with code-signed applications to execute arbitrary code in the application's context.
CVE-2026-112555 High 2026-10-26 Not applicable No public exploit A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to break out of its sandbox.
CVE-2026-112554 High 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.
CVE-2026-112553 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-112552 Critical 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with control of a network file server may be able to cause unexpected system termination.
CVE-2026-112551 Medium 2026-10-26 Not applicable No public exploit An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to read sensitive location information.
CVE-2026-112550 Medium 2026-10-26 Not applicable No public exploit A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause a denial-of-service.
CVE-2026-112548 High 2026-10-26 Not applicable No public exploit A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
CVE-2026-112547 Medium 2026-10-26 Not applicable No public exploit A type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112546 High 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-112545 High 2026-10-26 Not applicable No public exploit A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
CVE-2026-112544 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a malicious disk image may cause unexpected system termination.
CVE-2026-112543 High 2026-10-26 Not applicable No public exploit A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to break out of its sandbox.
CVE-2026-112542 High 2026-10-26 Not applicable No public exploit A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to intercept network traffic.
CVE-2026-112541 High 2026-10-26 Not applicable No public exploit A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
CVE-2026-112540 Medium 2026-10-26 Not applicable No public exploit An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-112539 High 2026-10-26 Not applicable No public exploit A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to read or write to protected files.
CVE-2026-112537 Medium 2026-10-26 Not applicable No public exploit This issue was addressed with improved data protection. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to read sensitive location information.
CVE-2026-112536 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2026-112535 Medium 2026-10-26 Not applicable No public exploit A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system.
CVE-2026-112534 High 2026-10-26 Not applicable No public exploit This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to bypass sandbox restrictions.
CVE-2026-112533 Medium 2026-10-26 Not applicable No public exploit An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.
CVE-2026-112532 High 2026-10-26 Not applicable No public exploit The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-112531 High 2026-10-26 Not applicable No public exploit A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.
CVE-2026-112530 High 2026-10-26 Not applicable No public exploit A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
CVE-2026-112529 High 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.
CVE-2026-112526 Critical 2026-10-26 Not applicable No public exploit A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause unexpected app termination.
CVE-2026-112525 High 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.
CVE-2026-112524 High 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-112523 Medium 2026-10-26 Not applicable No public exploit This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access user-sensitive data.
CVE-2026-112522 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-112521 Critical 2026-10-26 Not applicable No public exploit A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2026-112519 High 2026-10-26 Not applicable No public exploit An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Connecting to a malicious VNC server may cause a denial-of-service.
CVE-2026-112518 Medium 2026-10-26 Not applicable No public exploit An issue with signature validation was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker in a privileged network position may be able to impersonate a Kerberos KDC.
CVE-2026-112517 High 2026-10-26 Not applicable No public exploit A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-112516 Medium 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
CVE-2026-112515 High 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker may be able to cause unexpected system termination or read kernel memory.
CVE-2026-112514 Critical 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-112513 High 2026-10-26 Not applicable No public exploit This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Golden Gate 27.2. An app may be able to break out of its sandbox.
CVE-2026-112512 Medium 2026-10-26 Not applicable No public exploit A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to bypass Gatekeeper checks.
CVE-2026-112511 Medium 2026-10-26 Not applicable No public exploit A path handling issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious Screen Sharing peer may be able to create arbitrary symlinks as root.
CVE-2026-112510 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause a denial-of-service.
CVE-2026-112508 High 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.
CVE-2026-112507 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2026-112506 Medium 2026-10-26 Not applicable No public exploit A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user data.
CVE-2026-112505 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious Screen Sharing peer may be able to corrupt process memory.
CVE-2026-112504 Medium 2026-10-26 Not applicable No public exploit A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system.
CVE-2026-112502 High 2026-10-26 Not applicable No public exploit A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause a denial-of-service.
CVE-2026-112501 Medium 2026-10-26 Not applicable No public exploit A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
CVE-2026-112500 Medium 2026-10-26 Not applicable No public exploit A logic issue was addressed with improved restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. The user's original email address may be leaked when using the Hide My Email feature.
CVE-2026-112498 High 2026-10-26 Not applicable No public exploit An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.
CVE-2026-112497 Critical 2026-10-26 Not applicable No public exploit This issue was addressed with improved permissions checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.
CVE-2026-112495 High 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.
CVE-2026-112494 Medium 2026-10-26 Not applicable No public exploit A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may bypass Gatekeeper checks.
CVE-2026-112493 High 2026-10-26 Not applicable No public exploit A downgrade issue was addressed with additional version checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
CVE-2026-112492 High 2026-10-26 Not applicable No public exploit A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
CVE-2026-112491 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-112488 Medium 2026-10-26 Not applicable No public exploit A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted image may corrupt process memory.
CVE-2026-112487 High 2026-10-26 Not applicable Proof of concept only A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
CVE-2026-112486 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a 3D model may lead to unexpected app termination.
CVE-2026-112485 High 2026-10-26 Not applicable No public exploit The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption.
CVE-2026-112484 High 2026-10-26 Not applicable No public exploit This issue was addressed with improved file handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application may be able to execute arbitrary code with system privileges.
CVE-2026-112483 Medium 2026-10-26 Not applicable No public exploit A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system.
CVE-2026-112482 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker on the local network may be able to corrupt process memory.
CVE-2026-112481 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker on the local network may be able to cause unexpected process termination or disclose process memory.
CVE-2026-112480 High 2026-10-26 Not applicable No public exploit A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A user with screen sharing access may be able to view another user's screen.
CVE-2026-112479 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious USB device may be able to cause unexpected system termination or read kernel memory.
CVE-2026-112478 Critical 2026-10-26 Not applicable No public exploit An out-of-bounds read issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.
CVE-2026-112477 High 2026-10-26 Not applicable No public exploit A race condition was addressed with improved locking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-112476 High 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
CVE-2026-112475 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.
CVE-2026-112474 High 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2026-112473 High 2026-10-26 Not applicable No public exploit An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with the legacy VNC password for Screen Sharing may be able to copy files to the Mac.
CVE-2026-112471 Medium 2026-10-26 Not applicable No public exploit A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may lead to unexpected process termination.
CVE-2026-112470 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-112469 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-112468 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-112467 Low 2026-10-26 Not applicable No public exploit This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to bypass network restrictions.
CVE-2026-112466 High 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or read kernel memory.
CVE-2026-112464 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted file may lead to heap corruption.
CVE-2026-112462 Low 2026-10-26 Not applicable No public exploit A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application may be able to bypass Privacy preferences.
CVE-2026-112461 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption.
CVE-2026-112459 High 2026-10-26 Not applicable No public exploit A race condition was addressed with improved state handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-112457 High 2026-10-26 Not applicable No public exploit A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker on the local network may be able to cause unexpected system termination or corrupt process memory.
CVE-2026-112456 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to heap corruption.
CVE-2026-112455 Medium 2026-10-26 Not applicable No public exploit An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112454 High 2026-10-26 Not applicable No public exploit The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.
CVE-2026-112453 High 2026-10-26 Not applicable No public exploit A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.
CVE-2026-112451 High 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause a denial-of-service or disclose process memory.
CVE-2026-112449 High 2026-10-26 Not applicable No public exploit An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption.
‹ prev page 3 of 96 next ›