Apple Mac OS

Name: Apple Mac OS
Brand: Apple

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical9high20medium2low

updated 2026-10-28

vulnerabilities (368)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-23918US	—	49.7% (99th)	Exploit	no fix	2026-05-04	≤ vers:unknown/*
CVE-2025-32462US	high8.8OT high	4.48% (91st)	Exploit	no fix	2025-06-30	≤ vers:unknown/*
CVE-2025-58098US	—	1.42% (73rd)	Exploit	no fix	2025-12-05	≤ vers:unknown/*
CVE-2026-20660US	high7.5	0.77% (55th)	Exploit	no fix	2026-02-11	≤ vers:unknown/*
CVE-2026-43682US	—	0.72% (54th)	Exploit	no fix	2026-07-27	≤ vers:unknown/*
CVE-2026-43805US	—	0.47% (40th)	Exploit	no fix	2026-07-27	≤ vers:unknown/*
CVE-2026-20643US	—	0.36% (30th)	Exploit	no fix	2026-03-17	≤ vers:unknown/*
CVE-2026-20687US	—	0.35% (28th)	Exploit	no fix	2026-03-25	≤ vers:unknown/*
CVE-2025-43426US	—	0.27% (20th)	Exploit	no fix	2025-11-04	≤ vers:unknown/*
CVE-2026-28867US	—	0.23% (14th)	Exploit	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-20637US	—	0.21% (10th)	Exploit	no fix	2026-03-25	≤ vers:unknown/*
CVE-2025-43407US	—	0.20% (10th)	Exploit	no fix	2025-11-04	≤ vers:unknown/*
CVE-2026-64747US	—	0.19% (9th)	Exploit	no fix	2026-07-27	≤ vers:unknown/*
CVE-2026-28912US	—	0.17% (7th)	Exploit	no fix	2026-07-27	≤ vers:unknown/*
CVE-2026-43813US	—	0.17% (6th)	Exploit	no fix	2026-07-27	≤ vers:unknown/*
CVE-2026-43724US	—	0.17% (6th)	Exploit	no fix	2026-06-29	≤ vers:unknown/*
CVE-2026-64725US	—	0.16% (6th)	Exploit	no fix	2026-07-27	≤ vers:unknown/*
CVE-2026-39875US	—OT elevated	0.15% (4th)	Exploit	no fix	2026-07-27	≤ vers:unknown/*
CVE-2025-43429US	—	1.45% (73rd)	—	no fix	2025-11-04	≤ vers:unknown/*
CVE-2024-49761US	high7.5	1.42% (73rd)	—	no fix	2024-10-28	≤ vers:unknown/*
CVE-2025-43434US	—	1.28% (70th)	—	no fix	2025-11-04	≤ vers:unknown/*
CVE-2026-43661US	—	1.26% (69th)	—	no fix	2026-05-11	≤ vers:unknown/*
CVE-2026-4424US	—	1.26% (69th)	—	no fix	2026-03-19	≤ vers:unknown/*
CVE-2024-43398US	—	1.21% (68th)	—	no fix	2024-08-22	≤ vers:unknown/*
CVE-2025-43433US	—	1.17% (67th)	—	no fix	2025-11-04	≤ vers:unknown/*
CVE-2025-43445US	—	1.12% (66th)	—	no fix	2025-11-04	≤ vers:unknown/*
CVE-2025-43438US	—	1.11% (66th)	—	no fix	2025-11-04	≤ vers:unknown/*
CVE-2025-43430US	—	1.09% (65th)	—	no fix	2025-11-04	≤ vers:unknown/*
CVE-2025-30465US	—OT elevated	1.08% (65th)	—	no fix	2025-03-31	≤ vers:unknown/*
CVE-2025-43401US	—	1.03% (63rd)	—	no fix	2025-11-04	≤ vers:unknown/*
CVE-2025-43385US	—	1.00% (63rd)	—	no fix	2025-11-04	≤ vers:unknown/*
CVE-2025-43384US	—	1.00% (63rd)	—	no fix	2025-11-04	≤ vers:unknown/*
CVE-2025-43383US	—	1.00% (63rd)	—	no fix	2025-11-04	≤ vers:unknown/*
CVE-2025-43441US	—	0.96% (61st)	—	no fix	2025-11-04	≤ vers:unknown/*
CVE-2026-28878US	—	0.90% (59th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-64726US	—	0.90% (59th)	—	no fix	2026-07-27	≤ vers:unknown/*
CVE-2025-53906US	—	0.87% (59th)	—	no fix	2025-07-15	≤ vers:unknown/*
CVE-2025-43431US	—	0.85% (58th)	—	no fix	2025-11-04	≤ vers:unknown/*
CVE-2026-64771US	—	0.85% (58th)	—	no fix	2026-07-27	≤ vers:unknown/*
CVE-2025-43432US	—	0.84% (58th)	—	no fix	2025-11-04	≤ vers:unknown/*
CVE-2025-59775US	—	0.82% (57th)	—	no fix	2025-12-05	≤ vers:unknown/*
CVE-2026-43810US	—	0.82% (57th)	—	no fix	2026-07-27	≤ vers:unknown/*
CVE-2026-43803US	—	0.82% (57th)	—	no fix	2026-07-27	≤ vers:unknown/*
CVE-2026-28862US	—	0.82% (57th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-28983US	—	0.81% (57th)	—	no fix	2026-05-11	≤ vers:unknown/*
CVE-2025-65082US	—	0.81% (57th)	—	no fix	2025-12-05	≤ vers:unknown/*
CVE-2026-64774US	—	0.80% (56th)	—	no fix	2026-07-27	≤ vers:unknown/*
CVE-2026-64770US	—	0.80% (56th)	—	no fix	2026-07-27	≤ vers:unknown/*
CVE-2026-64769US	—	0.80% (56th)	—	no fix	2026-07-27	≤ vers:unknown/*
CVE-2026-28880US	—	0.79% (56th)	—	no fix	2026-03-25	≤ vers:unknown/*

showing 50 of 368

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control45 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer36 CVEs
CWE-787Out-of-bounds Write31 CVEs
CWE-125Out-of-bounds Read30 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor30 CVEs
CWE-416Use After Free25 CVEs
CWE-20Improper Input Validation21 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')16 CVEs

sources (1)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)368 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan