How many apple macos CVEs are in CISA KEV?

Yes — 103 of apple macos's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of apple macos are affected?

613 distinct apple macos versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in apple macos CVEs?

apple macos's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-416 (Use After Free), CWE-787 (Out-of-bounds Write), CWE-284 (Improper Access Control).

How many critical apple macos vulnerabilities are there?

apple macos has 603 critical and 3,612 high-severity CVEs.

What is the average severity of apple macos CVEs?

The average CVSS base score across apple macos's scored CVEs is 7.1.

apple

7,059 CVEs

103 in CISA KEV

apple macos Vulnerabilities

Name: apple macos vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for macos by apple.

7,059

Total CVEs

Published

103

In CISA KEV

Exploited in the wild

360

Public exploits

PoC or exploit code

7.1

Avg CVSS

2000–2026

Last updated July 17, 2026

Overview

apple macos has 7,059 published CVE records since 2000, of which 103 are in CISA's Known Exploited Vulnerabilities catalog and 360 have a known public exploit. The average CVSS base score across scored CVEs is 7.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting apple macos, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include chrome, macbook air, macbook pro.

Severity and exploitation

How the CVSS severity of apple macos's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical603

High3,612

Medium2,601

Low243

In CISA’s Known Exploited Vulnerabilities catalog

103

103 of apple macos's CVEs are confirmed exploited in the wild.

Public exploits

360

360 of apple macos's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every apple macos version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

13.7.11 CVE
14.7.11 CVE
15.01 CVE

Version ranges

< 11.6180 CVEs
< 2021169 CVEs
< 15.4161 CVEs
< 12.6149 CVEs
< 11.7144 CVEs
15.0 <= v < 15.4124 CVEs
< 14.4110 CVEs
< 14.7.5109 CVEs
< 26.1109 CVEs
< 15108 CVEs
< 14103 CVEs
< 13.7.5102 CVEs
< 14.6101 CVEs
< 15.2101 CVEs
14.0 <= v < 14.7.599 CVEs
< 13.398 CVEs
< 15.198 CVEs
< 15.698 CVEs
< 13.095 CVEs
< 2693 CVEs
< 1391 CVEs
< 14.090 CVEs
< 11.080 CVEs
< 13.679 CVEs
< 26.578 CVEs
26.0 <= v < 26.578 CVEs
< 26.476 CVEs
< 14.175 CVEs
< 10.1573 CVEs
< 11.471 CVEs
< 15.371 CVEs
< 12.570 CVEs
14.0 <= v < 14.468 CVEs
13.0 <= v < 13.367 CVEs
< 11.266 CVEs
< 13.565 CVEs
< 14.765 CVEs
< 12.764 CVEs
< 13.464 CVEs
< 11.363 CVEs
< 15.763 CVEs
< 26.363 CVEs
11.0 <= v < 11.363 CVEs
26.0 <= v < 26.463 CVEs
< 12.362 CVEs
< 12.461 CVEs
< 15.561 CVEs
13.0 <= v < 13.561 CVEs
13.0 <= v < 13.7.561 CVEs
< 202259 CVEs
< 15.7.258 CVEs
< macOS Catalina 10.15.658 CVEs
< 12.057 CVEs
12.0 <= v < 12.555 CVEs
13.0 <= v < 13.455 CVEs
< 26.254 CVEs
< 15.053 CVEs
< 14.552 CVEs
< 14.7.152 CVEs
< 15.7.552 CVEs
11.0 <= v < 11.6.652 CVEs
< 11.151 CVEs
< 12.151 CVEs
< 14.7.751 CVEs
15.0 <= v < 15.651 CVEs
< 14.850 CVEs
< 13.7.149 CVEs
10.15.7 <= v <= 10.15.749 CVEs
15.0 <= v < 15.7.549 CVEs
< 11.548 CVEs
< 14.248 CVEs
< 14.8.548 CVEs
14.0 <= v < 14.7.148 CVEs
< 14.8.247 CVEs
14.0 <= v < 14.647 CVEs
< 14.7.346 CVEs
< macOS Catalina 10.15.546 CVEs
11.0 <= v < 11.246 CVEs
11.0 <= v < 11.446 CVEs
14.0 <= v < 14.546 CVEs
14.0 <= v < 14.8.545 CVEs
< 15.7.744 CVEs
14.0 <= v < 14.244 CVEs
15.0 <= v < 15.7.744 CVEs
< 13.7.743 CVEs
< 14.8.443 CVEs
< 26.043 CVEs
12.0 <= v < 12.443 CVEs
15.0 <= v < 15.243 CVEs
15.0 <= v < 15.343 CVEs
15.0 <= v < 15.7.243 CVEs
14.0 <= v < 14.7.742 CVEs
14.0 <= v < 14.8.742 CVEs
< 14.8.741 CVEs
< macOS Mojave 10.14.541 CVEs
< 13.740 CVEs
< 12.7.639 CVEs
< 13.6.839 CVEs
26.0 <= v < 26.339 CVEs
< 13.138 CVEs
< 14.7.238 CVEs
11.0 <= v < 11.6.238 CVEs
14.0 <= v < 14.138 CVEs
< 26.5.237 CVEs
< macOS Mojave 10.14.637 CVEs
12.0 <= v < 12.137 CVEs
13.0 <= v < 13.6.837 CVEs
14.0 <= v < 14.837 CVEs
15.0 <= v < 15.737 CVEs
< 10.15.736 CVEs
< 13.7.336 CVEs
< 15.7.436 CVEs
< 7.336 CVEs
< 10.1435 CVEs
< 13.235 CVEs
11.0 <= v < 11.6.835 CVEs
< macOS Mojave 10.14.434 CVEs
14.0 <= v < 14.7.334 CVEs
< 12.0.133 CVEs
14.0 <= v < 14.7.233 CVEs
15.0 <= v < 15.7.433 CVEs
12.0.0 <= v < 12.432 CVEs
13.0 <= v < 13.632 CVEs
< 13.7.231 CVEs
< macOS Catalina 10.15.431 CVEs
14.0 <= v < 14.731 CVEs
< 13.6.530 CVEs
< 14.7.630 CVEs
12.0 <= v < 12.330 CVEs
14.0 <= v <= 14.030 CVEs
< 11.0.129 CVEs
< 13.7.629 CVEs
< 7.529 CVEs
14.0 <= v < 14.7.629 CVEs
13.0 <= v < 13.6.528 CVEs
< 12.7.427 CVEs
< macOS Catalina 10.15.327 CVEs
14.0 <= v < 14.8.227 CVEs
15.0 <= v < 15.526 CVEs
11.0 <= v < 11.1.025 CVEs
11.0 <= v < 11.6.125 CVEs
13.0 <= v < 13.6.125 CVEs
11.0 <= v < 11.724 CVEs
12.0 <= v < 12.6.424 CVEs
< 15.7.323 CVEs
13.0 <= v < 13.223 CVEs
12.0 <= v < 12.6.822 CVEs
13.0 <= v < 13.6.322 CVEs
26.0 <= v < 26.5.222 CVEs
< 13.6.721 CVEs
11.0 <= v < 11.521 CVEs
11.0 <= v < 11.7.921 CVEs
11.0.1 <= v < 11.421 CVEs
13.0 <= v < 13.6.721 CVEs
14.0 <= v < 14.8.421 CVEs
< 14.320 CVEs
< 1620 CVEs
11.0 <= v < 11.7.720 CVEs
12.0 <= v < 12.620 CVEs
12.0 <= v <= 12.020 CVEs
12.0.0 <= v < 12.6.820 CVEs
< 12.7.519 CVEs
< 7.619 CVEs
< macOS Mojave 10.14.319 CVEs
11.0 <= v < 11.619 CVEs
< 11.7.518 CVEs
< 14.8.318 CVEs
12.0 <= v < 12.7.418 CVEs
12.0.0 <= v < 12.318 CVEs
12.0.0 <= v < 12.6.618 CVEs
15.0 <= v < 15.7.317 CVEs
< 12.216 CVEs
< 8.116 CVEs
11.0 <= v < 11.0.116 CVEs
13.0 <= v <= 13.016 CVEs
14.0 <= v < 14.316 CVEs
< 11.7.915 CVEs
< macOS Catalina 10.1515 CVEs
< macOS Catalina 10.15.115 CVEs
12.0.0 <= v < 12.714 CVEs
13.0 <= v < 13.7.114 CVEs
< 16.113 CVEs
12.0.0 <= v < 12.613 CVEs
12.0.0 <= v < 12.6.313 CVEs
< 10.1312 CVEs
11.0 <= v < 11.6.512 CVEs
12.0 <= v < 12.7.212 CVEs
12.0 <= v < 12.7.512 CVEs
12.0 <= v < 12.7.612 CVEs
< 6.111 CVEs
11.0 <= v < 11.7.511 CVEs
11.1 <= v < 11.411 CVEs
12.0 <= v < 12.6.611 CVEs
12.0 <= v < 12.7.111 CVEs
12.0.0 <= v < 12.511 CVEs
< 16.210 CVEs
11.0 <= v < 11.7.110 CVEs
11.0.1 <= v < 11.210 CVEs
11.6 <= v < 11.6.510 CVEs
12.0.0 <= v < 12.7.110 CVEs
12.0.0 <= v <= 12.0.010 CVEs
13.0 <= v < 13.6.410 CVEs
13.0 <= v < 13.7.210 CVEs
< 12.109 CVEs
< 5.29 CVEs
11.0 <= v < 11.7.29 CVEs
12.0 <= v < 12.79 CVEs
12.0.0 <= v < 12.29 CVEs
12.0.0 <= v < 12.6.29 CVEs
12.0.0 <= v < 12.7.49 CVEs
13.0 <= v < 13.7.79 CVEs
12.0.0 <= v < 12.7.28 CVEs
12.0.0 <= v < 12.17 CVEs
12.0.0 <= v < 12.6.17 CVEs
15.0 <= v <= 15.07 CVEs
< 10.76 CVEs
< 11.1.06 CVEs
< 86 CVEs
11.0 <= v < 11.7.36 CVEs
12.0 <= v < 12.7.36 CVEs
13.0 <= v < 13.16 CVEs
< 11.6.55 CVEs
< 12.115 CVEs
< 13.6.45 CVEs
< 5.35 CVEs
< 6.25 CVEs
12.0 <= v < 12.6.15 CVEs
12.0.0 <= v < 12.6.45 CVEs
26.0 <= v <= 26.05 CVEs
< 10.44 CVEs
< 11.6.14 CVEs
< 11.6.34 CVEs
< 12.6.34 CVEs
< 12.6.44 CVEs
< 12.7.34 CVEs
< 7.144 CVEs
<= 9.04 CVEs
11.0 <= v < 11.14 CVEs
11.0 <= v < 13.04 CVEs
11.0.1 <= v <= 11.0.14 CVEs
12.0 <= v < 12.0.14 CVEs
12.0 <= v < 12.6.24 CVEs
13.0 <= v < 13.74 CVEs
14.0 <= v < 14.8.34 CVEs
< 11.7.33 CVEs
< 12.7.13 CVEs
< 13.6.13 CVEs
< 20203 CVEs
11.0 <= v < 11.6.33 CVEs
11.0 <= v <= 11.03 CVEs
11.0.0 <= v < 11.7.73 CVEs
12.0 <= v < 12.6.33 CVEs
15.0 <= v < 15.13 CVEs
15.0 <= v < 26.03 CVEs
< 10.13.22 CVEs
< 10.92 CVEs
< 11.7.22 CVEs
< 11.7.72 CVEs
< 12.122 CVEs
< 12.6.22 CVEs
< 12.6.82 CVEs
< 15.1.12 CVEs
< 15.4.12 CVEs
< 4.32 CVEs
< 7.162 CVEs
< 7.202 CVEs
< macOS Catalina 10.15.72 CVEs
<= 14.02 CVEs
>= Catalina 10.15.32 CVEs
11.0 <= v <= 13.02 CVEs
11.1 <= v <= 11.12 CVEs
11.2 <= v <= 11.22 CVEs
11.6 <= v < 11.6.22 CVEs
12.0 <= v < 12.5.12 CVEs
12.0 <= v <= 12.32 CVEs
12.0.0 <= v < 12.0.12 CVEs
12.0.0 <= v < 12.3.12 CVEs
12.0.0 <= v <= 12.12 CVEs
12.0.1 <= v <= 12.0.12 CVEs
13 <= v < 13.6.82 CVEs
13.0 <= v < 13.2.12 CVEs
13.0 <= v < 13.4.12 CVEs
13.0.0 <= v < 13.7.12 CVEs
14 <= v < 14.62 CVEs
14.0 <= v < 14.1.22 CVEs
14.0 <= v <= 14.62 CVEs
15.0 <= v < 15.1.12 CVEs
15.0 <= v < 15.4.12 CVEs
15.0 <= v <= 15.32 CVEs
26.0 <= v < 26.22 CVEs
8.5 <= v <= 8.52 CVEs
8.6 <= v <= 8.62 CVEs
9 <= v <= 92 CVEs
< 10.13.51 CVE
< 10.4.81 CVE
< 11.2.31 CVE
< 11.3.11 CVE
< 11.5.11 CVE
< 11.6.81 CVE
< 11.7.61 CVE
< 12.061 CVE
< 12.6.11 CVE
< 12.7.21 CVE
< 12.91 CVE
< 13.2.11 CVE
< 13.3.11 CVE
< 13.7.41 CVE
< 13.7.81 CVE
< 14.7.41 CVE
< 14.7.81 CVE
< 14.8.11 CVE
< 15.3.11 CVE
< 15.3.21 CVE
< 15.6.11 CVE
< 15.7.11 CVE
< 17.41 CVE
< 2021-0051 CVE
< 26.0.01 CVE
< 26.0.11 CVE
< 26.3.11 CVE
< 26.3.1 (a)1 CVE
< 26.3.2 (a)1 CVE
< 5.11 CVE
< 5.111 CVE
< 7.01 CVE
< 7.121 CVE
< 7.41 CVE
<= 12.0.01 CVE
<= 12.7.61 CVE
<= 13.7.21 CVE
>= 11.01 CVE
>= 131 CVE
>= 151 CVE
>= 3.9.11 CVE
>= through 20111 CVE
0.12.1 <= v < 0.12.31 CVE
1.0 <= v < 14.51 CVE
1.0 <= v <= 1.01 CVE
10.13 High Sierra <= v < 10.13.61 CVE
10.4.6 <= v < 10.14.61 CVE
11.0 <= v < 11.2.01 CVE
11.0 <= v < 11.2.11 CVE
11.0 <= v < 11.2.61 CVE
11.0 <= v < 11.3.11 CVE
11.0 <= v < 11.7.101 CVE
11.0 <= v < 11.7.81 CVE
11.0 <= v <= 11.0.11 CVE
11.0.0 <= v < 11.71 CVE
11.0.0 <= v < 11.7.11 CVE
11.0.0 <= v < 11.7.21 CVE
11.0.0 <= v < 11.7.31 CVE
11.0.1 <= v < 11.31 CVE
11.1.0 <= v <= 11.1.01 CVE
11.2.1 <= v <= 11.2.11 CVE
11.3 <= v <= 11.31 CVE
11.3.1 <= v <= 11.3.11 CVE
11.4 <= v <= 11.41 CVE
11.5 <= v <= 11.51 CVE
11.6 <= v < 11.6.11 CVE
11.6.0 <= v < 11.6.61 CVE
11.7 <= v <= 11.71 CVE
12.0 <= v < 12.21 CVE
12.0 <= v < 12.6.51 CVE
12.0 <= v < 12.6.91 CVE
12.0 <= v <= 12.41 CVE
12.0.0 <= v < 12.2.11 CVE
12.0.0 <= v < 12.6.71 CVE
12.6.7 <= v <= 12.6.71 CVE
13.0 <= v < 13.3.11 CVE
13.0 <= v < 13.5.21 CVE
13.0 <= v < 13.6.61 CVE
13.0 <= v < 13.6.851 CVE
13.0 <= v < 13.7.31 CVE
13.0 <= v < 13.7.41 CVE
13.0 <= v < 13.7.61 CVE
13.0 <= v < 13.7.81 CVE
13.0 <= v < 14.01 CVE
13.0 <= v <= 13.6.81 CVE
13.0.0 <= v < 13.6.81 CVE
13.1 <= v <= 13.11 CVE
13.3.3 <= v <= 13.3.31 CVE
13.4 <= v <= 13.41 CVE
14 <= v < 14.71 CVE
14.0 <= v < 14.2.11 CVE
14.0 <= v < 14.4.11 CVE
14.0 <= v < 14.7.41 CVE
14.0 <= v < 14.7.81 CVE
14.0 <= v < 14.8.11 CVE
14.0 <= v <= 14.7.21 CVE
14.0 <= v <= 14.7.31 CVE
14.0 <= v <= 14.81 CVE
14.0.0 <= v < 14.1.21 CVE
14.1 <= v <= 14.11 CVE
14.5* <= v < 14.51 CVE
15.0 <= v < 15.3.11 CVE
15.0 <= v < 15.3.21 CVE
15.0 <= v < 15.6.11 CVE
15.0 <= v < 15.7.11 CVE
26.0 <= v < 26.11 CVE
4.0.0 <= v < 4.3.11 CVE
7.5.3 <= v <= 7.5.31 CVE
7.6 <= v <= 7.61 CVE
7.6.1 <= v <= 7.6.11 CVE
8.0 <= v <= 8.01 CVE
8.1 <= v <= 8.11 CVE
9.0 <= v <= 9.01 CVE

Fixed in

11.6182 CVEs
2021169 CVEs
12.6167 CVEs
15.4162 CVEs
11.7147 CVEs
14.4112 CVEs
14.7.5109 CVEs
26.1109 CVEs
15108 CVEs
14.6106 CVEs
14103 CVEs
13.7.5102 CVEs
15.2101 CVEs
13.099 CVEs
13.399 CVEs
15.198 CVEs
15.698 CVEs
2693 CVEs
1391 CVEs
14.091 CVEs
13.686 CVEs
12.484 CVEs
11.482 CVEs
11.080 CVEs
26.578 CVEs
12.576 CVEs
14.176 CVEs
26.476 CVEs
10.1573 CVEs
12.373 CVEs
13.571 CVEs
15.371 CVEs
12.770 CVEs
11.367 CVEs
11.266 CVEs
14.766 CVEs
13.464 CVEs
15.763 CVEs
26.363 CVEs
15.561 CVEs
202259 CVEs
15.7.258 CVEs
macOS Catalina 10.15.658 CVEs
12.057 CVEs
12.157 CVEs
26.255 CVEs
11.153 CVEs
11.6.653 CVEs
15.053 CVEs
14.552 CVEs
14.7.152 CVEs
15.7.552 CVEs
14.7.751 CVEs
14.850 CVEs
13.7.149 CVEs
14.249 CVEs
14.8.549 CVEs
11.548 CVEs
14.8.247 CVEs
14.7.346 CVEs
26.046 CVEs
macOS Catalina 10.15.546 CVEs
11.0.145 CVEs
15.7.745 CVEs
13.6.844 CVEs
12.6.843 CVEs
13.7.743 CVEs
14.8.443 CVEs
13.142 CVEs
14.8.742 CVEs
macOS Mojave 10.14.541 CVEs
11.6.240 CVEs
12.7.640 CVEs
13.740 CVEs
12.0.139 CVEs
14.7.238 CVEs
13.237 CVEs
26.5.237 CVEs
macOS Mojave 10.14.637 CVEs
10.15.736 CVEs
11.6.836 CVEs
11.7.936 CVEs
13.7.336 CVEs
15.7.436 CVEs
7.336 CVEs
10.1435 CVEs
macOS Mojave 10.14.434 CVEs
13.6.532 CVEs
11.1.031 CVEs
12.6.431 CVEs
13.7.231 CVEs
macOS Catalina 10.15.431 CVEs
11.6.130 CVEs
14.7.630 CVEs
11.7.529 CVEs
12.6.629 CVEs
13.7.629 CVEs
7.529 CVEs
12.7.428 CVEs
11.6.527 CVEs
macOS Catalina 10.15.327 CVEs
13.6.126 CVEs
11.7.725 CVEs
15.7.323 CVEs
12.7.122 CVEs
13.6.322 CVEs
13.6.721 CVEs
12.6.320 CVEs
14.320 CVEs
1620 CVEs
12.7.219 CVEs
12.7.519 CVEs
7.619 CVEs
macOS Mojave 10.14.319 CVEs
14.8.318 CVEs
12.216 CVEs
8.116 CVEs
12.6.215 CVEs
macOS Catalina 10.1515 CVEs
macOS Catalina 10.15.115 CVEs
12.6.113 CVEs
16.113 CVEs
10.1312 CVEs
11.7.212 CVEs
11.7.111 CVEs
6.111 CVEs
11.7.310 CVEs
13.6.410 CVEs
16.210 CVEs
12.109 CVEs
5.29 CVEs
11.6.37 CVEs
10.76 CVEs
12.7.36 CVEs
86 CVEs
12.115 CVEs
5.35 CVEs
6.25 CVEs
10.44 CVEs
7.144 CVEs
13.2.13 CVEs
20203 CVEs
10.13.22 CVEs
10.92 CVEs
11.3.12 CVEs
12.122 CVEs
12.3.12 CVEs
12.5.12 CVEs
13.3.12 CVEs
13.4.12 CVEs
14.1.22 CVEs
15.1.12 CVEs
15.4.12 CVEs
4.32 CVEs
7.162 CVEs
7.202 CVEs
macOS Catalina 10.15.72 CVEs
0.12.31 CVE
10.13.51 CVE
10.13.61 CVE
10.14.61 CVE
10.4.81 CVE
11.2.01 CVE
11.2.11 CVE
11.2.31 CVE
11.2.61 CVE
11.5.11 CVE
11.7.101 CVE
11.7.61 CVE
11.7.81 CVE
12.061 CVE
12.2.11 CVE
12.6.51 CVE
12.6.71 CVE
12.6.91 CVE
12.91 CVE
13.5.21 CVE
13.6.61 CVE
13.6.851 CVE
13.7.41 CVE
13.7.81 CVE
14.2.11 CVE
14.4.11 CVE
14.7.41 CVE
14.7.81 CVE
14.8.11 CVE
15.3.11 CVE
15.3.21 CVE
15.6.11 CVE
15.7.11 CVE
17.41 CVE
2021-0051 CVE
26.0.01 CVE
26.0.11 CVE
26.3.11 CVE
26.3.1 (a)1 CVE
26.3.2 (a)1 CVE
4.3.11 CVE
5.11 CVE
5.111 CVE
7.01 CVE
7.121 CVE
7.41 CVE
macOS Mojave 10.14.3 Supplemental Update1 CVE

Find a version

7,059 CVEs

Sort

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
CVE-2026-13445
Patch
CWE-639
High · CVSS 8.1
EPSS 0.2% (11th pct)2026-07-17
Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
CVE-2026-13446
Patch
CWE-798
Critical · CVSS 9.8
EPSS 0.2% (13th pct)2026-07-17
Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
CVE-2026-13448
Patch
CWE-184
Critical · CVSS 9.8
EPSS 0.5% (37th pct)2026-07-17
Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
CVE-2026-14499
Patch
CWE-78
High · CVSS 8.8
EPSS 0.4% (37th pct)2026-07-17
Path Traversal Vulnerability in API Request Component Content-Disposition Header Processing
CVE-2026-7667
Patch
CWE-22
High · CVSS 8.8
EPSS 0.4% (29th pct)2026-07-17
SSRF Protection Configuration Vulnerability
CVE-2026-7754
Patch
CWE-918
High · CVSS 7.7
EPSS 0.2% (10th pct)2026-07-17
MCP Server Configuration Validator Bypass via File Upload API
CVE-2026-7755
Patch
CWE-20
High · CVSS 8.8
EPSS 0.4% (34th pct)2026-07-17
Path Traversal Vulnerability in File Component Leading to Arbitrary File Read and Authentication Bypass
CVE-2026-7872
Patch
CWE-22
High · CVSS 8.1
EPSS 0.4% (29th pct)2026-07-17
Parameter Injection Vulnerability in API Graph Execution Engine
CVE-2026-8056
Patch
CWE-94
High · CVSS 8.8
EPSS 0.3% (22th pct)2026-07-17
Disk Cache Deserialization Remote Code Execution Vulnerability
CVE-2026-8476
Patch
CWE-502
Critical · CVSS 9.9
EPSS 0.5% (40th pct)2026-07-17
Remote Code Execution via Code Validation Endpoint
CVE-2026-8481
Patch
CWE-94
Critical · CVSS 9.9
EPSS 0.5% (37th pct)2026-07-17
Authentication Bypass in Webhook Endpoints Allowed Unauthorized Flow Execution
CVE-2026-8505
Patch
CWE-306
Critical · CVSS 9.8
EPSS 0.6% (43th pct)2026-07-17
Arbitrary Code Execution in Python Interpreter Component
CVE-2026-8635
Patch
CWE-94
Critical · CVSS 9.9
EPSS 0.3% (22th pct)2026-07-17
Path Traversal in APIRequest Component via Content-Disposition Header
CVE-2026-8859
Patch
CWE-22
Critical · CVSS 9.9
EPSS 0.4% (29th pct)2026-07-17
Unauthenticated Superuser Token Issuance via Auto-Login Endpoint
CVE-2026-9103
Patch
CWE-306
Critical · CVSS 9.8
EPSS 0.4% (34th pct)2026-07-17
Policies Component Dynamic CodeInput Fields Bypass Custom Component Validation
CVE-2026-9135
Patch
CWE-94
Critical · CVSS 9.9
EPSS 0.4% (37th pct)2026-07-17
CAI Content Credentials | Insufficiently Protected Credentials (CWE-522)
CVE-2026-48295
Patch
CWE-522
High · CVSS 7.5
EPSS 0.4% (32th pct)2026-07-14
CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-48290
Patch
CWE-918
High · CVSS 8.2
EPSS 0.2% (8th pct)2026-07-14
CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
CVE-2026-48357
Patch
CWE-400
Medium · CVSS 6.2
EPSS 0.2% (5th pct)2026-07-14
CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)
CVE-2026-48296
Patch
CWE-191
Medium · CVSS 6.2
EPSS 0.2% (5th pct)2026-07-14
CAI Content Credentials | Untrusted Search Path (CWE-426)
CVE-2026-48287
Patch
CWE-426
High · CVSS 7.4
EPSS 0.1% (4th pct)2026-07-14
CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-48312
Patch
CWE-20
Medium · CVSS 6.8
EPSS 0.2% (5th pct)2026-07-14
CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-48351
Patch
CWE-20
High · CVSS 7.5
EPSS 0.4% (33th pct)2026-07-14
CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-48302
Patch
CWE-20
Medium · CVSS 6.2
EPSS 0.2% (5th pct)2026-07-14
CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)
CVE-2026-48354
Patch
CWE-190
Medium · CVSS 6.2
EPSS 0.2% (5th pct)2026-07-14
CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)
CVE-2026-48298
Patch
CWE-191
Medium · CVSS 6.2
EPSS 0.2% (5th pct)2026-07-14
CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-48352
Patch
CWE-20
High · CVSS 7.5
EPSS 0.4% (33th pct)2026-07-14
CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-48353
Patch
CWE-20
Medium · CVSS 5.5
EPSS 0.2% (5th pct)2026-07-14
Bridge | Untrusted Pointer Dereference (CWE-822)
CVE-2026-48340
Patch
CWE-822
High · CVSS 7.8
EPSS 0.2% (7th pct)2026-07-14
Bridge | Out-of-bounds Write (CWE-787)
CVE-2026-48343
Patch
CWE-787
High · CVSS 7.8
EPSS 0.1% (4th pct)2026-07-14

Showing 30 of 7,059

Common weakness types

The CWE weakness categories most often found in apple macos CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many apple macos CVEs were published each year.

2015

116

2016

2017

2018

2019

455

2020

503

2021

664

2022

791

2023

880

2024

864

2025

1,030

2026

1,544

Other apple products

Browse vulnerabilities for other products by apple.

mac os x5,568 CVEs iphone os4,511 CVEs tvos2,059 CVEs ipados1,946 CVEs watchos1,854 CVEs safari1,670 CVEs iOS and iPadOS1,576 CVEs itunes922 CVEs

All apple vulnerabilities

Frequently asked questions

Common questions about apple macos vulnerabilities.

How many CVEs does apple macos have?: apple macos has 7,059 published CVE records since 2000.
How many apple macos CVEs are in CISA KEV?: Yes — 103 of apple macos's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for apple macos vulnerabilities?: Yes — 360 of apple macos's CVEs have a known public exploit.
Which versions of apple macos are affected?: 613 distinct apple macos versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in apple macos CVEs?: apple macos's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-416 (Use After Free), CWE-787 (Out-of-bounds Write), CWE-284 (Improper Access Control).
How many critical apple macos vulnerabilities are there?: apple macos has 603 critical and 3,612 high-severity CVEs.
What is the average severity of apple macos CVEs?: The average CVSS base score across apple macos's scored CVEs is 7.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track apple macos vulnerabilities

Monitor new apple macos vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing