{"schema_version":1,"title":"Apple macOS vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 1,496 vulnerabilities in Apple macOS: 7 in the last 7 days and 615 in the last 90 days, 105 of them critical and 61 exploited in the wild. The most recent, CVE-2026-113970, was published on 9 November 2026. 272 vulnerabilities in the last four weeks, up 18% on the four before (231). 1 critical against 15, 1 exploited in the wild against 1.","url":"https://junglewise.ai/threats/technologies/macos","json_url":"https://junglewise.ai/threats/technologies/macos.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/macos","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":445,"all_time":1496,"critical":105,"exploited":61,"last_7_days":7,"last_30_days":246,"last_90_days":615,"last_365_days":1326},"latest":[{"cve":"CVE-2026-113970","cvss":8.8,"slug":"cve-2026-113970-a-use-after-free-issue-was-addressed-with-improved-memory","title":"Apple Bluetooth use-after-free vulnerability","severity":"high","exploited":false,"published_at":"2026-11-09T22:18:26.903+00:00","url":"https://junglewise.ai/threats/cve-2026-113970-a-use-after-free-issue-was-addressed-with-improved-memory"},{"cve":"CVE-2026-113969","epss":0.0022,"slug":"cve-2026-113969-a-logic-issue-was-addressed-with-improved-state-management-this","title":"Apple iOS, iPadOS, macOS, and related platforms rate limit bypass in AirPlay pairing","severity":"info","exploited":false,"published_at":"2026-11-09T22:18:26.8+00:00","url":"https://junglewise.ai/threats/cve-2026-113969-a-logic-issue-was-addressed-with-improved-state-management-this"},{"cve":"CVE-2026-113968","cvss":5.4,"epss":0.0032,"slug":"cve-2026-113968-a-logic-issue-was-addressed-with-improved-state-management-this","title":"Apple iOS and iPadOS Bluetooth pairing code rate limit bypass","severity":"medium","exploited":false,"published_at":"2026-11-09T22:18:26.627+00:00","url":"https://junglewise.ai/threats/cve-2026-113968-a-logic-issue-was-addressed-with-improved-state-management-this"},{"cve":"CVE-2026-113965","cvss":5.4,"epss":0.003,"slug":"cve-2026-113965-this-issue-was-addressed-with-improved-checks-this-issue-is","title":"Apple iOS/iPadOS Bluetooth pairing bypass","severity":"medium","exploited":false,"published_at":"2026-11-09T22:18:26.457+00:00","url":"https://junglewise.ai/threats/cve-2026-113965-this-issue-was-addressed-with-improved-checks-this-issue-is"},{"cve":"CVE-2026-113964","cvss":5.4,"epss":0.0032,"slug":"cve-2026-113964-a-logic-issue-was-addressed-with-improved-state-management-this","title":"Apple iOS and iPadOS Bluetooth pairing rate limit bypass in CoreUtils","severity":"medium","exploited":false,"published_at":"2026-11-09T22:18:26.267+00:00","url":"https://junglewise.ai/threats/cve-2026-113964-a-logic-issue-was-addressed-with-improved-state-management-this"},{"cve":"CVE-2026-113961","cvss":7.5,"epss":0.0061,"slug":"cve-2026-113961-an-authorization-issue-was-addressed-with-improved-validation","title":"Apple Messages authorization bypass in iMessage group chat","severity":"high","exploited":false,"published_at":"2026-11-09T22:18:25.917+00:00","url":"https://junglewise.ai/threats/cve-2026-113961-an-authorization-issue-was-addressed-with-improved-validation"},{"cve":"CVE-2026-113960","epss":0.0018,"slug":"cve-2026-113960-this-issue-was-addressed-by-removing-the-vulnerable-code-this","title":"Apple Messages message history disclosure in group chats","severity":"info","exploited":false,"published_at":"2026-11-09T22:18:25.76+00:00","url":"https://junglewise.ai/threats/cve-2026-113960-this-issue-was-addressed-by-removing-the-vulnerable-code-this"},{"cve":"CVE-2024-27834","epss":0.006,"slug":"cve-2024-27834-apple-multiple-products-improper-authentication-vulnerability","title":"Apple iOS, iPadOS, macOS, Safari, tvOS, watchOS pointer authentication bypass","severity":"critical","exploited":true,"published_at":"2026-11-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-27834-apple-multiple-products-improper-authentication-vulnerability"},{"cve":"CVE-2026-86992","slug":"cve-2026-86992-the-issue-was-addressed-with-improved-memory-handling-this-issue","title":"Apple AppleAVD out-of-bounds write in video processing","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:38.22+00:00","url":"https://junglewise.ai/threats/cve-2026-86992-the-issue-was-addressed-with-improved-memory-handling-this-issue"},{"cve":"CVE-2026-86991","slug":"cve-2026-86991-a-buffer-overflow-was-addressed-with-improved-bounds-checking","title":"Apple Accelerate Framework buffer overflow in image processing","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:38.06+00:00","url":"https://junglewise.ai/threats/cve-2026-86991-a-buffer-overflow-was-addressed-with-improved-bounds-checking"},{"cve":"CVE-2026-86990","slug":"cve-2026-86990-an-access-issue-was-addressed-with-improved-access-restrictions","title":"Apple CoreMedia access issue in camera permission bypass","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:37.897+00:00","url":"https://junglewise.ai/threats/cve-2026-86990-an-access-issue-was-addressed-with-improved-access-restrictions"},{"cve":"CVE-2026-86985","slug":"cve-2026-86985-this-issue-was-addressed-with-improved-input-validation-this","title":"Apple Safari input validation vulnerability","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:37.003+00:00","url":"https://junglewise.ai/threats/cve-2026-86985-this-issue-was-addressed-with-improved-input-validation-this"},{"cve":"CVE-2026-86984","slug":"cve-2026-86984-a-file-access-issue-existed-with-certain-home-folder-files-this","title":"Apple macOS file access issue in home folder files","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:36.84+00:00","url":"https://junglewise.ai/threats/cve-2026-86984-a-file-access-issue-existed-with-certain-home-folder-files-this"},{"cve":"CVE-2026-86972","slug":"cve-2026-86972-a-buffer-overflow-was-addressed-with-improved-size-validation","title":"Apple iOS and iPadOS buffer overflow in audio processing","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:35.437+00:00","url":"https://junglewise.ai/threats/cve-2026-86972-a-buffer-overflow-was-addressed-with-improved-size-validation"},{"cve":"CVE-2026-86971","slug":"cve-2026-86971-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds","title":"Apple iOS Accelerate Framework out-of-bounds write","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:35.263+00:00","url":"https://junglewise.ai/threats/cve-2026-86971-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds"},{"cve":"CVE-2026-86970","slug":"cve-2026-86970-an-out-of-bounds-read-was-addressed-with-improved-input","title":"Apple iOS out-of-bounds read in font processing","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:35.103+00:00","url":"https://junglewise.ai/threats/cve-2026-86970-an-out-of-bounds-read-was-addressed-with-improved-input"},{"cve":"CVE-2026-86969","slug":"cve-2026-86969-an-out-of-bounds-write-was-addressed-with-improved-input","title":"Apple iOS and iPadOS out-of-bounds write in kernel memory","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:34.943+00:00","url":"https://junglewise.ai/threats/cve-2026-86969-an-out-of-bounds-write-was-addressed-with-improved-input"},{"cve":"CVE-2026-86966","slug":"cve-2026-86966-this-issue-was-addressed-with-improved-handling-of-symlinks-this","title":"Apple operating systems symlink handling privilege escalation","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:34.623+00:00","url":"https://junglewise.ai/threats/cve-2026-86966-this-issue-was-addressed-with-improved-handling-of-symlinks-this"},{"cve":"CVE-2026-86964","slug":"cve-2026-86964-a-null-pointer-dereference-was-addressed-with-improved-input","title":"Apple iOS null pointer dereference in input validation","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:34.46+00:00","url":"https://junglewise.ai/threats/cve-2026-86964-a-null-pointer-dereference-was-addressed-with-improved-input"},{"cve":"CVE-2026-86958","slug":"cve-2026-86958-the-issue-was-addressed-with-improved-memory-handling-this-issue","title":"macOS pointer authentication bypass with memory write capability","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:33.703+00:00","url":"https://junglewise.ai/threats/cve-2026-86958-the-issue-was-addressed-with-improved-memory-handling-this-issue"},{"cve":"CVE-2026-86954","slug":"cve-2026-86954-an-out-of-bounds-read-was-addressed-with-improved-bounds-checking","title":"Apple iOS out-of-bounds read in image processing","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:33.193+00:00","url":"https://junglewise.ai/threats/cve-2026-86954-an-out-of-bounds-read-was-addressed-with-improved-bounds-checking"},{"cve":"CVE-2026-86946","slug":"cve-2026-86946-a-use-after-free-issue-was-addressed-with-improved-memory","title":"macOS use-after-free in kernel memory management","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:32.49+00:00","url":"https://junglewise.ai/threats/cve-2026-86946-a-use-after-free-issue-was-addressed-with-improved-memory"},{"cve":"CVE-2026-86945","slug":"cve-2026-86945-this-issue-was-addressed-with-improved-checks-this-issue-is-fixed","title":"macOS file protection sandbox escape","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:32.317+00:00","url":"https://junglewise.ai/threats/cve-2026-86945-this-issue-was-addressed-with-improved-checks-this-issue-is-fixed"},{"cve":"CVE-2026-86942","slug":"cve-2026-86942-an-out-of-bounds-read-was-addressed-with-improved-bounds-checking","title":"Apple iOS out-of-bounds read in Accelerate Framework","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:31.907+00:00","url":"https://junglewise.ai/threats/cve-2026-86942-an-out-of-bounds-read-was-addressed-with-improved-bounds-checking"},{"cve":"CVE-2026-86941","slug":"cve-2026-86941-a-file-quarantine-bypass-was-addressed-with-additional-checks","title":"macOS Gatekeeper file quarantine bypass","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:31.747+00:00","url":"https://junglewise.ai/threats/cve-2026-86941-a-file-quarantine-bypass-was-addressed-with-additional-checks"}],"weekly":[{"week":"2026-08-17","critical":1,"exploited":0,"vulnerabilities":33},{"week":"2026-08-24","critical":6,"exploited":0,"vulnerabilities":15},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":17},{"week":"2026-09-07","critical":4,"exploited":0,"vulnerabilities":40},{"week":"2026-09-14","critical":8,"exploited":0,"vulnerabilities":221},{"week":"2026-09-21","critical":6,"exploited":0,"vulnerabilities":9},{"week":"2026-09-28","critical":1,"exploited":1,"vulnerabilities":1},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":33},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":19},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":219},{"week":"2026-11-02","critical":1,"exploited":1,"vulnerabilities":1},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":7}],"related":[{"name":"Apple iPadOS","slug":"ipados","vulnerabilities":739,"url":"https://junglewise.ai/threats/technologies/ipados"},{"name":"Apple visionOS","slug":"visionos","vulnerabilities":457,"url":"https://junglewise.ai/threats/technologies/visionos"},{"name":"Apple macOS Golden Gate","slug":"macos-golden-gate","vulnerabilities":449,"url":"https://junglewise.ai/threats/technologies/macos-golden-gate"},{"name":"Apple watchOS","slug":"watchos","vulnerabilities":386,"url":"https://junglewise.ai/threats/technologies/watchos"},{"name":"Apple tvOS","slug":"tvos","vulnerabilities":353,"url":"https://junglewise.ai/threats/technologies/tvos"},{"name":"Apple Ios","slug":"apple-ios","vulnerabilities":206,"url":"https://junglewise.ai/threats/technologies/apple-ios"},{"name":"Apple Iphone Os","slug":"iphone-os","vulnerabilities":203,"url":"https://junglewise.ai/threats/technologies/iphone-os"},{"name":"Apple Safari","slug":"safari","vulnerabilities":189,"url":"https://junglewise.ai/threats/technologies/safari"},{"name":"Apple Multiple Products","slug":"multiple-products","vulnerabilities":77,"url":"https://junglewise.ai/threats/technologies/multiple-products"},{"name":"Apple macOS Ventura","slug":"macos-ventura","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/macos-ventura"},{"name":"Apple macOS Monterey","slug":"macos-monterey","vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/macos-monterey"},{"name":"Apple Xcode","slug":"xcode","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/xcode"}],"technology":{"hub":true,"name":"Apple macOS","slug":"macos","vendor":{"hub":true,"name":"Apple","slug":"apple","url":"https://junglewise.ai/threats/vendors/apple"},"aliases":["macos-sequoia","macos-sonoma","macos-tahoe"],"category":"operating-system","description":"Operating system for Apple Macintosh computers.","url":"https://junglewise.ai/threats/technologies/macos"},"most_severe":[{"cve":"CVE-2025-43300","cvss":10,"epss":0.0446,"slug":"cve-2025-43300-apple-ios-ipados-and-macos-out-of-bounds-write-in-image-i-o","title":"Apple iOS, iPadOS, and macOS out-of-bounds write in Image I/O","severity":"critical","exploited":true,"published_at":"2025-08-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-43300-apple-ios-ipados-and-macos-out-of-bounds-write-in-image-i-o"},{"cve":"CVE-2025-24201","cvss":10,"slug":"cve-2025-24201-apple-multiple-products-webkit-out-of-bounds-write-vulnerability","title":"Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24201-apple-multiple-products-webkit-out-of-bounds-write-vulnerability"},{"cve":"CVE-2025-24085","cvss":10,"slug":"cve-2025-24085-apple-multiple-products-use-after-free-vulnerability","title":"Apple Multiple Products Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24085-apple-multiple-products-use-after-free-vulnerability"},{"cve":"CVE-2025-10585","cvss":9.8,"epss":0.0542,"slug":"cve-2025-10585-google-chrome-type-confusion-in-v8-engine","title":"Google Chrome type confusion in V8 engine","severity":"critical","exploited":true,"published_at":"2025-09-24T17:15:39.473+00:00","url":"https://junglewise.ai/threats/cve-2025-10585-google-chrome-type-confusion-in-v8-engine"},{"cve":"CVE-2026-65400","cvss":9.8,"epss":0.0122,"slug":"cve-2026-65400-apple-macos-screen-sharing-authentication-bypass","title":"Apple macOS Screen Sharing authentication bypass","severity":"critical","exploited":true,"published_at":"2026-08-06T22:18:14.533+00:00","url":"https://junglewise.ai/threats/cve-2026-65400-apple-macos-screen-sharing-authentication-bypass"},{"cve":"CVE-2025-31200","cvss":9.8,"slug":"cve-2025-31200-apple-multiple-products-memory-corruption-vulnerability","title":"Apple Multiple Products Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-31200-apple-multiple-products-memory-corruption-vulnerability"},{"cve":"CVE-2025-31201","cvss":9.8,"slug":"cve-2025-31201-apple-multiple-products-arbitrary-read-and-write-vulnerability","title":"Apple Multiple Products Arbitrary Read and Write Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-31201-apple-multiple-products-arbitrary-read-and-write-vulnerability"},{"cve":"CVE-2022-22587","cvss":9.8,"slug":"cve-2022-22587-apple-memory-corruption-vulnerability","title":"Apple Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22587-apple-memory-corruption-vulnerability"},{"cve":"CVE-2021-1871","cvss":9.8,"slug":"cve-2021-1871-apple-ios-ipados-and-macos-webkit-remote-code-execution","title":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1871-apple-ios-ipados-and-macos-webkit-remote-code-execution"},{"cve":"CVE-2021-1870","cvss":9.8,"slug":"cve-2021-1870-apple-ios-ipados-and-macos-webkit-remote-code-execution","title":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1870-apple-ios-ipados-and-macos-webkit-remote-code-execution"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}