Threat database

46 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.4	EPSS 0.1%	CVE-2026-86907Apple macOS · Missing Authorization Medium4.4EPSS 0.1%2026-10-20CVE Database V5CVE-2026-86907 An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain. EPSS 0.1%Vulnerability CWE-862	CVE Database V5	2026-10-20
High	7.8	EPSS 0.1%	CVE-2026-64701Apple macOS · A malicious app may be able to gain root privileges High7.8EPSS 0.1%2026-09-14CVE Database V5CVE-2026-64701 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges. EPSS 0.1%Vulnerability CWE-280 #ghsa-6xwx-w6mj-3cq6	CVE Database V5	2026-09-14
High	7.8	EPSS 0.2%	CVE-2026-43691Apple macOS · Path Traversal High7.8EPSS 0.2%2026-09-14CVE Database V5CVE-2026-43691 A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges. EPSS 0.2%Vulnerability CWE-22 #ghsa-f6f2-7frp-3r3p	CVE Database V5	2026-09-14
Medium	4.7	EPSS <0.1%	CVE-2026-84562Apple macOS · Race Condition Medium4.7EPSS <0.1%2026-09-14CVE Database V5CVE-2026-84562 A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to access protected user data. EPSS <0.1%Vulnerability CWE-362	CVE Database V5	2026-09-14
Medium	6.5	EPSS 0.3%	CVE-2026-84588Apple macOS · Out-of-bounds Write Medium6.5EPSS 0.3%2026-09-14CVE Database V5CVE-2026-84588 CVE-2026-84588 is a memory corruption vulnerability in Apple macOS that could be triggered by mounting a maliciously crafted disk image. This may lead to unexpected system termination or corruption of kernel memory. The issue was addressed by removing the vulnerable code and is fixed in macOS Golden Gate 27. EPSS 0.3%Vulnerability CWE-787	CVE Database V5	2026-09-14
High	7.8	EPSS 0.2%	CVE-2026-65362Apple macOS · Improper Access Control High7.8EPSS 0.2%2026-09-14CVE Database V5CVE-2026-65362 This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges. EPSS 0.2%Vulnerability CWE-284 #ghsa-3p94-98w5-cmg9	CVE Database V5	2026-09-14
Medium	6.6	EPSS 0.2%	CVE-2026-84537Apple macOS · Memory Buffer Overflow Medium6.6EPSS 0.2%2026-09-14CVE Database V5CVE-2026-84537 CVE-2026-84537 is a vulnerability in Apple macOS where an application may cause unexpected system termination or corrupt kernel memory. The issue is related to improper memory handling and has been addressed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. The vulnerability has a medium severity rating with a CVSS score of 6.6. EPSS 0.2%Vulnerability CWE-119	CVE Database V5	2026-09-14
Medium	5.5	EPSS 0.1%	CVE-2025-30431Apple macOS · A malicious app may be able to access private information Medium5.5EPSS 0.1%2026-06-11CVE Database V5CVE-2025-30431 The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access private information. EPSS 0.1%Vulnerability CWE-693	CVE Database V5	2026-06-11
Medium	5.5	EPSS 0.1%	CVE-2025-24268Apple macOS · Path Traversal Medium5.5EPSS 0.1%2026-06-11CVE Database V5CVE-2025-24268 A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data. EPSS 0.1%Vulnerability CWE-22	CVE Database V5	2026-06-11
Medium	5.5	EPSS 0.1%	CVE-2025-43290Apple macOS · Incorrect Permissions Medium5.5EPSS 0.1%2026-05-26CVE Database V5CVE-2025-43290 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to modify protected parts of the file system. EPSS 0.1%Vulnerability CWE-732	CVE Database V5	2026-05-26
Medium	4.3	EPSS 0.5%	CVE-2025-24279Apple macOS · An app may be able to access contacts Medium4.3EPSS 0.5%2025-03-31CVE Database V5CVE-2025-24279 This issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access contacts. EPSS 0.5%Vulnerability CWE-200	CVE Database V5	2025-03-31
Critical	9.8	EPSS 1.1%	CVE-2025-24233Apple macOS · Incorrect Authorization Critical9.8EPSS 1.1%2025-03-31CVE Database V5CVE-2025-24233 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to read or write to protected files. EPSS 1.1%Vulnerability CWE-863	CVE Database V5	2025-03-31
Critical	9.8	EPSS 1.0%	CVE-2025-24265Apple macOS · Out-of-bounds Read Critical9.8EPSS 1.0%2025-03-31CVE Database V5CVE-2025-24265 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination. EPSS 1.0%Vulnerability CWE-125	CVE Database V5	2025-03-31
Critical	9.8	EPSS 0.9%	CVE-2025-24249Apple macOS · Missing Authorization Critical9.8EPSS 0.9%2025-03-31CVE Database V5CVE-2025-24249 A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to check the existence of an arbitrary path on the file system. EPSS 0.9%Vulnerability CWE-862	CVE Database V5	2025-03-31
Critical	9.8	EPSS 1.2%	CVE-2025-30457Apple macOS · Link Following Critical9.8EPSS 1.2%2025-03-31CVE Database V5CVE-2025-30457 This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to create symlinks to protected regions of the disk. EPSS 1.2%Vulnerability CWE-59	CVE Database V5	2025-03-31
Critical	9.8	EPSS 1.1%	CVE-2025-24231Apple macOS · Out-of-bounds Write Critical9.8EPSS 1.1%2025-03-31CVE Database V5CVE-2025-24231 The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to modify protected parts of the file system. EPSS 1.1%Vulnerability CWE-787	CVE Database V5	2025-03-31
Critical	9.8	EPSS 0.9%	CVE-2025-30462Apple macOS · Improper Access Control Critical9.8EPSS 0.9%2025-03-31CVE Database V5CVE-2025-30462 A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. Apps that appear to use App Sandbox may be able to launch without restrictions. EPSS 0.9%Vulnerability CWE-284	CVE Database V5	2025-03-31
High	7.8	EPSS 0.2%	CVE-2025-24267Apple macOS · An app may be able to gain root privileges High7.8EPSS 0.2%2025-03-31CVE Database V5CVE-2025-24267 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges. EPSS 0.2%Vulnerability CWE-276	CVE Database V5	2025-03-31
Critical	9.8	EPSS 0.8%	CVE-2025-30444Apple macOS · Race Condition Critical9.8EPSS 0.8%2025-03-31CVE Database V5CVE-2025-30444 A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. Mounting a maliciously crafted SMB network share may lead to system termination. EPSS 0.8%Vulnerability CWE-362	CVE Database V5	2025-03-31
Critical	9.8	EPSS 1.0%	CVE-2025-30424Apple macOS · Information Exposure Critical9.8EPSS 1.0%2025-03-31CVE Database V5CVE-2025-30424 A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. Deleting a conversation in Messages may expose user contact information in system logging. EPSS 1.0%Vulnerability CWE-200	CVE Database V5	2025-03-31

Page 1 of 3