apple / macos
1,342 known vulnerabilities in apple macos.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-10960 | Medium | 0.3% | 8.3 | Uninitialized Use in Codecs in Google Chrome prior to 149.0.7827.53 allowed a re… | |
| CVE-2026-11279 | Medium | 0.3% | 8.8 | Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a… | |
| CVE-2026-9883 | Medium | 0.3% | 8.8 | Use after free in Base in Google Chrome prior to 148.0.7778.216 allowed a remote… | |
| CVE-2026-9896 | Medium | 0.3% | 8.8 | Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a rem… | |
| CVE-2026-9897 | Medium | 0.3% | 8.8 | Use after free in DOM in Google Chrome prior to 148.0.7778.216 allowed a remote … | |
| CVE-2026-9969 | Medium | 0.3% | 8.8 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 14… | |
| CVE-2026-21283 | Medium | 0.3% | 7.8 | Bridge versions 15.1.2, 16.0 and earlier are affected by a Heap-based Buffer Ove… | |
| CVE-2026-5883 | Medium | 0.3% | 8.8 | Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote… | |
| CVE-2026-5884 | Medium | 0.3% | 8.8 | Insufficient validation of untrusted input in Media in Google Chrome prior to 14… | |
| CVE-2026-11116 | Medium | 0.3% | 8.8 | Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a r… | |
| CVE-2026-19305 | Medium | 0.3% | 8.6 | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain se… | |
| CVE-2026-62909 | Medium | 0.3% | 7.8 | Uncaught exception in .NET allows an authorized attacker to elevate privileges l… | |
| CVE-2026-10884 | Medium | 0.3% | 8.3 | Use after free in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a r… | |
| CVE-2026-10889 | Medium | 0.3% | 8.3 | Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a re… | |
| CVE-2026-10900 | Medium | 0.3% | 7.5 | Use after free in Passwords in Google Chrome on Mac prior to 149.0.7827.53 allow… | |
| CVE-2026-10905 | Medium | 0.3% | 8.3 | Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remo… | |
| CVE-2026-10909 | Medium | 0.3% | 8.3 | Use after free in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote … | |
| CVE-2026-10918 | Medium | 0.3% | 8.3 | Use after free in Viz in Google Chrome prior to 149.0.7827.53 allowed a remote a… | |
| CVE-2026-10919 | Medium | 0.3% | 8.3 | Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-10921 | Medium | 0.3% | 8.3 | Integer overflow in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remot… | |
| CVE-2026-10924 | Medium | 0.3% | 8.3 | Integer overflow in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a… | |
| CVE-2026-10925 | Medium | 0.3% | 8.3 | Out of bounds write in Skia in Google Chrome on Mac prior to 149.0.7827.53 allow… | |
| CVE-2026-10927 | Medium | 0.3% | 8.3 | Out of bounds read in Dawn in Google Chrome prior to 149.0.7827.53 allowed a rem… | |
| CVE-2026-20677 | Medium | 0.3% | 9.0 | A race condition was addressed with improved handling of symbolic links. This is… | |
| CVE-2026-43813 | Medium | 0.3% | 7.1 | A validation issue was addressed with improved input sanitization. This issue is… | |
| CVE-2026-10969 | Medium | 0.3% | 7.5 | Insufficient validation of untrusted input in Extensions in Google Chrome prior … | |
| CVE-2026-10970 | Medium | 0.3% | 8.3 | Insufficient validation of untrusted input in InterestGroups in Google Chrome pr… | |
| CVE-2026-11049 | Medium | 0.3% | 8.8 | Use after free in Password Manager in Google Chrome prior to 149.0.7827.53 allow… | |
| CVE-2026-11050 | Medium | 0.3% | 8.8 | Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote at… | |
| CVE-2026-11059 | Medium | 0.3% | 8.8 | Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-11077 | Medium | 0.3% | 8.8 | Bad cast in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attack… | |
| CVE-2026-11086 | Medium | 0.3% | 8.8 | Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 all… | |
| CVE-2026-11125 | Medium | 0.3% | 8.8 | Use after free in Compositing in Google Chrome prior to 149.0.7827.53 allowed a … | |
| CVE-2026-11130 | Medium | 0.3% | 8.8 | Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-11136 | Medium | 0.3% | 8.8 | Use after free in Canvas in Google Chrome prior to 149.0.7827.53 allowed a remot… | |
| CVE-2026-11164 | Medium | 0.3% | 8.8 | Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-11171 | Medium | 0.3% | 8.8 | Integer overflow in Blink in Google Chrome prior to 149.0.7827.53 allowed a remo… | |
| CVE-2026-11173 | Medium | 0.3% | 8.8 | Out of bounds write in V8 in Google Chrome prior to 149.0.7827.53 allowed a remo… | |
| CVE-2026-11211 | Medium | 0.3% | 8.8 | Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote … | |
| CVE-2026-11262 | Medium | 0.3% | 8.8 | Use after free in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a rem… | |
| CVE-2026-9957 | Medium | 0.3% | 8.8 | Use after free in PDF in Google Chrome prior to 148.0.7778.216 allowed a remote … | |
| CVE-2026-9968 | Medium | 0.3% | 8.8 | Integer overflow in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote… | |
| CVE-2026-11030 | Medium | 0.3% | 8.8 | Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remo… | |
| CVE-2026-11037 | Medium | 0.3% | 9.6 | Out of bounds write in Codecs in Google Chrome prior to 149.0.7827.53 allowed a … | |
| CVE-2026-17856 | Medium | 0.3% | 9.6 | Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7… | |
| CVE-2026-17865 | Medium | 0.3% | 9.6 | Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.79… | |
| CVE-2026-47911 | Medium | 0.3% | 7.8 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a… | |
| CVE-2024-44303 | Medium | 0.3% | 7.5 | The issue was addressed with improved checks. This issue is fixed in macOS Sequo… | |
| CVE-2026-11639 | Medium | 0.3% | 7.5 | Use after free in Compositing in Google Chrome on Mac prior to 149.0.7827.103 al… | |
| CVE-2026-35558 | Medium | 0.3% | 7.8 | Improper neutralization of special elements in the authentication components in … |