macOS vulnerabilities
370 known CVE vulnerabilities in macOS, translated and rated.
- CVE-2026-113940Medium
An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination.
- CVE-2026-113939Medium
An out-of-bounds write issue was addressed with improved bounds checking. The issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
- CVE-2026-113938Medium
An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination.
- CVE-2026-113937Medium
An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination.
- CVE-2026-113936Medium
An out-of-bounds read in macOS was addressed with improved bounds checking. The issue affects macOS Golden Gate 27.2. An app may be able to cause unexpected system termination.
- CVE-2026-113935Medium
An out-of-bounds read in macOS was addressed with improved bounds checking. The issue affects macOS Golden Gate 27.2. An app may be able to cause unexpected system termination.
- CVE-2026-113934High
A memory handling issue in macOS was addressed with improved memory management. The vulnerability affects macOS Golden Gate 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-113900High
A race condition in macOS was addressed with improved state handling. An app may be able to gain root privileges.
- CVE-2026-113899Low risk· EPSS 13%
An issue in macOS was addressed with improved checks. An app may be able to cause unexpected system termination.
- CVE-2026-112708Medium
A race condition was addressed with improved locking. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2 and macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt process memory.
- CVE-2026-112704Low risk· EPSS 11%
An information leakage was addressed with additional validation. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. A malicious app may be able to break out of its sandbox.
- CVE-2026-112617Medium
An information disclosure issue in macOS was addressed with improved logic. The flaw affects macOS Golden Gate 27.2 and may allow an app to access sensitive user data.
- CVE-2026-112604Low risk· EPSS 11%
An out-of-bounds read vulnerability in macOS was addressed with improved bounds checking. Processing a maliciously crafted file may lead to unexpected app termination.
- CVE-2026-112601Low risk· EPSS 9%
An integer overflow vulnerability in macOS was addressed with improved input validation. An app may be able to cause a denial-of-service.
- CVE-2026-112593Low risk· EPSS 10%
An out-of-bounds write vulnerability in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination or write kernel memory.
- CVE-2026-112577Low risk· EPSS 9%
A privacy vulnerability in macOS was addressed by moving sensitive data. An app may be able to access sensitive user data.
- CVE-2026-112575Low risk· EPSS 12%
A vulnerability related to secure input state handling in macOS was addressed. An app may be able to monitor keystrokes without user permission.
- CVE-2026-112570Low risk· EPSS 12%
An access issue in macOS was addressed with additional sandbox restrictions. An app may be able to break out of its sandbox.
- CVE-2026-112569Low risk· EPSS 12%
An access issue in macOS was addressed with additional sandbox restrictions. An app may be able to break out of its sandbox.
- CVE-2026-112568Low risk· EPSS 12%
A logic issue in macOS was addressed with improved checks. Processing a maliciously crafted file may bypass Gatekeeper checks.
- CVE-2026-112562Low risk· EPSS 12%
A parsing issue in the handling of directory paths was addressed with improved path validation. A malicious app may be able to break out of its sandbox.
- CVE-2026-112559Medium
An authorization issue was addressed with improved state management. The flaw affects iOS, iPadOS, macOS, visionOS and watchOS and may allow an app to access sensitive user data.
- CVE-2026-112558Low risk· EPSS 12%
A permissions issue was addressed with additional sandbox restrictions. The flaw affects macOS and may allow an app to access sensitive user data.
- CVE-2026-112557Low risk· EPSS 14%
The issue was addressed with improved checks. It affects macOS and may allow a malicious application to bypass Privacy preferences.
- CVE-2026-112556Medium
A race condition was addressed with additional validation. An attacker may tamper with code-signed applications to execute arbitrary code in the application's context. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
- CVE-2026-112555Low risk· EPSS 12%
A validation issue was addressed with improved input sanitization. The flaw affects macOS and may allow a malicious app to break out of its sandbox.
- CVE-2026-112554Low risk· EPSS 13%
An out-of-bounds read was addressed with improved bounds checking. The flaw affects iOS, iPadOS and macOS and may allow an app to cause unexpected system termination or read kernel memory.
- CVE-2026-112553Low risk· EPSS 12%
An out-of-bounds write issue was addressed with improved bounds checking. The flaw affects macOS and processing a maliciously crafted file may lead to unexpected app termination.
- CVE-2026-112552Low risk· EPSS 12%
An out-of-bounds write issue was addressed with improved bounds checking. An attacker with control of a network file server may be able to cause unexpected system termination.
- CVE-2026-112551Medium
An authorization issue was addressed with improved state management. An app may be able to read sensitive location information.
- CVE-2026-112550Low risk· EPSS 10%
A type confusion issue was addressed with improved memory handling. An app may be able to cause a denial-of-service.
- CVE-2026-112548High
A use after free issue was addressed with improved memory management. An app may be able to gain root privileges.
- CVE-2026-112545High
A parsing issue in the handling of directory paths was addressed with improved path validation. An app may be able to gain root privileges.
- CVE-2026-112544Medium
An out-of-bounds write issue was addressed with improved bounds checking. Mounting a malicious disk image may cause unexpected system termination. The issue is fixed in macOS Golden Gate 27.2.
- CVE-2026-112543Low risk· EPSS 12%
A race condition was addressed with additional validation. A malicious app may be able to break out of its sandbox.
- CVE-2026-112542Low risk· EPSS 12%
A permissions issue was addressed with additional restrictions. A malicious app may be able to intercept network traffic.
- CVE-2026-112541Low risk· EPSS 12%
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
- CVE-2026-112540Low risk· EPSS 12%
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to unexpected app termination.
- CVE-2026-112539Low risk· EPSS 12%
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to read or write to protected files.
- CVE-2026-112537Low risk· EPSS 12%
This issue was addressed with improved data protection. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to read sensitive location information.
- CVE-2026-112536Low risk· EPSS 12%
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or write kernel memory.
- CVE-2026-112535Low risk· EPSS 12%
A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system.
- CVE-2026-112534Low risk· EPSS 14%
This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to bypass sandbox restrictions.
- CVE-2026-112533Medium
An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.
- CVE-2026-112532Low risk· EPSS 12%
The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-112531Low risk· EPSS 14%
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.
- CVE-2026-112530Low risk· EPSS 13%
A logic issue in macOS was addressed with improved checks. An app may be able to gain root privileges.
- CVE-2026-112529Low risk· EPSS 10%
An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination.
- CVE-2026-112526Low risk· EPSS 32%
A buffer overflow in macOS was addressed with improved bounds checking. A remote attacker may be able to cause unexpected app termination.
- CVE-2026-112525Low risk· EPSS 12%
An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination or read kernel memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

