Threat database

2,266 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.4%	CVE-2026-28835macOS · Mounting a maliciously crafted SMB network share may lead to system termination Medium6.5EPSS 0.4%2026-03-25CVE Database V5CVE-2026-28835 A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Mounting a maliciously crafted SMB network share may lead to system termination. EPSS 0.4%Vulnerability Apple	CVE Database V5	2026-03-25
Medium	4.9	EPSS 0.4%	CVE-2026-28823macOS · An app with root privileges may be able to delete protected system files Medium4.9EPSS 0.4%2026-03-25CVE Database V5CVE-2026-28823 A path handling issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.4. An app with root privileges may be able to delete protected system files. EPSS 0.4%Vulnerability Apple	CVE Database V5	2026-03-25
High	7.5	EPSS 0.6%	CVE-2026-20639macOS · Processing a maliciously crafted string may lead to heap corruption High7.5EPSS 0.6%2026-03-25CVE Database V5CVE-2026-20639 An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3. Processing a maliciously crafted string may lead to heap corruption. EPSS 0.6%Vulnerability Apple	CVE Database V5	2026-03-25
High	7.5	EPSS 0.5%	CVE-2026-28874iOS and iPadOS · A remote attacker may cause an unexpected app termination High7.5EPSS 0.5%2026-03-25CVE Database V5CVE-2026-28874 The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may cause an unexpected app termination. EPSS 0.5%Vulnerability Apple	CVE Database V5	2026-03-25
Critical	9.8	EPSS 0.6%	CVE-2026-28858iOS and iPadOS · A remote user may be able to cause unexpected system termination or corrupt kernel memory in Apple iOS… Critical9.8EPSS 0.6%2026-03-25CVE Database V5CVE-2026-28858 A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote user may be able to cause unexpected system termination or corrupt kernel memory. EPSS 0.6%Vulnerability Apple	CVE Database V5	2026-03-25
Medium	5.3	EPSS 0.4%	CVE-2026-28818macOS · An app may be able to access sensitive user data Medium5.3EPSS 0.4%2026-03-25CVE Database V5CVE-2026-28818 A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access sensitive user data. EPSS 0.4%Vulnerability Apple	CVE Database V5	2026-03-25
Medium	4.3	EPSS 0.6%	CVE-2026-28859Safari · A malicious website may be able to process restricted web content outside the sandbox Medium4.3EPSS 0.6%2026-03-25CVE Database V5CVE-2026-28859 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. A malicious website may be able to process restricted web content outside the sandbox. EPSS 0.6%Vulnerability Apple	CVE Database V5	2026-03-25
High	7.5	EPSS 0.5%	CVE-2026-28875iOS and iPadOS · A remote attacker may be able to cause a denial-of-service High7.5EPSS 0.5%2026-03-25CVE Database V5CVE-2026-28875 A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may be able to cause a denial-of-service. EPSS 0.5%Vulnerability Apple	CVE Database V5	2026-03-25
Medium	6.2	EPSS 0.2%	CVE-2026-28822iOS and iPadOS · An attacker may be able to cause unexpected app termination Medium6.2EPSS 0.2%2026-03-25CVE Database V5CVE-2026-28822 A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An attacker may be able to cause unexpected app termination. EPSS 0.2%Vulnerability Apple	CVE Database V5	2026-03-25
Medium	5.1	EPSS 0.1%	CVE-2026-28834macOS · An app may be able to cause unexpected system termination Medium5.1EPSS 0.1%2026-03-25CVE Database V5CVE-2026-28834 A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to cause unexpected system termination. EPSS 0.1%Vulnerability Apple	CVE Database V5	2026-03-25
Medium	6.5	EPSS 0.4%	CVE-2026-28863iOS and iPadOS · An app may be able to fingerprint the user Medium6.5EPSS 0.4%2026-03-25CVE Database V5CVE-2026-28863 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to fingerprint the user. EPSS 0.4%Vulnerability Apple	CVE Database V5	2026-03-25
High	7.5	EPSS 0.4%	CVE-2026-28855iOS and iPadOS · An app may be able to access protected user data High7.5EPSS 0.4%2026-03-25CVE Database V5CVE-2026-28855 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3. An app may be able to access protected user data. EPSS 0.4%Vulnerability Apple	CVE Database V5	2026-03-25
Medium	6.5	EPSS 0.4%	CVE-2026-28879iOS and iPadOS · Processing maliciously crafted web content may lead to an unexpected process crash in Apple iOS and… Medium6.5EPSS 0.4%2026-03-25CVE Database V5CVE-2026-28879 A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Processing maliciously crafted web content may lead to an unexpected process crash. EPSS 0.4%Vulnerability Apple	CVE Database V5	2026-03-25
Medium	5.3	EPSS 0.4%	CVE-2026-28838macOS · An app may be able to break out of its sandbox Medium5.3EPSS 0.4%2026-03-25CVE Database V5CVE-2026-28838 A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to break out of its sandbox. EPSS 0.4%Vulnerability Apple	CVE Database V5	2026-03-25
High	7.5	EPSS 0.3%	CVE-2026-20622macOS · An app may be able to capture a user's screen High7.5EPSS 0.3%2026-03-25CVE Database V5CVE-2026-20622 A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to capture a user's screen. EPSS 0.3%Vulnerability Apple #ghsa-9rf7-4jc7-gf8q	CVE Database V5	2026-03-25
Medium	6.5	EPSS 0.5%	CVE-2026-28880iOS and iPadOS · An app may be able to enumerate a user's installed apps Medium6.5EPSS 0.5%2026-03-25CVE Database V5CVE-2026-28880 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. An app may be able to enumerate a user's installed apps. EPSS 0.5%Vulnerability Apple	CVE Database V5	2026-03-25
High	8.1	EPSS 0.1%	CVE-2026-28817macOS · A sandboxed process may be able to circumvent sandbox restrictions High8.1EPSS 0.1%2026-03-25CVE Database V5CVE-2026-28817 A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. A sandboxed process may be able to circumvent sandbox restrictions. EPSS 0.1%Vulnerability Apple	CVE Database V5	2026-03-25
Medium	4.6	EPSS 0.3%	CVE-2026-28856iOS and iPadOS · An attacker with physical access to a locked device may be able to view sensitive user information in… Medium4.6EPSS 0.3%2026-03-25CVE Database V5CVE-2026-28856 The issue was addressed with improved authentication. This issue is fixed in iOS 26.4 and iPadOS 26.4, visionOS 26.4, watchOS 26.4. An attacker with physical access to a locked device may be able to view sensitive user information. EPSS 0.3%Vulnerability Apple	CVE Database V5	2026-03-25
Medium	4.6	EPSS 0.2%	CVE-2026-28895iOS and iPadOS · An attacker with physical access to an iOS device with Stolen Device Protection enabled may be able to… Medium4.6EPSS 0.2%2026-03-25CVE Database V5CVE-2026-28895 The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. An attacker with physical access to an iOS device with Stolen Device Protection enabled may be able to access biometrics-gated Protected Apps with the passcode. EPSS 0.2%Vulnerability Apple	CVE Database V5	2026-03-25
Medium	6.2	EPSS 0.2%	CVE-2026-20637iOS and iPadOS · An app may be able to cause unexpected system termination Medium6.2EPSS 0.2%2026-03-25CVE Database V5CVE-2026-20637 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to cause unexpected system termination. EPSS 0.2%Vulnerability Apple	CVE Database V5	2026-03-25

Showing 741–760 of 2,266 results