Vulnerabilities (CVE)

Filtered by vendor Apple Subscribe
Filtered by product Macos
Total 7054 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-55054 2 Apple, Microsoft 8 Macos, 365 Apps, Excel and 5 more 2026-07-15 N/A 6.5 MEDIUM
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-42899 3 Apple, Linux, Microsoft 4 Macos, Linux Kernel, .net and 1 more 2026-07-15 N/A 7.5 HIGH
Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-32203 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-07-15 N/A 7.5 HIGH
Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.
CVE-2026-32178 3 Apple, Linux, Microsoft 5 Macos, Linux Kernel, .net and 2 more 2026-07-15 N/A 7.5 HIGH
Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-28955 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-15 N/A 8.8 HIGH
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28953 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-15 N/A 7.5 HIGH
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28946 1 Apple 1 Macos 2026-07-15 N/A 6.5 MEDIUM
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-28942 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-15 N/A 6.5 MEDIUM
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-28905 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2026-07-15 N/A 7.5 HIGH
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28904 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-15 N/A 7.5 HIGH
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28903 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-15 N/A 6.5 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28902 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-15 N/A 6.5 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28901 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-15 N/A 4.3 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28883 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-15 N/A 7.5 HIGH
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28861 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2026-07-15 N/A 4.3 MEDIUM
A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. A malicious website may be able to access script message handlers intended for other origins.
CVE-2026-28859 1 Apple 7 Ipados, Iphone Os, Macos and 4 more 2026-07-15 N/A 4.3 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. A malicious website may be able to process restricted web content outside the sandbox.
CVE-2026-28857 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2026-07-15 N/A 6.5 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28847 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-15 N/A 8.8 HIGH
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-26171 3 Apple, Linux, Microsoft 5 Macos, Linux Kernel, .net and 2 more 2026-07-15 N/A 7.5 HIGH
Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-20664 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2026-07-15 N/A 4.3 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously crafted web content may lead to an unexpected process crash.