Apple Macos Tahoe vulnerabilities
322 known vulnerabilities affecting apple/macos_tahoe.
Total CVEs
322
CISA KEV
5
actively exploited
Public exploits
5
Exploited in wild
11
Severity breakdown
CRITICAL10HIGH82MEDIUM202LOW28
Vulnerabilities
Page 7 of 17
CVE-2025-40909P4MEDIUMCVSS 5.9v262025-09-15
CVE-2025-40909 [MEDIUM] CVE-2025-40909: macOS Tahoe 26
Apple Security Update: About the security content of macOS Tahoe 26
Product: macOS Tahoe
Version: 26
CVE: CVE-2025-40909
Component: CVE-2025-40909
apple
CVE-2025-43448P4MEDIUMCVSS 6.3v26.12025-11-03
CVE-2025-43448 [MEDIUM] CVE-2025-43448: macOS Tahoe 26.1
Apple Security Update: About the security content of macOS Tahoe 26.1
Product: macOS Tahoe
Version: 26.1
CVE: CVE-2025-43448
Component: CloudKit
Impact: An app may be able to break out of its sandbox
Description: This issue was addressed with improved validation of symlinks.
apple
CVE-2025-43414P4MEDIUMCVSS 6.2v26.12025-11-03
CVE-2025-43414 [MEDIUM] CVE-2025-43414: macOS Tahoe 26.1
Apple Security Update: About the security content of macOS Tahoe 26.1
Product: macOS Tahoe
Version: 26.1
CVE: CVE-2025-43414
Component: Shortcuts
Impact: A shortcut may be able to access files that are normally inaccessible to the Shortcuts app
Description: A permissions issue was addressed with improved validation.
apple
CVE-2026-20651P4MEDIUMCVSS 6.2v26.32026-02-11
CVE-2026-20651 [MEDIUM] CVE-2026-20651: macOS Tahoe 26.3
Apple Security Update: About the security content of macOS Tahoe 26.3
Product: macOS Tahoe
Version: 26.3
CVE: CVE-2026-20651
Component: Messages
Impact: An app may be able to access sensitive user data
Description: A privacy issue was addressed with improved handling of temporary files.
apple
CVE-2025-43308P4MEDIUMCVSS 5.3v262025-09-15
CVE-2025-43308 [MEDIUM] CVE-2025-43308: macOS Tahoe 26
Apple Security Update: About the security content of macOS Tahoe 26
Product: macOS Tahoe
Version: 26
CVE: CVE-2025-43308
Component: Touch Bar Controls
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with additional entitlement checks.
apple
CVE-2026-20673P4MEDIUMCVSS 5.3v26.32026-02-11
CVE-2026-20673 [MEDIUM] CVE-2026-20673: macOS Tahoe 26.3
Apple Security Update: About the security content of macOS Tahoe 26.3
Product: macOS Tahoe
Version: 26.3
CVE: CVE-2026-20673
Component: Mail
Impact: Turning off "Load remote content in messages” may not apply to all mail previews
Description: A logic issue was addressed with improved checks.
apple
CVE-2025-5918P4LOWCVSS 3.9v26.22025-12-12
CVE-2025-5918 [LOW] CVE-2025-5918: macOS Tahoe 26.2
Apple Security Update: About the security content of macOS Tahoe 26.2
Product: macOS Tahoe
Version: 26.2
CVE: CVE-2025-5918
Component: CVE-2025-5918
apple
CVE-2025-43279P4MEDIUMCVSS 6.2v262025-09-15
CVE-2025-43279 [MEDIUM] CVE-2025-43279: macOS Tahoe 26
Apple Security Update: About the security content of macOS Tahoe 26
Product: macOS Tahoe
Version: 26
CVE: CVE-2025-43279
Component: Notification Center
Impact: An app may be able to access user-sensitive data
Description: A privacy issue was addressed with improved private data redaction for log entries.
apple
CVE-2025-43318P4MEDIUMCVSS 6.2v262025-09-15
CVE-2025-43318 [MEDIUM] CVE-2025-43318: macOS Tahoe 26
Apple Security Update: About the security content of macOS Tahoe 26
Product: macOS Tahoe
Version: 26
CVE: CVE-2025-43318
Component: Sandbox
Impact: An app with root privileges may be able to access private information
Description: This issue was addressed with additional entitlement checks.
apple
CVE-2026-20675P4MEDIUMCVSS 5.5v26.32026-02-11
CVE-2026-20675 [MEDIUM] CVE-2026-20675: macOS Tahoe 26.3
Apple Security Update: About the security content of macOS Tahoe 26.3
Product: macOS Tahoe
Version: 26.3
CVE: CVE-2026-20675
Component: ImageIO
Impact: Processing a maliciously crafted image may lead to disclosure of user information
Description: The issue was addressed with improved bounds checks.
apple
CVE-2026-20625P4MEDIUMCVSS 5.5v26.32026-02-11
CVE-2026-20625 [MEDIUM] CVE-2026-20625: macOS Tahoe 26.3
Apple Security Update: About the security content of macOS Tahoe 26.3
Product: macOS Tahoe
Version: 26.3
CVE: CVE-2026-20625
Component: AppleMobileFileIntegrity
Impact: An app may be able to access sensitive user data
Description: A parsing issue in the handling of directory paths was addressed with improved path validation.
apple
CVE-2025-43382P4MEDIUMCVSS 5.5v26.12025-11-03
CVE-2025-43382 [MEDIUM] CVE-2025-43382: macOS Tahoe 26.1
Apple Security Update: About the security content of macOS Tahoe 26.1
Product: macOS Tahoe
Version: 26.1
CVE: CVE-2025-43382
Component: AppleMobileFileIntegrity
Impact: An app may be able to access sensitive user data
Description: A parsing issue in the handling of directory paths was addressed with improved path validation.
apple
CVE-2025-43463P4MEDIUMCVSS 5.5v26.12025-11-03
CVE-2025-43463 [MEDIUM] CVE-2025-43463: macOS Tahoe 26.1
Apple Security Update: About the security content of macOS Tahoe 26.1
Product: macOS Tahoe
Version: 26.1
CVE: CVE-2025-43463
Component: StorageKit
Impact: An app may be able to access sensitive user data
Description: A parsing issue in the handling of directory paths was addressed with improved path validation.
apple
CVE-2026-20694P4MEDIUMCVSS 5.5v26.32026-02-11
CVE-2026-20694 [MEDIUM] CVE-2026-20694: macOS Tahoe 26.3
Apple Security Update: About the security content of macOS Tahoe 26.3
Product: macOS Tahoe
Version: 26.3
CVE: CVE-2026-20694
Component: MigrationKit
Impact: An app may be able to access user-sensitive data
Description: This issue was addressed with improved handling of symlinks.
apple
CVE-2026-20669P4MEDIUMCVSS 5.5v26.32026-02-11
CVE-2026-20669 [MEDIUM] CVE-2026-20669: macOS Tahoe 26.3
Apple Security Update: About the security content of macOS Tahoe 26.3
Product: macOS Tahoe
Version: 26.3
CVE: CVE-2026-20669
Component: Admin Framework
Impact: An app may be able to access sensitive user data
Description: A parsing issue in the handling of directory paths was addressed with improved path validation.
apple
CVE-2025-43444P4MEDIUMCVSS 5.3v26.12025-11-03
CVE-2025-43444 [MEDIUM] CVE-2025-43444: macOS Tahoe 26.1
Apple Security Update: About the security content of macOS Tahoe 26.1
Product: macOS Tahoe
Version: 26.1
CVE: CVE-2025-43444
Component: Installer
Impact: An app may be able to fingerprint the user
Description: A permissions issue was addressed with additional restrictions.
apple
CVE-2026-20676P4MEDIUMCVSS 5.3v26.32026-02-11
CVE-2026-20676 [MEDIUM] CVE-2026-20676: macOS Tahoe 26.3
Apple Security Update: About the security content of macOS Tahoe 26.3
Product: macOS Tahoe
Version: 26.3
CVE: CVE-2026-20676
Component: WebKit
Impact: A website may be able to track users through Safari web extensions
Description: This issue was addressed through improved state management.
apple
CVE-2025-43424P4MEDIUMCVSS 6.5v26.12025-11-03
CVE-2025-43424 [MEDIUM] CVE-2025-43424: macOS Tahoe 26.1
Apple Security Update: About the security content of macOS Tahoe 26.1
Product: macOS Tahoe
Version: 26.1
CVE: CVE-2025-43424
Component: Multi-Touch
Impact: A malicious HID device may cause an unexpected process crash
Description: The issue was addressed with improved bounds checks.
apple
CVE-2025-43416P4MEDIUMCVSS 5.5v26.22025-12-12
CVE-2025-43416 [MEDIUM] CVE-2025-43416: macOS Tahoe 26.2
Apple Security Update: About the security content of macOS Tahoe 26.2
Product: macOS Tahoe
Version: 26.2
CVE: CVE-2025-43416
Component: StorageKit
Impact: An app may be able to gain root privileges
Description: A permissions issue was addressed with additional restrictions.
apple
CVE-2025-43519P4MEDIUMCVSS 5.5v26.22025-12-12
CVE-2025-43519 [MEDIUM] CVE-2025-43519: macOS Tahoe 26.2
Apple Security Update: About the security content of macOS Tahoe 26.2
Product: macOS Tahoe
Version: 26.2
CVE: CVE-2025-43519
Component: AppleMobileFileIntegrity
Impact: An app may be able to access sensitive user data
Description: A permissions issue was addressed with additional restrictions.
apple