{"schema_version":1,"title":"Apple macOS vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 907 vulnerabilities in Apple macOS: 9 in the last 7 days and 531 in the last 90 days, 92 of them critical and 59 exploited in the wild. The most recent, CVE-2026-83964, was published on 22 September 2026.","url":"https://junglewise.ai/threats/technologies/macos-tahoe","json_url":"https://junglewise.ai/threats/technologies/macos-tahoe.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/macos-tahoe","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":279,"all_time":907,"critical":92,"exploited":59,"last_7_days":9,"last_30_days":287,"last_90_days":531,"last_365_days":849},"latest":[{"cve":"CVE-2026-83964","cvss":6.2,"epss":0.0011,"slug":"cve-2026-83964-adobe-connect-is-affected-by-an-improper-certificate-validation","title":"Adobe Connect improper certificate validation","severity":"medium","exploited":false,"published_at":"2026-09-22T19:16:54.13+00:00","url":"https://junglewise.ai/threats/cve-2026-83964-adobe-connect-is-affected-by-an-improper-certificate-validation"},{"cve":"CVE-2026-75698","cvss":9.3,"epss":0.0032,"slug":"cve-2026-75698-adobe-connect-is-affected-by-a-reflected-cross-site-scripting-xss","title":"Adobe Connect reflected Cross-Site Scripting in web page","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.91+00:00","url":"https://junglewise.ai/threats/cve-2026-75698-adobe-connect-is-affected-by-a-reflected-cross-site-scripting-xss"},{"cve":"CVE-2026-75697","cvss":9.3,"epss":0.003,"slug":"cve-2026-75697-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss","title":"Adobe Connect stored cross-site scripting in form fields","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.77+00:00","url":"https://junglewise.ai/threats/cve-2026-75697-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss"},{"cve":"CVE-2026-75689","cvss":9.3,"epss":0.003,"slug":"cve-2026-75689-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss","title":"Adobe Connect stored cross-site scripting","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.643+00:00","url":"https://junglewise.ai/threats/cve-2026-75689-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss"},{"cve":"CVE-2026-75686","cvss":9.3,"epss":0.0105,"slug":"cve-2026-75686-adobe-connect-is-affected-by-an-improper-input-validation","title":"Adobe Connect improper input validation vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.52+00:00","url":"https://junglewise.ai/threats/cve-2026-75686-adobe-connect-is-affected-by-an-improper-input-validation"},{"cve":"CVE-2026-75684","cvss":9.3,"epss":0.003,"slug":"cve-2026-75684-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss","title":"Adobe Connect stored Cross-Site Scripting vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.393+00:00","url":"https://junglewise.ai/threats/cve-2026-75684-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss"},{"cve":"CVE-2026-75682","cvss":9.9,"epss":0.0054,"slug":"cve-2026-75682-adobe-connect-is-affected-by-an-improper-neutralization-of","title":"Adobe Connect SQL injection leading to arbitrary code execution","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.26+00:00","url":"https://junglewise.ai/threats/cve-2026-75682-adobe-connect-is-affected-by-an-improper-neutralization-of"},{"cve":"CVE-2026-48361","cvss":6.1,"epss":0.0018,"slug":"cve-2026-48361-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss","title":"Adobe Connect stored cross-site scripting","severity":"medium","exploited":false,"published_at":"2026-09-22T19:16:43.763+00:00","url":"https://junglewise.ai/threats/cve-2026-48361-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss"},{"cve":"CVE-2026-34689","cvss":8.6,"epss":0.0066,"slug":"cve-2026-34689-adobe-connect-is-affected-by-an-improper-limitation-of-a-pathname","title":"Adobe Connect path traversal in file access","severity":"high","exploited":false,"published_at":"2026-09-22T19:16:43.21+00:00","url":"https://junglewise.ai/threats/cve-2026-34689-adobe-connect-is-affected-by-an-improper-limitation-of-a-pathname"},{"cve":"CVE-2026-91748","cvss":8.3,"epss":0.0023,"slug":"cve-2026-91748-google-chrome-race-condition-in-extensions-on-mac","title":"Google Chrome race condition in Extensions on Mac","severity":"high","exploited":false,"published_at":"2026-09-15T21:16:48.703+00:00","url":"https://junglewise.ai/threats/cve-2026-91748-google-chrome-race-condition-in-extensions-on-mac"},{"cve":"CVE-2026-91744","cvss":5.3,"epss":0.0023,"slug":"cve-2026-91744-google-chrome-race-condition-in-platformintegration-on-macos","title":"Google Chrome race condition in PlatformIntegration on macOS","severity":"medium","exploited":false,"published_at":"2026-09-15T21:16:48.143+00:00","url":"https://junglewise.ai/threats/cve-2026-91744-google-chrome-race-condition-in-platformintegration-on-macos"},{"cve":"CVE-2026-91727","cvss":8.1,"epss":0.0011,"slug":"cve-2026-91727-google-chrome-incorrect-reference-resolution-in-extensions-on-mac","title":"Google Chrome incorrect reference resolution in Extensions on Mac","severity":"high","exploited":false,"published_at":"2026-09-15T21:16:45.98+00:00","url":"https://junglewise.ai/threats/cve-2026-91727-google-chrome-incorrect-reference-resolution-in-extensions-on-mac"},{"cve":"CVE-2026-91712","cvss":8.3,"epss":0.0027,"slug":"cve-2026-91712-google-chrome-race-condition-in-extensions-on-mac","title":"Google Chrome race condition in Extensions on Mac","severity":"high","exploited":false,"published_at":"2026-09-15T21:16:44.043+00:00","url":"https://junglewise.ai/threats/cve-2026-91712-google-chrome-race-condition-in-extensions-on-mac"},{"cve":"CVE-2026-86924","cvss":5.5,"epss":0.0016,"slug":"cve-2026-86924-apple-ios-and-ipados-memory-corruption-via-malicious-accessory","title":"Apple iOS and iPadOS memory corruption via malicious accessory","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.863+00:00","url":"https://junglewise.ai/threats/cve-2026-86924-apple-ios-and-ipados-memory-corruption-via-malicious-accessory"},{"cve":"CVE-2026-86917","cvss":7.8,"epss":0.0015,"slug":"cve-2026-86917-apple-macos-privilege-escalation-via-permissions-issue","title":"Apple macOS privilege escalation via permissions issue","severity":"high","exploited":false,"published_at":"2026-09-14T21:17:41.76+00:00","url":"https://junglewise.ai/threats/cve-2026-86917-apple-macos-privilege-escalation-via-permissions-issue"},{"cve":"CVE-2026-86911","cvss":5.5,"epss":0.0015,"slug":"cve-2026-86911-apple-macos-clickjacking-protection-bypass-in-secure-prompts","title":"Apple macOS clickjacking protection bypass in secure prompts","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.657+00:00","url":"https://junglewise.ai/threats/cve-2026-86911-apple-macos-clickjacking-protection-bypass-in-secure-prompts"},{"cve":"CVE-2026-86910","cvss":5.5,"epss":0.0018,"slug":"cve-2026-86910-apple-macos-apfs-permissions-issue-via-path-validation-bypass","title":"Apple macOS APFS permissions issue via path validation bypass","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.55+00:00","url":"https://junglewise.ai/threats/cve-2026-86910-apple-macos-apfs-permissions-issue-via-path-validation-bypass"},{"cve":"CVE-2026-86909","cvss":4.4,"epss":0.0015,"slug":"cve-2026-86909-apple-macos-gatekeeper-bypass-via-logic-issue","title":"Apple macOS Gatekeeper bypass via logic issue","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.457+00:00","url":"https://junglewise.ai/threats/cve-2026-86909-apple-macos-gatekeeper-bypass-via-logic-issue"},{"cve":"CVE-2026-86905","cvss":5.5,"epss":0.0014,"slug":"cve-2026-86905-apple-keychain-unauthorized-credential-deletion-vulnerability","title":"Apple Keychain unauthorized credential deletion vulnerability","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.353+00:00","url":"https://junglewise.ai/threats/cve-2026-86905-apple-keychain-unauthorized-credential-deletion-vulnerability"},{"cve":"CVE-2026-86903","cvss":5.5,"epss":0.0016,"slug":"cve-2026-86903-apple-ios-out-of-bounds-read-in-kernel-memory","title":"Apple iOS out-of-bounds read in kernel memory","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.14+00:00","url":"https://junglewise.ai/threats/cve-2026-86903-apple-ios-out-of-bounds-read-in-kernel-memory"},{"cve":"CVE-2026-86902","cvss":5.5,"epss":0.0018,"slug":"cve-2026-86902-apple-macos-directory-path-validation-bypass","title":"Apple macOS directory path validation bypass","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.037+00:00","url":"https://junglewise.ai/threats/cve-2026-86902-apple-macos-directory-path-validation-bypass"},{"cve":"CVE-2026-86901","cvss":7.1,"epss":0.0017,"slug":"cve-2026-86901-apple-macos-exfat-out-of-bounds-write-in-file-system-parsing","title":"Apple macOS exFAT out-of-bounds write in file system parsing","severity":"high","exploited":false,"published_at":"2026-09-14T21:17:40.937+00:00","url":"https://junglewise.ai/threats/cve-2026-86901-apple-macos-exfat-out-of-bounds-write-in-file-system-parsing"},{"cve":"CVE-2026-86900","cvss":6.5,"epss":0.0034,"slug":"cve-2026-86900-apple-macos-out-of-bounds-read-in-exfat-mounting","title":"Apple macOS out-of-bounds read in exFAT mounting","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:40.83+00:00","url":"https://junglewise.ai/threats/cve-2026-86900-apple-macos-out-of-bounds-read-in-exfat-mounting"},{"cve":"CVE-2026-86898","cvss":5.4,"epss":0.0025,"slug":"cve-2026-86898-apple-safari-universal-cross-site-scripting-in-webarchive","title":"Apple Safari universal cross-site scripting in webarchive handling","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:40.71+00:00","url":"https://junglewise.ai/threats/cve-2026-86898-apple-safari-universal-cross-site-scripting-in-webarchive"},{"cve":"CVE-2026-86897","cvss":5.5,"epss":0.0016,"slug":"cve-2026-86897-apple-accessibility-entitlement-check-bypass-in-ios-and-macos","title":"Apple Accessibility entitlement check bypass in iOS and macOS","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:40.587+00:00","url":"https://junglewise.ai/threats/cve-2026-86897-apple-accessibility-entitlement-check-bypass-in-ios-and-macos"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":36},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":159},{"week":"2026-08-03","critical":1,"exploited":1,"vulnerabilities":1},{"week":"2026-08-10","critical":1,"exploited":0,"vulnerabilities":2},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":31},{"week":"2026-08-24","critical":6,"exploited":0,"vulnerabilities":15},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":17},{"week":"2026-09-07","critical":4,"exploited":0,"vulnerabilities":40},{"week":"2026-09-14","critical":8,"exploited":0,"vulnerabilities":221},{"week":"2026-09-21","critical":6,"exploited":0,"vulnerabilities":9}],"related":[{"name":"Apple iPadOS","slug":"ipados","vulnerabilities":501,"url":"https://junglewise.ai/threats/technologies/ipados"},{"name":"Apple visionOS","slug":"visionos","vulnerabilities":291,"url":"https://junglewise.ai/threats/technologies/visionos"},{"name":"Apple watchOS","slug":"watchos","vulnerabilities":288,"url":"https://junglewise.ai/threats/technologies/watchos"},{"name":"Apple tvOS","slug":"tvos","vulnerabilities":260,"url":"https://junglewise.ai/threats/technologies/tvos"},{"name":"Apple macOS Golden Gate","slug":"macos-golden-gate","vulnerabilities":172,"url":"https://junglewise.ai/threats/technologies/macos-golden-gate"},{"name":"Apple Iphone Os","slug":"iphone-os","vulnerabilities":165,"url":"https://junglewise.ai/threats/technologies/iphone-os"},{"name":"Apple Safari","slug":"safari","vulnerabilities":141,"url":"https://junglewise.ai/threats/technologies/safari"},{"name":"Apple Multiple Products","slug":"multiple-products","vulnerabilities":75,"url":"https://junglewise.ai/threats/technologies/multiple-products"},{"name":"Apple macOS Ventura","slug":"macos-ventura","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/macos-ventura"},{"name":"Apple macOS Monterey","slug":"macos-monterey","vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/macos-monterey"},{"name":"Apple SwiftNIO","slug":"swiftnio","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/swiftnio"},{"name":"Apple Container","slug":"container","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/container"}],"technology":{"hub":true,"name":"Apple macOS","slug":"macos-tahoe","vendor":{"name":"Apple","slug":"apple","url":"https://junglewise.ai/threats/vendors/apple"},"aliases":["macos","macos-sequoia","macos-sonoma"],"category":"operating-system","homepage":"https://www.apple.com/macos/ Tahoe","repo_url":"https://www.apple.com/macos/","description":"A Unix-based operating system developed by Apple for its Mac line of personal computers.","url":"https://junglewise.ai/threats/technologies/macos-tahoe"},"most_severe":[{"cve":"CVE-2025-43300","cvss":10,"epss":0.0446,"slug":"cve-2025-43300-apple-ios-ipados-and-macos-out-of-bounds-write-in-image-i-o","title":"Apple iOS, iPadOS, and macOS out-of-bounds write in Image I/O","severity":"critical","exploited":true,"published_at":"2025-08-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-43300-apple-ios-ipados-and-macos-out-of-bounds-write-in-image-i-o"},{"cve":"CVE-2025-24201","cvss":10,"slug":"cve-2025-24201-apple-multiple-products-webkit-out-of-bounds-write-vulnerability","title":"Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24201-apple-multiple-products-webkit-out-of-bounds-write-vulnerability"},{"cve":"CVE-2025-24085","cvss":10,"slug":"cve-2025-24085-apple-multiple-products-use-after-free-vulnerability","title":"Apple Multiple Products Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24085-apple-multiple-products-use-after-free-vulnerability"},{"cve":"CVE-2025-10585","cvss":9.8,"epss":0.0542,"slug":"cve-2025-10585-google-chrome-type-confusion-in-v8-engine","title":"Google Chrome type confusion in V8 engine","severity":"critical","exploited":true,"published_at":"2025-09-24T17:15:39.473+00:00","url":"https://junglewise.ai/threats/cve-2025-10585-google-chrome-type-confusion-in-v8-engine"},{"cve":"CVE-2026-65400","cvss":9.8,"epss":0.0122,"slug":"cve-2026-65400-apple-macos-screen-sharing-authentication-bypass","title":"An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, mac","severity":"critical","exploited":true,"published_at":"2026-08-06T22:18:14.533+00:00","url":"https://junglewise.ai/threats/cve-2026-65400-apple-macos-screen-sharing-authentication-bypass"},{"cve":"CVE-2025-31200","cvss":9.8,"slug":"cve-2025-31200-apple-multiple-products-memory-corruption-vulnerability","title":"Apple Multiple Products Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-31200-apple-multiple-products-memory-corruption-vulnerability"},{"cve":"CVE-2025-31201","cvss":9.8,"slug":"cve-2025-31201-apple-multiple-products-arbitrary-read-and-write-vulnerability","title":"Apple Multiple Products Arbitrary Read and Write Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-31201-apple-multiple-products-arbitrary-read-and-write-vulnerability"},{"cve":"CVE-2022-22587","cvss":9.8,"slug":"cve-2022-22587-apple-memory-corruption-vulnerability","title":"Apple Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22587-apple-memory-corruption-vulnerability"},{"cve":"CVE-2021-1870","cvss":9.8,"slug":"cve-2021-1870-apple-ios-ipados-and-macos-webkit-remote-code-execution","title":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1870-apple-ios-ipados-and-macos-webkit-remote-code-execution"},{"cve":"CVE-2021-1871","cvss":9.8,"slug":"cve-2021-1871-apple-ios-ipados-and-macos-webkit-remote-code-execution","title":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1871-apple-ios-ipados-and-macos-webkit-remote-code-execution"}],"generated_at":"2026-09-26T22:07:00.115781+00:00"}