Vulnerabilities (CVE)

Filtered by vendor Apple Subscribe
Filtered by product Macos
Total 7452 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-50659 3 Apple, Linux, Microsoft 19 Macos, Linux Kernel, .net and 16 more 2026-10-28 N/A 6.5 MEDIUM
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
CVE-2026-50651 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-10-28 N/A 7.5 HIGH
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-50648 3 Apple, Linux, Microsoft 19 Macos, Linux Kernel, .net and 16 more 2026-10-28 N/A 7.5 HIGH
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-50528 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-10-28 N/A 8.2 HIGH
Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-50527 3 Apple, Linux, Microsoft 19 Macos, Linux Kernel, .net and 16 more 2026-10-28 N/A 7.5 HIGH
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-50526 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-10-28 N/A 7.0 HIGH
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.
CVE-2026-50525 3 Apple, Linux, Microsoft 19 Macos, Linux Kernel, .net and 16 more 2026-10-28 N/A 7.5 HIGH
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-50524 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-10-28 N/A 7.5 HIGH
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-47304 3 Apple, Linux, Microsoft 22 Macos, Linux Kernel, .net and 19 more 2026-10-28 N/A 8.1 HIGH
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-47303 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-10-28 N/A 8.8 HIGH
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVE-2026-47302 3 Apple, Linux, Microsoft 19 Macos, Linux Kernel, .net and 16 more 2026-10-28 N/A 7.5 HIGH
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-47300 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-10-28 N/A 8.8 HIGH
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVE-2023-43000 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2026-10-28 N/A 8.8 HIGH
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.
CVE-2023-22231 3 Adobe, Apple, Microsoft 3 Bridge, Macos, Windows 2026-10-28 N/A 5.5 MEDIUM
Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-52356 4 Apple, Debian, Libtiff and 1 more 14 Ipados, Iphone Os, Macos and 11 more 2026-10-28 N/A 7.5 HIGH
A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.
CVE-2026-113943 1 Apple 1 Macos 2026-10-28 N/A 6.5 MEDIUM
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
CVE-2026-84496 1 Apple 1 Macos 2026-10-28 N/A 6.5 MEDIUM
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
CVE-2026-65327 1 Apple 1 Macos 2026-10-28 N/A 8.4 HIGH
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A local attacker may be able to elevate their privileges.
CVE-2026-96521 3 Adobe, Apple, Microsoft 3 Photoshop, Macos, Windows 2026-10-28 N/A 7.8 HIGH
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-86929 1 Apple 1 Macos 2026-10-28 N/A 8.8 HIGH
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to arbitrary code execution.