Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple macOS Golden GateCVE-2026-28899

Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
First published (updated )
CVE-2026-28899

Apple macOS Golden GateInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Path Traversal, Null Pointer Dereference, Double Free

Severity
5.5
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Path Traversal, Null Pointer Dereference, Double Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 144
Source: Apple
First published (updated )
CVE-2026-84555

Apple macOS Golden GateInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Path Traversal, Null Pointer Dereference

Risk 28
Severity
4.7
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Path Traversal, Null Pointer Dereference
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.

1 / 68
Source: MITRE
First published (updated )
CVE-2026-84550

Apple macOS Golden GateInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Path Traversal, Null Pointer Dereference, Double Free

Severity
5.5
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Path Traversal, Null Pointer Dereference, Double Free
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.

1 / 120
Source: MITRE
First published (updated )
CVE-2026-65382

Apple tvOSRace Condition, Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Path Traversal

Risk 31
Severity
5.5
Race Condition, Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Path Traversal
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 52
Source: Apple
First published (updated )
Advisory
CVE-2026-43737

Apple tvOSUse After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition

Severity
5.5
Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, tvOS 27, visionOS 26.6, visionOS 27, watchOS 26.6, watchOS 27. An app may be able to cause unexpected system termination.

1 / 14
Source: MITRE
First published (updated )
CVE-2026-65407

Apple macOS Golden GateInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Path Traversal, Null Pointer Dereference, Double Free

Severity
6.1
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Path Traversal, Null Pointer Dereference, Double Free
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
First published (updated )
CVE-2026-84619

redhat/curltoken leak with redirect and netrc

Risk 20
Severity
5.3
EPSS
0.02%
Use After Free, Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Accessibility. This issue was addressed through improved state management.

1 / 52
Source: Apple
First published (updated )
CVE-2026-3783

redhat/libcurlwrong proxy connection reuse with credentials

Risk 29
Severity
6.5
EPSS
0.01%
Use After Free, Buffer Overflow, Race Condition, Input Validation
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Accessibility. This issue was addressed through improved state management.

1 / 52
Source: Apple
First published (updated )
CVE-2026-3784

curlbearer token leak on cross-protocol redirect

Risk 34
Severity
5.3
Use After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

802.1X. An authentication issue was addressed with improved state management.

1 / 32
Source: Apple
First published (updated )
CVE-2025-14524

redhat/libcurlOpenSSL partial chain store policy bypass

Risk 34
Severity
5.3
Input Validation, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 50
Source: Apple
First published (updated )
CVE-2025-14819

redhat/libcurlbroken TLS options for threaded LDAPS

Risk 50
Severity
6.3
Input Validation, Buffer Overflow, Race Condition
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 49
Source: Apple
First published (updated )
CVE-2025-14017

Apple tvOSCVE-2026-84523

Risk 32
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
First published (updated )
CVE-2026-84523

Apple macOS Golden GateCUPS. A logic issue was addressed with improved checks.

Risk 32
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 116
Source: Apple
First published (updated )
CVE-2026-84517

Apple iOSUse After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Null Pointer Dereference, Double Free, Path Traversal

Risk 31
Severity
5.5
Use After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Null Pointer Dereference, Double Free, Path Traversal
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system.

1 / 192
Source: MITRE
First published (updated )
CVE-2026-65348

Apple iPadOSUse After Free, Input Validation, Integer Overflow

Risk 29
Severity
5
Use After Free, Input Validation, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to leak sensitive user information.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-65339

Apple macOS SequoiaBuffer Overflow, Race Condition, Input Validation, Use After Free, Integer Overflow

Risk 32
Severity
5.5
Buffer Overflow, Race Condition, Input Validation, Use After Free, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or write kernel memory.

1 / 13
Source: MITRE
First published (updated )
CVE-2026-64705

Apple macOS SequoiaBuffer Overflow, Race Condition, Use After Free, Input Validation, Integer Overflow

Risk 31
Severity
5.5
Buffer Overflow, Race Condition, Use After Free, Input Validation, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.8, macOS Sequoia 15.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may be able to read files outside of its sandbox.

1 / 29
Source: MITRE
First published (updated )
CVE-2026-43763

Apple macOS TahoeBuffer Overflow, Race Condition, Use After Free

Risk 31
Severity
5.5
Buffer Overflow, Race Condition, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may bypass Gatekeeper checks.

1 / 49
Source: NVD
First published (updated )
CVE-2026-64708

Apple macOSBuffer Overflow, Input Validation, Race Condition, Integer Overflow

Risk 31
Severity
5.5
Buffer Overflow, Input Validation, Race Condition, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accounts. A parsing issue in the handling of directory paths was addressed with improved path validation.

1 / 88
Source: Apple
First published (updated )
CVE-2025-43325

Apple macOS TahoeBuffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference

Risk 31
Severity
5.5
Buffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to access sensitive user data.

1 / 123
Source: MITRE
First published (updated )
CVE-2026-28996

Apple macOS TahoeBuffer Overflow, Input Validation, Integer Overflow, Race Condition, Null Pointer Dereference, Use After Free, Double Free, Path Traversal

Risk 31
Severity
5.5
Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Null Pointer Dereference, Use After Free, Double Free, Path Traversal
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.

1 / 188
Source: MITRE
First published (updated )
CVE-2026-28914

Apple macOS TahoeBuffer Overflow, Input Validation, Integer Overflow, Race Condition, Use After Free, Double Free

Risk 36
Severity
6.2
Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Use After Free, Double Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 122
Source: Apple
First published (updated )
CVE-2026-43653

Apple iOSDouble Free, Input Validation, Race Condition, Use After Free, Buffer Overflow, Integer Overflow

Risk 37
Severity
6.5
Double Free, Input Validation, Race Condition, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.

1 / 101
Source: MITRE
First published (updated )
CVE-2026-43706

Apple macOS SequoiaRace Condition, Buffer Overflow, Input Validation, Integer Overflow, Use After Free

Risk 32
Severity
5.5
Race Condition, Buffer Overflow, Input Validation, Integer Overflow, Use After Free
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed through improved state management.

1 / 82
Source: Apple
First published (updated )
CVE-2026-43722

Apple WatchOSUse After Free, Buffer Overflow, Race Condition, Input Validation, Infoleak

Risk 31
Severity
5.5
Use After Free, Buffer Overflow, Race Condition, Input Validation, Infoleak
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed through improved state management.

1 / 34
Source: Apple
First published (updated )
CVE-2026-64734

Apple WatchOSUse After Free, Buffer Overflow, Race Condition, Input Validation

Risk 31
Severity
5.5
Use After Free, Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. This issue was addressed through improved state management.

1 / 39
Source: Apple
First published (updated )
CVE-2026-43744

Apple WatchOSUse After Free, Buffer Overflow, Race Condition, Infoleak

Risk 31
Severity
5.5
Use After Free, Buffer Overflow, Race Condition, Infoleak
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accounts Framework. This issue was addressed with improved data protection.

1 / 48
Source: Apple
First published (updated )
CVE-2026-43758

Apple WatchOSInput Validation, Buffer Overflow, Race Condition, Use After Free, Integer Overflow

Risk 31
Severity
5.5
Input Validation, Buffer Overflow, Race Condition, Use After Free, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed through improved state management.

1 / 63
Source: Apple
First published (updated )
CVE-2026-43714

Apple WatchOSUse After Free, Buffer Overflow, Race Condition, Input Validation, Integer Overflow, Infoleak

Risk 31
Severity
5.5
Use After Free, Buffer Overflow, Race Condition, Input Validation, Integer Overflow, Infoleak
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed through improved state management.

1 / 66
Source: Apple
First published (updated )
CVE-2026-43796

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203