CVE-2025-43325: An app may be able to access sensitive user data.
Affects Icons

x

x

CVE-2026-20672: An app may be able to access sensitive user data.
Affects LaunchServices

x

x

CVE-2026-23918: A remote attacker may be able to cause a denial-of-service.
Affects apache

x

x

x

CVE-2026-28849: A maliciously crafted ZIP archive may bypass Gatekeeper checks.
Affects BOM

x

x

CVE-2026-28896: An attacker may be able to cause unexpected system termination or read kernel memory.
Affects ppp

x

x

CVE-2026-28900: A maliciously crafted ZIP archive may bypass Gatekeeper checks.
Affects libarchive

x

x

CVE-2026-28911: A malicious app may be able to corrupt memory of a system process.
Affects Metal

x

x

CVE-2026-28912: A user may be able to elevate privileges.
Affects PackageKit

x

x

CVE-2026-28914: A maliciously crafted ZIP archive may bypass Gatekeeper checks.
Affects zip

x

x

CVE-2026-28926: An app may be able to elevate privileges.
Affects Disk Images

x

x

CVE-2026-28928: An app may be able to cause unexpected system termination.
Affects Apple Neural Engine

x

x

x

x

CVE-2026-28931: Connecting to a malicious NFS server may lead to kernel memory corruption.
Affects Kernel

x

x

x

x

CVE-2026-28932: An app may be able to cause a denial of service.
Affects xar

x

x

x

CVE-2026-28936: Processing a maliciously crafted file may lead to unexpected app termination.
Affects CoreServices

x

x

CVE-2026-28945: An app may be able to bypass network restrictions.
Affects Disk Images

x

x

x

CVE-2026-28961: An attacker with physical access to a locked device may be able to view sensitive user information.
Affects Network Extensions

x

x

CVE-2026-28973: A malicious app may be able to break out of its sandbox.
Affects libc

x

x

x

x

x

CVE-2026-28981: Processing a maliciously crafted image may lead to arbitrary code execution.
Affects HFS

x

x

x

CVE-2026-28982: A remote user may be able to cause unexpected system termination or corrupt kernel memory.
Affects Kernel

x

x

x

CVE-2026-28983: A remote attacker may be able to cause a denial of service.
Affects LaunchServices

x

x

CVE-2026-39868: An app may be able to cause unexpected system termination or corrupt kernel memory.
Affects Kernel

x

x

x

x

x

CVE-2026-39873: Connecting to a malicious SMB server may lead to unexpected system termination.
Affects SMB

x

x

x

CVE-2026-39874: A malicious app may be able to gain root privileges.
Affects Remote Management

x

x

x

CVE-2026-39875: A malicious app may be able to gain root privileges.
Affects CUPS

x

x

x

CVE-2026-39877: An app may be able to disclose kernel memory.
Affects IOSkywalkFamily

x

x

CVE-2026-43661: Processing a maliciously crafted image may corrupt process memory.
Affects ImageIO

x

x

CVE-2026-43665: A local attacker may be able to determine the legacy VNC password configured for Screen Sharing.
Affects Screen Sharing Server

x

x

CVE-2026-43672: A malicious application may be able to bypass Privacy preferences.
Affects Assets

x

x

x

CVE-2026-43673: Processing a maliciously crafted audio file may corrupt process memory.
Affects CoreAudio

x

x

x

x

x

x

x

CVE-2026-43676: Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affects WebKit

x

x

CVE-2026-43681: A local user may be able to read kernel memory.
Affects AppleRAID

x

x

x

CVE-2026-43682: A remote user may be able to cause unexpected system termination or corrupt kernel memory.
Affects HFS

x

x

x

CVE-2026-43693: An app may be able to gain root privileges.
Affects Core Services

x

x

x

CVE-2026-43694: An app may be able to cause unexpected system termination or write kernel memory.
Affects quarantine

x

x

x

CVE-2026-43698: An app may be able to gain root privileges.
Affects CUPS

x

x

x

CVE-2026-43699: Processing maliciously crafted web content may lead to an unexpected process crash.
Affects WebKit

x

x

x

CVE-2026-43700: Processing maliciously crafted web content may disclose sensitive user information.
Affects WebKit

x

x

x

CVE-2026-43701: A malicious website may be able to process restricted web content outside the sandbox.
Affects WebKit

x

x

x

CVE-2026-43703: Processing maliciously crafted web content may lead to an unexpected process crash.
Affects libxslt

x

x

x

x

x

CVE-2026-43704: A malicious web extension may be able to cause an unexpected process crash.
Affects Web Extensions

x

x

x

CVE-2026-43705: Processing maliciously crafted web content may lead to memory corruption.
Affects WebKit

x

x

x

CVE-2026-43706: Processing maliciously crafted web content may lead to an unexpected process crash.
Affects libxslt

x

x

x

x

x

CVE-2026-43707: Processing maliciously crafted web content may lead to an unexpected process crash.
Affects WebKit

x

x

x

CVE-2026-43708: A malicious website may exfiltrate data cross-origin.
Affects WebKit

x

x

x

CVE-2026-43710: An attacker may be able to cause unexpected system termination or corrupt kernel memory.
Affects HFS

x

x

x

CVE-2026-43711: Processing a maliciously crafted video file may lead to unexpected app termination.
Affects CoreMedia

x

x

x

x

x

x

x

CVE-2026-43712: Processing maliciously crafted web content may lead to an unexpected process crash.
Affects WebKit

x

x

x

CVE-2026-43713: Visiting a website may leak sensitive data.
Affects WebKit

x

x

x

CVE-2026-43714: A malicious app may be able to access protected user data.
Affects Foundation

x

x

x

x

x

x

CVE-2026-43715: Processing maliciously crafted web content may lead to memory corruption.
Affects WebKit

x

x

x

CVE-2026-43717: Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affects WebRTC

x

x

CVE-2026-43718: Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affects WebRTC

x

x

x

CVE-2026-43721: A malicious website may be able to silently hijack clipboard data.
Affects WebKit Storage

x

x

x

CVE-2026-43722: An app may be able to leak sensitive kernel state.
Affects Kernel

x

x

CVE-2026-43723: An app may be able to gain root privileges.
Affects MediaRemote

x

x

x

x

x

x

x

CVE-2026-43724: An app may be able to cause unexpected system termination or write kernel memory.
Affects Kernel

x

x

x

x

x

CVE-2026-43725: A malicious website may be able to process restricted web content outside the sandbox.
Affects WebKit

x

x

x

CVE-2026-43728: An attacker may be able to modify the state of the Keychain.
Affects Security

x

CVE-2026-43729: Processing a maliciously crafted image may corrupt process memory.
Affects Model I/O

x

x

x

x

x

CVE-2026-43730: An app may be able to fingerprint the user.
Affects AuthKit

x

x

x

x

x

CVE-2026-43732: Processing maliciously crafted web content may disclose sensitive user information.
Affects WebKit

x

x

x

CVE-2026-43735: A malicious website may exfiltrate data cross-origin.
Affects WebKit

x

x

x

CVE-2026-43738: Processing a maliciously crafted asset catalog may result in disclosure of process memory.
Affects CoreUI

x

x

CVE-2026-43740: Processing maliciously crafted web content may result in the disclosure of process memory.
Affects WebKit

x

x

x

x

x

x

CVE-2026-43743: An app may be able to cause unexpected system termination.
Affects IOGPUFamily

x

x

CVE-2026-43744: Processing an audio stream in a maliciously crafted media file may terminate the process.
Affects CoreAudio

x

x

x

x

x

x

x

CVE-2026-43745: Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affects WebKit

x

x

x

CVE-2026-43747: Parsing a maliciously crafted file may lead to an unexpected app termination.
Affects Disk Images

x

x

x

CVE-2026-43748: An app may be able to cause unexpected system termination.
Affects Apple Neural Engine

x

x

CVE-2026-43749: An app may be able to gain root privileges.
Affects Accounts

x

x

x

CVE-2026-43750: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
Affects Wi?Fi

x

x

x

CVE-2026-43753: An attacker with physical access to a locked device may be able to view sensitive user information.
Affects DriverKit

x

x

x

x

CVE-2026-43754: An app may be able to leak sensitive kernel state.
Affects Kernel

x

x

x

CVE-2026-43755: An app may be able to gain root privileges.
Affects SecurityAgent

x

x

CVE-2026-43756: An app may be able to access user-sensitive data.
Affects Control Center

x

x

x

CVE-2026-43757: An app may be able to cause unexpected system termination.
Affects Kernel

x

x

x

CVE-2026-43758: An app may be able to access sensitive user data.
Affects Data Detectors UI

x

x

x

x

CVE-2026-43759: An app may be able to access sensitive user data.
Affects CoreMedia

x

x

CVE-2026-43760: An app may be able to access user-sensitive data.
Affects Screen Sharing Server

x

x

CVE-2026-43763: An app may be able to read files outside of its sandbox.
Affects ATS

x

x

x

CVE-2026-43764: An app may be able to cause unexpected system termination.
Affects HFS

x

x

x

CVE-2026-43765: An app may be able to modify protected parts of the file system.
Affects PackageKit

x

x

x

CVE-2026-43766: An attacker with physical access to a locked device may be able to view sensitive user information.
Affects LoginWindow

x

x

x

CVE-2026-43767: An app may be able to cause unexpected system termination.
Affects HFS

x

x

x

CVE-2026-43768: An app may be able to cause unexpected system termination.
Affects udf

x

x

x

CVE-2026-43769: An app may be able to cause unexpected system termination.
Affects Kernel

x

x

x

x

x

x

x

CVE-2026-43770: An app may be able to access sensitive user data.
Affects StorageKit

x

x

x

x

CVE-2026-43771: An app may be able to cause a denial-of-service.
Affects Net-SNMP

x

x

x

CVE-2026-43772: An app may be able to break out of its sandbox.
Affects NetFSFramework

x

x

x

CVE-2026-43773: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
Affects HFS

x

x

x

CVE-2026-43774: An app may be able to access sensitive user data.
Affects Spotlight

x

x

x

CVE-2026-43775: An app may be able to access sensitive user data.
Affects CoreMedia

x

CVE-2026-43776: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
Affects AppleDouble

x

x

x

CVE-2026-43777: A remote attacker may be able to cause a denial of service.
Affects Screen Sharing Server

x

x

x

CVE-2026-43778: An app may be able to cause unexpected system termination or corrupt kernel memory.
Affects Kernel

x

x

x

x

x

x

x

CVE-2026-43779: An app may be able to intercept network connections intended for another process.
Affects Screen Sharing Server

x

x

x

CVE-2026-43780: Processing a maliciously crafted texture may lead to unexpected app termination.
Affects ImageIO

x

x

x

x

x

x

x

CVE-2026-43781: An app may be able to access sensitive user data.
Affects Apple Account

x

x

x

CVE-2026-43782: An app may be able to access sensitive user data.
Affects Kernel

x

x

x

CVE-2026-43792: An app may be able to access sensitive user data.
Affects Safari

x

x

CVE-2026-43793: An app may be able to cause unexpected system termination.
Affects DriverKit

x

x

x

CVE-2026-43796: An app may be able to access sensitive user data.
Affects Game Center

x

x

x

x

x

x

x

CVE-2026-43797: An app may be able to access information about a user's contacts.
Affects Contacts

x

x

CVE-2026-43799: An app may be able to cause unexpected system termination.
Affects Kernel

x

x

x

x

x

x

x

CVE-2026-43800: An app may be able to access sensitive user data.
Affects Siri

x

x

x

x

CVE-2026-43801: An app may be able to access sensitive user data.
Affects App Store

x

x

x

x

x

x

x

CVE-2026-43802: An app may be able to cause unexpected system termination.
Affects CoreVideo

x

x

x

CVE-2026-43803: A remote attacker may be able to cause unexpected system termination.
Affects CoreAudio

x

x

x

x

x

x

x

CVE-2026-43804: Visiting a website may lead to an app denial-of-service.
Affects WebKit

x

x

x

x

CVE-2026-43805: An app may be able to cause unexpected system termination or write kernel memory.
Affects IOKit

x

x

x

x

x

CVE-2026-43806: A local attacker may be able to cause a denial of service.
Affects mDNSResponder

x

CVE-2026-43807: A malicious accessory may be able to cause unexpected app termination.
Affects MobileAccessoryUpdater

x

x

x

x

x

CVE-2026-43810: A remote user may be able to cause unexpected system termination or corrupt kernel memory.
Affects Kernel

x

x

x

x

x

x

x

CVE-2026-43811: An app may be able to modify protected parts of the file system.
Affects Books

x

CVE-2026-43812: An app may be able to cause unexpected system termination.
Affects Pro Res

x

x

x

x

x

CVE-2026-43813: A maliciously crafted app may be able to bypass code signing enforcement.
Affects CloudAttestation

x

x

x

x

x

CVE-2026-43816: An app may be able to cause unexpected system termination.
Affects Kernel

x

x

x

x

x

CVE-2026-43817: An app may be able to cause unexpected system termination.
Affects Kernel

x

x

x

x

CVE-2026-43818: Processing a maliciously crafted image may lead to arbitrary code execution.
Affects ImageIO

x

x

x

x

CVE-2026-43819: An app may be able to access sensitive user data.
Affects Accounts

x

CVE-2026-43821: An app may be able to read files outside of its sandbox.
Affects WebKit

x

x

x

x

x

x

CVE-2026-64691: An app may be able to cause unexpected system termination.
Affects GPU Drivers

x

CVE-2026-64692: An app may be able to cause a denial-of-service.
Affects Heimdal

x

x

x

x

x

x

x

CVE-2026-64693: Processing a maliciously crafted image may lead to a denial-of-service.
Affects ImageIO

x

x

x

x

x

x

x

CVE-2026-64694: An app may be able to cause unexpected system termination.
Affects Disk Images

x

x

x

CVE-2026-64695: A remote user may be able to cause unexpected system termination or corrupt kernel memory.
Affects APFS

x

x

x

CVE-2026-64696: A remote user may be able to cause unexpected system termination or corrupt kernel memory.
Affects SMB

x

x

x

CVE-2026-64697: An app may be able to cause unexpected system termination or corrupt kernel memory.
Affects HFS

x

x

x

CVE-2026-64698: An app may be able to cause unexpected system termination or read kernel memory.
Affects cd9660

x

x

x

CVE-2026-64699: An app may be able to disclose kernel memory.
Affects WebDAV

x

x

x

CVE-2026-64702: An app may be able to break out of its sandbox.
Affects Audio

x

x

x

CVE-2026-64703: An app may be able to cause a denial-of-service.
Affects WebDAV

x

x

x

CVE-2026-64704: An app may be able to cause unexpected system termination.
Affects SMB

x

x

x

CVE-2026-64707: An app may be able to delete files for which it does not have permission.
Affects BackgroundAssets

x

x

x

x

x

CVE-2026-64708: An app may bypass Gatekeeper checks.
Affects DesktopServices

x

x

x

CVE-2026-64709: An app may be able to disclose kernel memory.
Affects Kernel

x

x

x

x

x

x

x

CVE-2026-64710: An app may be able to leak sensitive user information.
Affects Crash Reporter

x

x

x

CVE-2026-64711: An app may be able to leak sensitive user information.
Affects NSColorPanel

x

x

x

x

CVE-2026-64713: Websites may know if the user has visited a given link.
Affects WebKit

x

x

x

x

x

x

CVE-2026-64716: Processing a maliciously crafted image may corrupt process memory.
Affects ImageIO

x

x

x

x

x

x

x

CVE-2026-64718: Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affects WebKit Canvas

x

x

x

x

x

x

CVE-2026-64719: Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affects WebRTC

x

x

x

x

x

x

CVE-2026-64720: An app may be able to cause unexpected system termination.
Affects Kernel

x

x

x

x

CVE-2026-64721: An app may be able to access sensitive user data.
Affects Kernel

x

x

x

x

x

x

x

CVE-2026-64722: Processing a 3D model may result in disclosure of process memory.
Affects Model I/O

x

x

x

CVE-2026-64723: An app may be able to access sensitive user data.
Affects Kernel

x

x

x

CVE-2026-64724: An attacker on the local network may be able to cause a denial-of-service.
Affects mDNSResponder

x

x

x

x

x

x

x

CVE-2026-64725: An app may be able to cause a denial-of-service.
Affects Audio

x

x

x

x

x

x

x

CVE-2026-64726: An attacker in physical proximity may be able to corrupt process memory.
Affects Wi-Fi

x

x

x

x

x

CVE-2026-64727: An app may be able to cause unexpected system termination.
Affects Kernel

x

x

CVE-2026-64728: Maliciously crafted web content may violate iframe sandboxing policy.
Affects WebKit

x

x

x

x

x

x

CVE-2026-64730: Visiting a website that frames malicious content may lead to UI spoofing.
Affects WebKit

x

x

x

x

x

x

CVE-2026-64731: A malicious app may be able to break out of its sandbox.
Affects Printing

x

x

CVE-2026-64732: An attacker with physical access may be able to access sensitive user data during iPhone Mirroring.
Affects Accessibility

x

CVE-2026-64733: An app may be able to fingerprint the user.
Affects Accounts Framework

x

x

x

x

x

CVE-2026-64734: Processing a maliciously crafted contact may leak sensitive data.
Affects Contacts

x

x

x

x

x

x

CVE-2026-64735: A remote attacker may be able to bypass network filters.
Affects Kernel

x

x

x

x

x

x

x

CVE-2026-64737: A malicious app may be able to break out of its sandbox.
Affects Apple Account

x

x

x

CVE-2026-64738: A malicious app may be able to break out of its sandbox.
Affects Maps

x

x

x

CVE-2026-64739: An attacker may be able to cause unexpected app termination.
Affects Libnotify

x

x

x

x

x

x

x

CVE-2026-64740: A malicious app may be able to break out of its sandbox.
Affects Game Center

x

x

x

x

x

CVE-2026-64741: An app may be able to read a persistent device identifier.
Affects Sandbox Profiles

x

x

x

x

CVE-2026-64742: An app may be able to access sensitive user data.
Affects FrontBoard

x

x

x

x

CVE-2026-64743: An app may be able to access sensitive user data.
Affects Managed Configuration

x

x

x

x

x

CVE-2026-64744: An app may be able to disclose kernel memory.
Affects Kernel

x

x

x

CVE-2026-64745: A person with physical access to a locked device may be able to access contacts and photos.
Affects Siri

x

x

CVE-2026-64746: An app may be able to add contacts without user authorization.
Affects Contacts

x

x

x

x

CVE-2026-64747: An app may be able to execute arbitrary code with kernel privileges.
Affects AVEVideoEncoder

x

x

x

x

x

x

x

CVE-2026-64749: An app may be able to cause unexpected system termination or corrupt kernel memory.
Affects Kernel

x

x

x

x

CVE-2026-64751: An app may be able to cause unexpected system termination or write kernel memory.
Affects Kernel

x

x

x

x

x

CVE-2026-64754: Processing a maliciously crafted file may lead to a denial-of-service.
Affects ImageIO

x

x

x

x

x

x

x

CVE-2026-64755: An app may be able to access sensitive user data.
Affects WorkoutKit

x

CVE-2026-64757: Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affects WebKit

x

x

x

x

x

CVE-2026-64758: Processing a maliciously crafted file may lead to unexpected app termination.
Affects ImageIO

x

x

x

x

x

CVE-2026-64762: An app may be able to cause unexpected system termination.
Affects AVEVideoEncoder

x

x

x

CVE-2026-64763: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
Affects SceneKit

x

x

x

x

x

x

x

CVE-2026-64764: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
Affects SceneKit

x

x

x

x

x

x

x

CVE-2026-64765: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
Affects SceneKit

x

x

x

x

x

x

x

CVE-2026-64767: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
Affects afpfs

x

x

x

CVE-2026-64768: A remote attacker may cause an unexpected app termination.
Affects Model I/O

x

x

x

x

x

x

CVE-2026-64769: A remote attacker may be able to cause unexpected application termination or heap corruption.
Affects Model I/O

x

x

x

x

x

x

CVE-2026-64771: A remote attacker may be able to cause unexpected application termination or heap corruption.
Affects Model I/O

x

x

x

x

x

CVE-2026-64772: A remote attacker may be able to cause unexpected application termination or heap corruption.
Affects Model I/O

x

x

x

x

x

CVE-2026-64774: A remote attacker may be able to cause unexpected application termination or heap corruption.
Affects Model I/O

x

x

x

x

x

x

CVE-2026-64775: An app may be able to cause unexpected system termination.
Affects Kernel

x

x

x

x

x

x

x

CVE-2026-64776: An app may be able to disclose kernel memory.
Affects Disk Images

x

x

x

CVE-2026-64783: Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affects WebKit