Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Sudo Sudosudo local privilege escalation via host option

Risk 94
Severity
8.8
Exploited
Use After Free, Input Validation, Race Condition
AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N

Admin Framework. A logic issue was addressed with improved checks.

1 / 82
Source: Apple
First published (updated )
CVE-2025-32462

Apple macOS TahoeBuffer Overflow, Input Validation, Race Condition

Risk 72
Severity
8.8
Buffer Overflow, Input Validation, Race Condition
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to break out of its sandbox.

1 / 66
Source: MITRE
First published (updated )
CVE-2025-43329

Apple macOS TahoeBuffer Overflow, Input Validation, Race Condition

Risk 72
Severity
8.8
Buffer Overflow, Input Validation, Race Condition
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A shortcut may be able to bypass sandbox restrictions.

1 / 81
Source: MITRE
First published (updated )
CVE-2025-43358

Apple tvOSInput Validation, Use After Free, Race Condition, Buffer Overflow

Risk 82
Severity
8.8
Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. A permissions issue was addressed with additional restrictions.

1 / 105
Source: Apple
First published (updated )
CVE-2025-43441

Apple WatchOSUse After Free, Input Validation, Race Condition

Risk 82
Severity
8.8
Use After Free, Input Validation, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 107
Source: NVD
First published (updated )
CVE-2025-43438

Apple WatchOSUse After Free, Input Validation, Race Condition

Risk 82
Severity
8.8
Use After Free, Input Validation, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 105
Source: MITRE
First published (updated )
CVE-2025-43457

Apple WatchOSInput Validation, Use After Free, Race Condition, Buffer Overflow

Risk 82
Severity
8.8
Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A permissions issue was addressed with additional restrictions.

1 / 107
Source: Apple
First published (updated )
CVE-2025-43433

Apple WatchOSUse After Free, Input Validation, Race Condition, Buffer Overflow

Risk 82
Severity
8.8
Use After Free, Input Validation, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A permissions issue was addressed with additional restrictions.

1 / 107
Source: Apple
First published (updated )
CVE-2025-43431

Apple SafariInput Validation, SQL Injection, Buffer Overflow, Race Condition

Risk 82
Severity
8.8
Input Validation, SQL Injection, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AirPort. A permissions issue was addressed with additional restrictions.

1 / 94
Source: Apple
First published (updated )
CVE-2025-43419

Google ChromeOut of bounds memory access in ANGLE

Risk 95
Severity
8.8
Exploited
Trending
Year
Integer Overflow, Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 77
Source: Apple
First published (updated )
CVE-2025-14174

Apple Multiple ProductsApple Multiple Products Use-After-Free WebKit Vulnerability

Risk 95
Severity
8.8
Exploited
Integer Overflow, Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management.

1 / 76
Source: Red Hat
First published (updated )
CVE-2025-43529

Apple tvOSBuffer Overflow

Risk 77
Severity
8.8
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

App Store. A permissions issue was addressed with additional restrictions.

1 / 3
Source: Apple
First published (updated )
CVE-2025-43539

Apple macOS TahoeInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition

Risk 82
Severity
8.8
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

1 / 85
Source: MITRE
First published (updated )
CVE-2025-43511

Apple macOS TahoeInput Validation, Race Condition

Risk 72
Severity
8.8
Input Validation, Race Condition
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to break out of its sandbox.

1 / 26
Source: MITRE
First published (updated )
CVE-2025-46281

Apple visionOSApple macOS libusd_ms Alembic File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Risk 77
Severity
8.8
Race Condition, Input Validation, Integer Overflow, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. An inconsistent user interface issue was addressed with improved state management.

1 / 49
Source: Apple
First published (updated )
CVE-2026-20616

Apple visionOSUse After Free, Input Validation, Race Condition, Integer Overflow

Risk 82
Severity
8.8
Use After Free, Input Validation, Race Condition, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 75
Source: Apple
First published (updated )
CVE-2026-20608

Apple visionOSUse After Free, Input Validation, Race Condition, Integer Overflow, Buffer Overflow

Risk 82
Severity
8.8
Use After Free, Input Validation, Race Condition, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 75
Source: Apple
First published (updated )
CVE-2026-20644

Apple visionOSUse After Free, Input Validation, Race Condition, Integer Overflow, Buffer Overflow

Risk 82
Severity
8.8
Use After Free, Input Validation, Race Condition, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 72
Source: Apple
First published (updated )
CVE-2026-20636

Apple visionOSUse After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow

Risk 82
Severity
8.8
Use After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 75
Source: Apple
First published (updated )
CVE-2026-20635

Apple macOS SequoiaUse After Free, Race Condition, Input Validation, Integer Overflow

Risk 72
Severity
8.8
Use After Free, Race Condition, Input Validation, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, watchOS 26.3. An app may be able to break out of its sandbox.

1 / 44
Source: MITRE
First published (updated )
CVE-2026-20667

Apple tvOSUse After Free, Input Validation, Null Pointer Dereference, Race Condition, Buffer Overflow

Risk 82
Severity
8.8
Use After Free, Input Validation, Null Pointer Dereference, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

802.1X. An authentication issue was addressed with improved state management.

1 / 88
Source: Apple
First published (updated )
CVE-2026-28859

Apple iOSInput Validation, Use After Free, Null Pointer Dereference, Race Condition, Buffer Overflow

Risk 82
Severity
8.8
Input Validation, Use After Free, Null Pointer Dereference, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

802.1X. An authentication issue was addressed with improved state management.

1 / 87
Source: Apple
First published (updated )
CVE-2026-20664

Apple iOSUse After Free, Input Validation, Null Pointer Dereference, Race Condition, Buffer Overflow

Risk 82
Severity
8.8
Use After Free, Input Validation, Null Pointer Dereference, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

802.1X. An authentication issue was addressed with improved state management.

1 / 87
Source: Apple
First published (updated )
CVE-2026-28857

Apple macOS TahoeUse After Free, Input Validation, Null Pointer Dereference, Race Condition, Buffer Overflow

Risk 79
Severity
8.8
Use After Free, Input Validation, Null Pointer Dereference, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

802.1X. An authentication issue was addressed with improved state management.

1 / 52
Source: Apple
First published (updated )
CVE-2026-20631

Apache HTTP ServerApache HTTP Server: http2: double free and possible RCE on early reset

Risk 95
Severity
8.8
Exploited
Double Free, Buffer Overflow
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Accounts Framework. This issue was addressed with improved data protection.

1 / 7
Source: Apple
First published (updated )
CVE-2026-23918

Apple macOS TahoeBuffer Overflow, Input Validation, Race Condition, Integer Overflow, Use After Free, Null Pointer Dereference

Risk 77
Severity
8.8
Buffer Overflow, Input Validation, Race Condition, Integer Overflow, Use After Free, Null Pointer Dereference
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 122
Source: Apple
First published (updated )
CVE-2026-43658

Apple macOS TahoeBuffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow

Risk 77
Severity
8.8
Buffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 69
Source: Apple
First published (updated )
CVE-2026-28905

Apple macOS TahoeApple Safari Regular Expression Duplicate Named Groups Heap-based Buffer Overflow Remote Code Execution Vulnerability

Risk 77
Severity
8.8
Buffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 77
Source: Apple
First published (updated )
CVE-2026-28847

Apple macOS TahoeBuffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow

Risk 77
Severity
8.8
Buffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 76
Source: Apple
First published (updated )
CVE-2026-28904

Apple macOS TahoeBuffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow

Risk 77
Severity
8.8
Buffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 76
Source: Apple
First published (updated )
CVE-2026-28903

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203