Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.8 HIGH
CVE-2026-43691 — Apple macOS Path Traversal Privilege Escalation

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

macos macos | Path Traversal
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
4.7 MEDIUM
CVE-2026-43690 — Apple macOS Kernel Memory Information Disclosure via Race Condition

A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A local user may be able to read kernel memory.

macos macos | Race Condition
Sep 14, 2026 Sep 17, 2026
Sep 14, 2026
Sep 17, 2026
7.8 HIGH
CVE-2026-43689 — Apple iOS, iPadOS, macOS, and visionOS Privilege Escalation Vulnerability

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able t…

macos iphone_os ipados macos visionos | Authorization
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
7.8 HIGH
CVE-2026-43688 — Apple iOS and macOS Memory Corruption Vulnerability

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. Processing a maliciously crafted file may lead to unexpected…

macos iphone_os ipados macos | Memory Corruption
Sep 14, 2026 Sep 17, 2026
Sep 14, 2026
Sep 17, 2026
6.5 MEDIUM
CVE-2026-43687 — Apple NFS Kernel Memory Disclosure

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27.…

macos iphone_os tvos watchos ipados macos +2 more | Remote | Memory Corruption
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
8.8 HIGH
CVE-2026-43686 — Apple Kernel Use-After-Free Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7…

macos iphone_os tvos watchos ipados macos +2 more | Remote | Memory Corruption
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
7.8 HIGH
CVE-2026-43684 — Apple Kernel Use-After-Free Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to cause unexpected…

macos iphone_os ipados macos | Memory Corruption
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
7.1 HIGH
CVE-2026-43683 — Apple macOS Out-of-Bounds Read

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected process te…

macos macos | Memory Corruption
Sep 14, 2026 Sep 18, 2026
Sep 14, 2026
Sep 18, 2026
6.5 MEDIUM
CVE-2026-43677 — Apple macOS WebDAV Out-of-Bounds Write Vulnerability

An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server …

macos macos | Remote | Memory Corruption
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
4.6 MEDIUM
CVE-2026-43674 — Apple iOS and iPadOS Authentication Bypass Vulnerability

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to an unlocked device may be able to view Wi-Fi pas…

iphone_os ipados | Authentication
Sep 14, 2026 Sep 18, 2026
Sep 14, 2026
Sep 18, 2026
5.5 MEDIUM
CVE-2026-43664 — Apple iOS, iPadOS, macOS, tvOS, and watchOS Sensitive Data Disclosure Vulnerability

This issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, wat…

macos iphone_os tvos watchos ipados macos +1 more | Information Disclosure
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
5.5 MEDIUM
CVE-2026-28968 — Apple Kernel Out-of-Bounds Write Vulnerability

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe …

macos iphone_os tvos watchos ipados macos +2 more | Memory Corruption
Sep 14, 2026 Sep 18, 2026
Sep 14, 2026
Sep 18, 2026
4.3 MEDIUM
CVE-2026-28966 — Apple Multiple Products Out-of-Bounds Write Vulnerability

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe …

macos iphone_os tvos ipados macos visionos | Remote | Memory Corruption
Sep 14, 2026 Sep 18, 2026
Sep 14, 2026
Sep 18, 2026
7.5 HIGH
CVE-2026-28960 — Apple iOS and iPadOS Denial of Service Vulnerability

A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. A remote attacker may be able to cause a denial-of-service.

iphone_os ipados | Remote | Denial of Service
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
7.5 HIGH
CVE-2026-28938 — Apple iOS and iPadOS Information Disclosure Vulnerability

A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be able to fingerprint the user.

iphone_os ipados | Remote | Information Disclosure
Sep 14, 2026 Sep 17, 2026
Sep 14, 2026
Sep 17, 2026
5.5 MEDIUM
CVE-2026-28937 — macOS Sensitive User Data Access via Improper State Management

This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.

macos macos | Information Disclosure
Sep 14, 2026 Sep 17, 2026
Sep 14, 2026
Sep 17, 2026
7.5 HIGH
CVE-2026-28935 — Apple Kernel Memory Corruption Vulnerability

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be abl…

macos iphone_os tvos watchos ipados macos +2 more | Remote | Memory Corruption
Sep 14, 2026 Sep 17, 2026
Sep 14, 2026
Sep 17, 2026
6.5 MEDIUM
CVE-2026-28934 — Apple macOS Disk Image Buffer Overflow

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected …

macos macos | Remote | Memory Corruption
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
5.5 MEDIUM
CVE-2026-28933 — Apple macOS Use-After-Free Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system…

macos macos | Memory Corruption
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
5.5 MEDIUM
CVE-2026-28899 — Apple macOS Gatekeeper Security Feature Bypass

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may bypass Gatekeeper checks.

macos macos | Misconfiguration
Sep 14, 2026 Sep 17, 2026
Sep 14, 2026
Sep 17, 2026
Showing 20 of 16678 Results