Vulnerabilities

Tracked app vulnerabilities

89 entries

All CVEs 16,158 CISA KEV 285 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2026-64745 LOW 2.4 Physical 2026-07-27 This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A person with physical…	LOW 2.4	Physical	—	—	2026-07-27	This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A person with physical…
CVE-2026-28910 LOW 3.3 Local 2026-05-11 This issue was addressed with improved permissions checking. This issue is fixed in macOS Tahoe 26.4. A malicious app may be able to access arbitrary files.	LOW 3.3	Local	—	—	2026-05-11	This issue was addressed with improved permissions checking. This issue is fixed in macOS Tahoe 26.4. A malicious app may be able to access arbitrary files.
CVE-2025-43236 LOW 3.3 Local 2026-04-02 A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An at…	LOW 3.3	Local	—	—	2026-04-02	A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An at…
CVE-2026-28893 LOW 3.3 Local 2026-03-25 A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.4. A document may be written to a temporary file…	LOW 3.3	Local	—	—	2026-03-25	A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.4. A document may be written to a temporary file…
CVE-2026-28864 LOW 3.3 Local 2026-03-25 This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.…	LOW 3.3	Local	—	—	2026-03-25	This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.…
CVE-2026-20684 LOW 3.3 Local 2026-03-25 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.4. An app may bypass Gatekeeper checks.	LOW 3.3	Local	—	—	2026-03-25	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.4. An app may bypass Gatekeeper checks.
CVE-2026-20681 LOW 3.3 Local 2026-02-11 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Tahoe 26.3. An app may be able to access infor…	LOW 3.3	Local	—	—	2026-02-11	A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Tahoe 26.3. An app may be able to access infor…
CVE-2026-20671 LOW 3.1 Network 2026-02-11 A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS So…	LOW 3.1	Network	—	—	2026-02-11	A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS So…
CVE-2026-20656 LOW 3.3 Local 2026-02-11 A logic issue was addressed with improved validation. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, macOS Tahoe 26.3. An app may be able to…	LOW 3.3	Local	—	—	2026-02-11	A logic issue was addressed with improved validation. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, macOS Tahoe 26.3. An app may be able to…
CVE-2026-20646 LOW 3.3 Local 2026-02-11 A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to read sensitive location inf…	LOW 3.3	Local	—	—	2026-02-11	A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to read sensitive location inf…
CVE-2026-20601 LOW 3.3 Local 2026-02-11 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be able to monitor keystrokes without user …	LOW 3.3	Local	—	—	2026-02-11	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be able to monitor keystrokes without user …
CVE-2025-31186 LOW 3.3 Local 1 apps 2026-01-16 A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy preferences.	LOW 3.3	Local	—	1	2026-01-16	A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy preferences.
CVE-2024-44210 LOW 3.3 Local 2026-01-16 This issue was addressed with improved permissions checking. This issue is fixed in macOS Sequoia 15.1. An app may be able to access user-sensitive data.	LOW 3.3	Local	—	—	2026-01-16	This issue was addressed with improved permissions checking. This issue is fixed in macOS Sequoia 15.1. An app may be able to access user-sensitive data.
CVE-2025-46279 LOW 3.3 Local 2025-12-17 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2…	LOW 3.3	Local	—	—	2025-12-17	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2…
CVE-2025-46277 LOW 3.3 Local 2025-12-17 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, watchOS 26.2. An app may be able…	LOW 3.3	Local	—	—	2025-12-17	A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, watchOS 26.2. An app may be able…
CVE-2025-43531 LOW 3.1 Network 2025-12-17 A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS …	LOW 3.1	Network	—	—	2025-12-17	A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS …
CVE-2025-43532 LOW 2.8 Local 2025-12-12 A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Seq…	LOW 2.8	Local	—	—	2025-12-12	A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Seq…
CVE-2025-43522 LOW 3.3 Local 2025-12-12 A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.3, mac…	LOW 3.3	Local	—	—	2025-12-12	A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.3, mac…
CVE-2025-43518 LOW 3.3 Local 2025-12-12 A logic issue was addressed with improved checks. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2,…	LOW 3.3	Local	—	—	2025-12-12	A logic issue was addressed with improved checks. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2,…
CVE-2025-43517 LOW 3.3 Local 2025-12-12 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tah…	LOW 3.3	Local	—	—	2025-12-12	A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tah…
CVE-2025-43516 LOW 3.3 Local 2025-12-12 A session management issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. A user with …	LOW 3.3	Local	—	—	2025-12-12	A session management issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. A user with …
CVE-2025-43410 LOW 2.4 Physical 2025-12-12 The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.2. An attacker with …	LOW 2.4	Physical	—	—	2025-12-12	The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.2. An attacker with …
CVE-2025-43404 LOW 3.3 Local 2025-12-12 A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user da…	LOW 3.3	Local	—	—	2025-12-12	A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user da…
CVE-2025-43423 LOW 2.0 Physical 2025-11-04 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2…	LOW 2.0	Physical	—	—	2025-11-04	A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2…
CVE-2025-43408 LOW 2.4 Physical 2025-11-04 This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1.…	LOW 2.4	Physical	—	—	2025-11-04	This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1.…
CVE-2025-43395 LOW 3.3 Local 2025-11-04 This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be …	LOW 3.3	Local	—	—	2025-11-04	This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be …
CVE-2025-43357 LOW 3.3 Local 2025-09-15 This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia…	LOW 3.3	Local	—	—	2025-09-15	This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia…
CVE-2025-43349 LOW 2.8 Local 2025-09-15 An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia…	LOW 2.8	Local	—	—	2025-09-15	An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia…
CVE-2025-43344 LOW 3.3 Local 2025-09-15 An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, w…	LOW 3.3	Local	—	—	2025-09-15	An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, w…
CVE-2025-43328 LOW 3.3 Local 2025-09-15 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data.	LOW 3.3	Local	—	—	2025-09-15	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data.
CVE-2025-43301 LOW 3.3 Local 2025-09-15 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 2…	LOW 3.3	Local	—	—	2025-09-15	A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 2…
CVE-2025-43294 LOW 3.3 Local 2025-09-15 An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.1 and iPadOS 26.1, …	LOW 3.3	Local	—	—	2025-09-15	An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.1 and iPadOS 26.1, …
CVE-2025-43283 LOW 3.3 Local 2025-09-15 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected system termina…	LOW 3.3	Local	—	—	2025-09-15	An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected system termina…
CVE-2025-43255 LOW 3.3 Local 2025-08-29 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app…	LOW 3.3	Local	—	—	2025-08-29	An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app…
CVE-2024-44271 LOW 3.3 Local 2025-08-29 The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator.	LOW 3.3	Local	—	—	2025-08-29	The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator.
CVE-2025-49462 LOW 3.5 Network 4 apps 2025-07-10 Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.	LOW 3.5	Network	—	4	2025-07-10	Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.
CVE-2025-32462 LOW 2.8 Local 2025-06-30 Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on …	LOW 2.8	Local	—	—	2025-06-30	Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on …
CVE-2025-5918 LOW 3.9 Local 2025-06-09 A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for rea…	LOW 3.9	Local	—	—	2025-06-09	A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for rea…
CVE-2024-40864 LOW 2.7 Network 2025-03-31 The issue was addressed with improved handling of protocols. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ve…	LOW 2.7	Network	—	—	2025-03-31	The issue was addressed with improved handling of protocols. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ve…
CVE-2025-27113 LOW 2.9 2025-03-31 [Apple libxml2] Parsing a file may lead to an unexpected app termination	LOW 2.9	—	—	—	2025-03-31	[Apple libxml2] Parsing a file may lead to an unexpected app termination
CVE-2024-54558 LOW 2.8 Local 2025-03-10 A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be abl…	LOW 2.8	Local	—	—	2025-03-10	A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be abl…
CVE-2024-44179 LOW 2.4 Physical 2025-03-10 This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoi…	LOW 2.4	Physical	—	—	2025-03-10	This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoi…
CVE-2025-24145 LOW 3.3 Local 2025-01-27 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. An app…	LOW 3.3	Local	—	—	2025-01-27	A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. An app…
CVE-2025-24121 LOW 3.3 Local 2025-01-27 A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to m…	LOW 3.3	Local	—	—	2025-01-27	A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to m…
CVE-2025-24100 LOW 3.3 Local 2025-01-27 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be abl…	LOW 3.3	Local	—	—	2025-01-27	A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be abl…
CVE-2024-54516 LOW 3.3 Local 2025-01-27 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. An app may be able to approve a…	LOW 3.3	Local	—	—	2025-01-27	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. An app may be able to approve a…
CVE-2024-54475 LOW 3.3 Local 2025-01-27 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventu…	LOW 3.3	Local	—	—	2025-01-27	A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventu…
CVE-2024-44172 LOW 3.3 Local 2025-01-27 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.3, macOS Ventura…	LOW 3.3	Local	—	—	2025-01-27	A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.3, macOS Ventura…
CVE-2024-44298 LOW 3.3 Local 2024-12-20 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. An app may be able to access inf…	LOW 3.3	Local	—	—	2024-12-20	A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. An app may be able to access inf…
CVE-2024-54493 LOW 3.3 Local 2024-12-12 This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.2. Privacy indicators for microphone access may be attribut…	LOW 3.3	Local	—	—	2024-12-12	This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.2. Privacy indicators for microphone access may be attribut…