CyberSecBulletin

Apple vulnerabilities

We track 1,317 vulnerabilities in Apple products across 48 products. 1,301 are rated high or critical, and 104 have been exploited in real attacks. The most recent was published on November 9, 2026.

1,317vulnerabilities
218critical
1,083high
104exploited
8.1average CVSS score

Latest Apple vulnerabilities

  • 8.1 High severity

    Safari: Out-of-bounds Read

    CVE-2026-64719Apple

    An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted we

  • 7.8 High severity

    iOS and iPadOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2026-64716Apple

    The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciousl

  • 8.1 High severity

    Safari: Observable Discrepancy

    CVE-2026-64713Apple

    This issue was addressed with improved checks. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Websites may know if the user has visited a given link.

  • 9.8 Critical severity

    macOS: Access of Resource Using Incompatible Type

    CVE-2026-64704Apple

    A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

  • 9.8 Critical severity

    macOS: Use After Free

    CVE-2026-64703Apple

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service.

  • 9.8 Critical severity

    macOS: Improper Access Control

    CVE-2026-64702Apple

    An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to break out of its sandbox.

  • 9.8 Critical severity

    iOS and iPadOS: Use After Free

    CVE-2026-64700Apple

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app m

  • 9.8 Critical severity

    macOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2026-64698Apple

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or read kernel memory.

  • 9.8 Critical severity

    macOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2026-64697Apple

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.

  • 9.8 Critical severity

    macOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2026-64696Apple

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

  • 9.8 Critical severity

    iOS and iPadOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2026-64695Apple

    The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory

  • 9.8 Critical severity

    macOS: Integer Overflow or Wraparound

    CVE-2026-64694Apple

    An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

  • 7.1 High severity

    iOS and iPadOS: Out-of-bounds Read

    CVE-2026-64692Apple

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may

  • 9.8 Critical severity

    macOS: Buffer Copy without Checking Size of Input

    CVE-2026-64691Apple

    A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

  • 9.8 Critical severity

    iOS and iPadOS: Use After Free

    CVE-2026-43822Apple

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app m

  • 8.8 High severity

    iOS and iPadOS: Integer Overflow or Wraparound

    CVE-2026-43818Apple

    An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to a

  • 9.8 Critical severity

    iOS and iPadOS: Use After Free

    CVE-2026-43814Apple

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

  • 7.1 High severity

    A validation issue was addressed with improved input sanitization.

    CVE-2026-43813Apple

    A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A maliciously crafted app may be able to bypass code signing enforcement.

  • 9.8 Critical severity

    iOS and iPadOS: Use After Free

    CVE-2026-43812Apple

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. An app may be able to cause unexpected syst

  • 9.8 Critical severity

    iOS and iPadOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2026-43810Apple

    The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote user may be ab

  • 9.8 Critical severity

    iOS and iPadOS: Out-of-bounds Read

    CVE-2026-43809Apple

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

  • 9.8 Critical severity

    iOS and iPadOS: Buffer Copy without Checking Size of Input

    CVE-2026-43807Apple

    A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicio

  • 9.8 Critical severity

    iOS and iPadOS: Concurrent Execution using Shared Resource with Improper Synchronization

    CVE-2026-43805Apple

    A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel m

  • 9.8 Critical severity

    iOS and iPadOS: Out-of-bounds Write

    CVE-2026-43803Apple

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A re

  • 9.8 Critical severity

    iOS and iPadOS: Out-of-bounds Write

    CVE-2026-43802Apple

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

  • 9.8 Critical severity

    iOS and iPadOS: Use After Free

    CVE-2026-43799Apple

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app m

  • 9.8 Critical severity

    An issue existed in the handling of environment variables.

    CVE-2026-43793Apple

    An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

  • 7.8 High severity

    iOS and iPadOS: Integer Overflow or Wraparound

    CVE-2026-43780Apple

    An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted texture may

  • 9.8 Critical severity

    macOS: Improper Access Control

    CVE-2026-43779Apple

    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to intercept network connections intended for another process.

  • 9.8 Critical severity

    iOS and iPadOS: Use After Free

    CVE-2026-43778Apple

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app m

  • 7.5 High severity

    This issue was addressed with improved input validation.

    CVE-2026-43777Apple

    This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote attacker may be able to cause a denial of service.

  • 7.8 High severity

    iOS and iPadOS: Buffer Copy without Checking Size of Input

    CVE-2026-43776Apple

    A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a maliciously crafted file may lead to unexpected app termination

  • 9.8 Critical severity

    macOS: Out-of-bounds Read

    CVE-2026-43773Apple

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.

  • 8.2 High severity

    macOS: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-43772Apple

    A path traversal issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to break out of its sandbox.

  • 7.1 High severity

    macOS: Stack-based Buffer Overflow

    CVE-2026-43771Apple

    A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service.

  • 9.8 Critical severity

    iOS and iPadOS: Integer Overflow or Wraparound

    CVE-2026-43769Apple

    An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may b

  • 9.8 Critical severity

    macOS: Integer Overflow or Wraparound

    CVE-2026-43764Apple

    An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

  • 8.6 High severity

    macOS: Improper Access Control

    CVE-2026-43760Apple

    An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may be able to access user-sensitive data.

  • 9.8 Critical severity

    iOS and iPadOS: Out-of-bounds Read

    CVE-2026-43757Apple

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

  • 7.0 High severity

    macOS: Concurrent Execution using Shared Resource with Improper Synchronization

    CVE-2026-43755Apple

    A race condition was addressed with improved state management. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.