// tag

macOS

Security incidents tagged macOS. Newest first.

## 4 macOS incidents in the last year

through Oct 22, 2026

crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore

Sep 29highApple CoreGraphics zero-day CVE-2026-86950patched
› Apple iOS, iPadOS, macOS (CoreGraphics) patched
Apple patched CVE-2026-86950, an out-of-bounds write in CoreGraphics that may lead to arbitrary code execution, and indicated it may have been exploited in a sophisticated targeted attack against earlier iOS versions. Fixed in iOS/iPadOS 26.7.1 and corresponding macOS updates. CISA added to KEV Sept 29.
open incident →CVE-2026-86950

show 3 older incidents

Aug 18highApple macOS: Apple macOS Improper Authentication Vulnerabilitypatched
› Apple macOS patched
Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials. Added to CISA KEV on 2026-08-18.
open incident →CVE-2026-65400

Mar 20highApple Multiple Products: Apple Multiple Products Improper Locking Vulnerabilitypatched
› Apple Multiple Products patched
Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes. CISA added CVE-2025-43510, CVE-2025-43520, CVE-2025-31277 to the Known Exploited Vulnerabilities catalog on 2026-03-20 based on evidence of active exploitation.
open incident →CVE-2025-43510 · CVE-2025-43520 · CVE-2025-31277

Feb 12highApple Multiple Products: Apple Multiple Buffer Overflow Vulnerabilitypatched
› Apple Multiple Products patched
Apple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow an attacker with memory write the capability to execute arbitrary code. Added to CISA KEV on 2026-02-12.
open incident →CVE-2026-20700