Apple macOS vulnerabilities

CVE-2022-43454 [HIGH] CWE-415 CVE-2022-43454: A double free issue was addressed with improved memory management. This issue is fixed in macOS Vent A double free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An app may be able to execute arbitrary code with kernel privileges.

CVE-2023-41075 [HIGH] CWE-843 CVE-2023-41075: A type confusion issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7 A type confusion issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4. An app may be able to execute arbitrary code with kernel privileges.

CVE-2025-46290 [HIGH] CWE-693 CVE-2025-46290: A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7. A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. A remote attacker may be able to cause a denial-of-service.

CVE-2026-43689 [HIGH] CWE-862 CVE-2026-43689: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges.

CVE-2025-43320 [HIGH] CWE-269 CVE-2025-43320: The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.3, mac The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges.

CVE-2026-43684 [HIGH] CWE-416 CVE-2026-43684: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26. A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2026-43786 [HIGH] CWE-280 CVE-2026-43786: This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gat This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

CVE-2026-43691 [HIGH] CWE-22 CVE-2026-43691: A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Ga A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

CVE-2024-27817 [HIGH] CWE-353 CVE-2024-27817: The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, i The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.2. An app may be able to execute arbitrary code with kernel privileges.

CVE-2026-28915 [HIGH] CWE-22 CVE-2026-28915: A parsing issue in the handling of directory paths was addressed with improved path validation. This A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to gain root privileges.

CVE-2026-84575 [HIGH] CWE-787 CVE-2026-84575: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination.

CVE-2019-8643 [CRITICAL] CVE-2019-8643: CVE-2019-8643: Arun Sharma of VMWare This issue is fixed in macOS Mojave 10.14. Description: A logic CVE-2019-8643: Arun Sharma of VMWare This issue is fixed in macOS Mojave 10.14. Description: A logic issue was addressed with improved state management..

CVE-2026-84506 [HIGH] CWE-416 CVE-2026-84506: A use after free issue was addressed with improved memory management. This issue is fixed in macOS G A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2026-43724 [HIGH] CWE-20 CVE-2026-43724: The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPa The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.

CVE-2026-64712 [HIGH] CWE-284 CVE-2026-64712: This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Se This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

CVE-2026-39874 [HIGH] CWE-276 CVE-2026-39874: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.

CVE-2026-39875 [HIGH] CWE-276 CVE-2026-39875: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.

CVE-2026-65362 [HIGH] CWE-284 CVE-2026-65362: This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Se This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

CVE-2026-84631 [HIGH] CWE-280 CVE-2026-84631: This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gat This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to gain root privileges.

CVE-2025-43281 [HIGH] CWE-287 CVE-2025-43281: The issue was addressed with improved authentication. This issue is fixed in macOS Sequoia 15.6. A l The issue was addressed with improved authentication. This issue is fixed in macOS Sequoia 15.6. A local attacker may be able to elevate their privileges.