Apple Macos Tahoe vulnerabilities

CVE-2026-20671 [LOW] CVE-2026-20671: macOS Tahoe 26.3 Apple Security Update: About the security content of macOS Tahoe 26.3 Product: macOS Tahoe Version: 26.3 CVE: CVE-2026-20671 Component: Kernel Impact: An attacker in a privileged network position may be able to intercept network traffic Description: A logic issue was addressed with improved checks.

CVE-2025-43301 [LOW] CVE-2025-43301: macOS Tahoe 26 Apple Security Update: About the security content of macOS Tahoe 26 Product: macOS Tahoe Version: 26 CVE: CVE-2025-43301 Component: Notification Center Impact: An app may be able to access contact info related to notifications in Notification Center Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2025-43395 [LOW] CVE-2025-43395: macOS Tahoe 26.1 Apple Security Update: About the security content of macOS Tahoe 26.1 Product: macOS Tahoe Version: 26.1 CVE: CVE-2025-43395 Component: CloudKit Impact: An app may be able to break out of its sandbox Description: This issue was addressed with improved validation of symlinks.

CVE-2025-43294 [LOW] CVE-2025-43294: macOS Tahoe 26 Apple Security Update: About the security content of macOS Tahoe 26 Product: macOS Tahoe Version: 26 CVE: CVE-2025-43294 Component: MallocStackLogging Impact: An app may be able to access sensitive user data Description: An issue existed in the handling of environment variables. This issue was addressed with improved validation.

CVE-2025-43328 [LOW] CVE-2025-43328: macOS Tahoe 26 Apple Security Update: About the security content of macOS Tahoe 26 Product: macOS Tahoe Version: 26 CVE: CVE-2025-43328 Component: Sandbox Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions.

CVE-2025-43516 [LOW] CVE-2025-43516: macOS Tahoe 26.2 Apple Security Update: About the security content of macOS Tahoe 26.2 Product: macOS Tahoe Version: 26.2 CVE: CVE-2025-43516 Component: Voice Control Impact: A user with Voice Control enabled may be able to transcribe another user's activity Description: A session management issue was addressed with improved checks.

CVE-2025-43404 [LOW] CVE-2025-43404: macOS Tahoe 26.1 Apple Security Update: About the security content of macOS Tahoe 26.1 Product: macOS Tahoe Version: 26.1 CVE: CVE-2025-43404 Component: Sandbox Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional sandbox restrictions.

CVE-2026-20646 [LOW] CVE-2026-20646: macOS Tahoe 26.3 Apple Security Update: About the security content of macOS Tahoe 26.3 Product: macOS Tahoe Version: 26.3 CVE: CVE-2026-20646 Component: Weather Impact: A malicious app may be able to read sensitive location information Description: A logging issue was addressed with improved data redaction.

CVE-2025-43522 [LOW] CVE-2025-43522: macOS Tahoe 26.2 Apple Security Update: About the security content of macOS Tahoe 26.2 Product: macOS Tahoe Version: 26.2 CVE: CVE-2025-43522 Component: AppleMobileFileIntegrity Impact: An app may be able to access user-sensitive data Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.

CVE-2025-43349 [LOW] CVE-2025-43349: macOS Tahoe 26 Apple Security Update: About the security content of macOS Tahoe 26 Product: macOS Tahoe Version: 26 CVE: CVE-2025-43349 Component: CoreAudio Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2025-46279 [LOW] CVE-2025-46279: macOS Tahoe 26.2 Apple Security Update: About the security content of macOS Tahoe 26.2 Product: macOS Tahoe Version: 26.2 CVE: CVE-2025-46279 Component: Icons Impact: An app may be able to identify what other apps a user has installed Description: A permissions issue was addressed with additional restrictions.

CVE-2025-43344 [LOW] CVE-2025-43344: macOS Tahoe 26 Apple Security Update: About the security content of macOS Tahoe 26 Product: macOS Tahoe Version: 26 CVE: CVE-2025-43344 Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds access issue was addressed with improved bounds checking.

CVE-2025-43357 [LOW] CVE-2025-43357: macOS Tahoe 26 Apple Security Update: About the security content of macOS Tahoe 26 Product: macOS Tahoe Version: 26 CVE: CVE-2025-43357 Component: Call History Impact: An app may be able to fingerprint the user Description: This issue was addressed with improved redaction of sensitive information.

CVE-2025-46277 [LOW] CVE-2025-46277: macOS Tahoe 26.2 Apple Security Update: About the security content of macOS Tahoe 26.2 Product: macOS Tahoe Version: 26.2 CVE: CVE-2025-46277 Component: Screen Time Impact: An app may be able to access a user’s Safari history Description: A logging issue was addressed with improved data redaction.

CVE-2025-43518 [LOW] CVE-2025-43518: macOS Tahoe 26.2 Apple Security Update: About the security content of macOS Tahoe 26.2 Product: macOS Tahoe Version: 26.2 CVE: CVE-2025-43518 Component: Foundation Impact: An app may be able to inappropriately access files through the spellcheck API Description: A logic issue was addressed with improved checks.

CVE-2026-20601 [LOW] CVE-2026-20601: macOS Tahoe 26.3 Apple Security Update: About the security content of macOS Tahoe 26.3 Product: macOS Tahoe Version: 26.3 CVE: CVE-2026-20601 Component: Foundation Impact: An app may be able to monitor keystrokes without user permission Description: A permissions issue was addressed with additional restrictions.

CVE-2026-20656 [LOW] CVE-2026-20656: macOS Tahoe 26.3 Apple Security Update: About the security content of macOS Tahoe 26.3 Product: macOS Tahoe Version: 26.3 CVE: CVE-2026-20656 Component: Safari Impact: An app may be able to access a user's Safari history Description: A logic issue was addressed with improved validation.

CVE-2026-20681 [LOW] CVE-2026-20681: macOS Tahoe 26.3 Apple Security Update: About the security content of macOS Tahoe 26.3 Product: macOS Tahoe Version: 26.3 CVE: CVE-2026-20681 Component: Contacts Impact: An app may be able to access information about a user's contacts Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2025-43283 [LOW] CVE-2025-43283: macOS Tahoe 26 Apple Security Update: About the security content of macOS Tahoe 26 Product: macOS Tahoe Version: 26 CVE: CVE-2025-43283 Component: GPU Drivers Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2025-43408 [LOW] CVE-2025-43408: macOS Tahoe 26.1 Apple Security Update: About the security content of macOS Tahoe 26.1 Product: macOS Tahoe Version: 26.1 CVE: CVE-2025-43408 Component: Share Sheet Impact: An attacker with physical access may be able to access contacts from the lock screen Description: This issue was addressed by restricting options offered on a locked device.