macOS 11.x — End of Life
EOL Actively exploited EOL: Feb 2, 20261 release in this series163 CVEs
macOS 11.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 11 | Nov 12, 2020 | — | Feb 2, 2026 | 11.7.11 | EOL |
CVEs affecting macOS 11.x (163)
| CVE | Severity | CVSS | EPSS | KEV | Cycle | Description | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-43709 | MEDIUM | 6.5 | 0.25% | — | 11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 a… | Jun 29, 2026 |
| CVE-2026-43708 | MEDIUM | 4.3 | 0.33% | — | 11 | The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5… | Jun 29, 2026 |
| CVE-2026-43707 | MEDIUM | 6.5 | 0.62% | — | 11 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 … | Jun 29, 2026 |
| CVE-2026-43706 | MEDIUM | 6.5 | 0.28% | — | 11 | A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, … | Jun 29, 2026 |
| CVE-2026-43705 | HIGH | 8.8 | 0.40% | — | 11 | A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 2… | Jun 29, 2026 |
| CVE-2026-43704 | MEDIUM | 5.3 | 0.34% | — | 11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 a… | Jun 29, 2026 |
| CVE-2026-43703 | MEDIUM | 6.5 | 0.31% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe … | Jun 29, 2026 |
| CVE-2026-43701 | HIGH | 7.1 | 0.47% | — | 11 | The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS … | Jun 29, 2026 |
| CVE-2026-43700 | MEDIUM | 6.5 | 0.21% | — | 11 | A cross-origin issue was addressed with improved tracking of security origins. This issue is fixed in Safari 26.5.2, iOS… | Jun 29, 2026 |
| CVE-2026-43699 | MEDIUM | 6.5 | 0.25% | — | 11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 a… | Jun 29, 2026 |
| CVE-2026-43676 | MEDIUM | 6.5 | 0.35% | — | 11 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 26.… | Jun 29, 2026 |
| CVE-2026-43663 | MEDIUM | 6.5 | 0.22% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.… | Jun 29, 2026 |
| CVE-2026-39872 | MEDIUM | 6.5 | 0.22% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.… | Jun 29, 2026 |
| CVE-2026-39868 | CRITICAL | 9.1 | 0.66% | — | 11 | This issue was addressed with improved input validation. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Taho… | Jun 29, 2026 |
| CVE-2026-28979 | MEDIUM | 6.5 | 0.26% | — | 11 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 26.… | Jun 29, 2026 |
| CVE-2025-46315 | HIGH | 7.5 | 0.27% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be a… | Jun 11, 2026 |
| CVE-2025-46308 | MEDIUM | 5.3 | 0.23% | — | 11 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, ma… | Jun 11, 2026 |
| CVE-2025-46293 | MEDIUM | 5.5 | 0.14% | — | 11 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be ab… | Jun 11, 2026 |
| CVE-2025-43339 | MEDIUM | 5.5 | 0.11% | — | 11 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. A malicious… | Jun 11, 2026 |
| CVE-2025-31272 | HIGH | 7.8 | 0.11% | — | 11 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to bypass la… | Jun 11, 2026 |
| CVE-2025-30459 | MEDIUM | 5.5 | 0.12% | — | 11 | A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4. An app may be … | Jun 11, 2026 |
| CVE-2025-24284 | HIGH | 8.8 | 0.13% | — | 11 | This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Sequoia 15.4… | Jun 11, 2026 |
| CVE-2025-24268 | MEDIUM | 5.5 | 0.14% | — | 11 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in m… | Jun 11, 2026 |
| CVE-2022-48575 | LOW | 3.5 | 0.15% | — | 11 | A person with access to a Mac may be able to bypass Login Window. A consistency issue was addressed with improved state … | Jun 10, 2026 |
| CVE-2022-26758 | HIGH | 7.1 | 0.10% | — | 11 | A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was a… | Jun 10, 2026 |
| CVE-2025-46307 | MEDIUM | 5.5 | 0.15% | — | 11 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to acc… | May 26, 2026 |
| CVE-2025-46280 | MEDIUM | 5.5 | 0.14% | — | 11 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be … | May 26, 2026 |
| CVE-2025-43451 | MEDIUM | 5.5 | 0.14% | — | 11 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be … | May 26, 2026 |
| CVE-2026-28830 | MEDIUM | 4.7 | 0.08% | — | 11 | A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.4. An app may be able t… | May 11, 2026 |
| CVE-2026-20696 | MEDIUM | 5.5 | 0.11% | — | 11 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.4. An app may… | May 11, 2026 |
| CVE-2025-43264 | HIGH | 8.8 | 0.40% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6. Processing a malicious… | Apr 2, 2026 |
| CVE-2025-43257 | HIGH | 8.7 | 0.18% | — | 11 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.6. An app may be ab… | Apr 2, 2026 |
| CVE-2025-43219 | HIGH | 8.8 | 0.43% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6. Processing a malicious… | Apr 2, 2026 |
| CVE-2025-43202 | HIGH | 8.8 | 0.41% | — | 11 | This issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 1… | Apr 2, 2026 |
| CVE-2024-44303 | HIGH | 7.5 | 0.27% | — | 11 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1. A malicious application may be … | Apr 2, 2026 |
| CVE-2024-44286 | HIGH | 7.5 | 0.34% | — | 11 | This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. An attacker with … | Apr 2, 2026 |
| CVE-2024-44250 | HIGH | 8.2 | 0.15% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. An app may be… | Apr 2, 2026 |
| CVE-2024-44219 | HIGH | 7.5 | 0.34% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. A malicious a… | Apr 2, 2026 |
| CVE-2024-40858 | HIGH | 7.1 | 0.17% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. An app may be… | Apr 2, 2026 |
| CVE-2024-40849 | HIGH | 7.5 | 0.23% | — | 11 | A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.1. An app may be able… | Apr 2, 2026 |
| CVE-2026-28882 | MEDIUM | 4.0 | 0.19% | — | 11 | This issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS … | Mar 25, 2026 |
| CVE-2026-28871 | MEDIUM | 4.3 | 0.28% | — | 11 | A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS … | Mar 25, 2026 |
| CVE-2026-28870 | MEDIUM | 5.5 | 0.16% | — | 11 | An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iO… | Mar 25, 2026 |
| CVE-2026-28861 | MEDIUM | 4.3 | 0.31% | — | 11 | A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18… | Mar 25, 2026 |
| CVE-2026-28859 | MEDIUM | 4.3 | 0.64% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, mac… | Mar 25, 2026 |
| CVE-2026-28844 | MEDIUM | 6.5 | 0.34% | — | 11 | A file access issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.4. An attacker m… | Mar 25, 2026 |
| CVE-2026-20668 | MEDIUM | 5.5 | 0.18% | — | 11 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.… | Mar 25, 2026 |
| CVE-2026-20665 | MEDIUM | 6.5 | 0.61% | — | 11 | This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18… | Mar 25, 2026 |
| CVE-2026-20643 | MEDIUM | 5.4 | 0.35% | — | 11 | A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Backgrou… | Mar 17, 2026 |
| CVE-2023-43010 | HIGH | 8.8 | 0.89% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.… | Mar 12, 2026 |
| CVE-2026-20700 | HIGH | 7.8 | 1.32% | KEV | 11 | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3,… | Feb 11, 2026 |
| CVE-2026-20681 | LOW | 3.3 | 0.11% | — | 11 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Tahoe 2… | Feb 11, 2026 |
| CVE-2026-20680 | MEDIUM | 6.5 | 0.12% | — | 11 | The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in iOS 18.7… | Feb 11, 2026 |
| CVE-2026-20677 | CRITICAL | 9.0 | 0.26% | — | 11 | A race condition was addressed with improved handling of symbolic links. This issue is fixed in iOS 18.7.5 and iPadOS 18… | Feb 11, 2026 |
| CVE-2026-20676 | MEDIUM | 5.3 | 0.22% | — | 11 | This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3… | Feb 11, 2026 |
| CVE-2026-20673 | MEDIUM | 5.3 | 0.31% | — | 11 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sequoia 15.… | Feb 11, 2026 |
| CVE-2026-20669 | MEDIUM | 5.5 | 0.13% | — | 11 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in m… | Feb 11, 2026 |
| CVE-2026-20667 | HIGH | 8.8 | 0.13% | — | 11 | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4,… | Feb 11, 2026 |
| CVE-2026-20666 | MEDIUM | 5.5 | 0.11% | — | 11 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.3. An app may… | Feb 11, 2026 |
| CVE-2026-20662 | MEDIUM | 4.6 | 0.15% | — | 11 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS … | Feb 11, 2026 |
| CVE-2026-20660 | HIGH | 7.5 | 0.78% | — | 11 | A path handling issue was addressed with improved logic. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.… | Feb 11, 2026 |
| CVE-2026-20656 | LOW | 3.3 | 0.11% | — | 11 | A logic issue was addressed with improved validation. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, … | Feb 11, 2026 |
| CVE-2026-20654 | MEDIUM | 5.5 | 0.13% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3… | Feb 11, 2026 |
| CVE-2026-20653 | MEDIUM | 5.5 | 0.15% | — | 11 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in i… | Feb 11, 2026 |
| CVE-2026-20652 | HIGH | 7.5 | 0.61% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5,… | Feb 11, 2026 |
| CVE-2026-20650 | HIGH | 7.5 | 0.47% | — | 11 | A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS… | Feb 11, 2026 |
| CVE-2026-20649 | HIGH | 7.5 | 0.23% | — | 11 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe… | Feb 11, 2026 |
| CVE-2026-20648 | MEDIUM | 5.5 | 0.13% | — | 11 | A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Tahoe 26.3.… | Feb 11, 2026 |
| CVE-2026-20647 | MEDIUM | 5.5 | 0.14% | — | 11 | This issue was addressed with improved data protection. This issue is fixed in macOS Tahoe 26.3. An app may be able to a… | Feb 11, 2026 |
| CVE-2026-20646 | LOW | 3.3 | 0.12% | — | 11 | A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.3. A malicious app may… | Feb 11, 2026 |
| CVE-2026-20644 | MEDIUM | 6.5 | 0.29% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5,… | Feb 11, 2026 |
| CVE-2026-20636 | MEDIUM | 6.5 | 0.38% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, mac… | Feb 11, 2026 |
| CVE-2026-20635 | MEDIUM | 4.3 | 0.29% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5,… | Feb 11, 2026 |
| CVE-2026-20630 | MEDIUM | 5.5 | 0.12% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be a… | Feb 11, 2026 |
| CVE-2026-20629 | MEDIUM | 5.5 | 0.11% | — | 11 | A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.3. An app… | Feb 11, 2026 |
| CVE-2026-20623 | MEDIUM | 5.5 | 0.13% | — | 11 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.3. An app may b… | Feb 11, 2026 |
| CVE-2026-20621 | MEDIUM | 5.5 | 0.13% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and… | Feb 11, 2026 |
| CVE-2026-20618 | MEDIUM | 5.5 | 0.13% | — | 11 | An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.3. An app may be… | Feb 11, 2026 |
| CVE-2026-20611 | HIGH | 7.8 | 0.25% | — | 11 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.5 and iPadOS … | Feb 11, 2026 |
| CVE-2026-20610 | HIGH | 7.8 | 0.20% | — | 11 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.3. An app may be able… | Feb 11, 2026 |
| CVE-2026-20609 | MEDIUM | 4.4 | 0.12% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and… | Feb 11, 2026 |
| CVE-2026-20608 | MEDIUM | 5.5 | 0.23% | — | 11 | This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18… | Feb 11, 2026 |
| CVE-2026-20603 | MEDIUM | 4.4 | 0.13% | — | 11 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Tahoe 26.3. An a… | Feb 11, 2026 |
| CVE-2026-20602 | MEDIUM | 5.5 | 0.14% | — | 11 | The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8… | Feb 11, 2026 |
| CVE-2026-20601 | LOW | 3.3 | 0.14% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be a… | Feb 11, 2026 |
| CVE-2025-46303 | MEDIUM | 5.7 | 0.26% | — | 11 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i… | Feb 11, 2026 |
| CVE-2025-46302 | MEDIUM | 5.7 | 0.26% | — | 11 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i… | Feb 11, 2026 |
| CVE-2025-46301 | MEDIUM | 5.7 | 0.26% | — | 11 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i… | Feb 11, 2026 |
| CVE-2025-46300 | MEDIUM | 5.7 | 0.26% | — | 11 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i… | Feb 11, 2026 |
| CVE-2025-46290 | HIGH | 7.5 | 0.85% | — | 11 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPad… | Feb 11, 2026 |
| CVE-2025-43417 | MEDIUM | 5.5 | 0.23% | — | 11 | A path handling issue was addressed with improved logic. This issue is fixed in macOS Sonoma 14.8.4, macOS Tahoe 26.2. A… | Feb 11, 2026 |
| CVE-2025-43403 | MEDIUM | 5.5 | 0.17% | — | 11 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS … | Feb 11, 2026 |
| CVE-2025-46316 | MEDIUM | 4.3 | 0.28% | — | 11 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in Pages 15.1, iOS 26.1 and iPad… | Jan 28, 2026 |
| CVE-2025-46306 | MEDIUM | 5.5 | 0.12% | — | 11 | The issue was addressed with improved bounds checks. This issue is fixed in Keynote 15.1, iOS 26 and iPadOS 26, macOS Ta… | Jan 28, 2026 |
| CVE-2025-46299 | MEDIUM | 4.3 | 0.27% | — | 11 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 … | Jan 9, 2026 |
| CVE-2025-46298 | MEDIUM | 6.5 | 0.32% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, mac… | Jan 9, 2026 |
| CVE-2025-46297 | MEDIUM | 5.5 | 0.11% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.2. An app may be a… | Jan 9, 2026 |
| CVE-2025-46291 | HIGH | 7.8 | 0.21% | — | 11 | A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.2. An app may bypass Gatekee… | Dec 17, 2025 |
| CVE-2025-46288 | MEDIUM | 5.5 | 0.16% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS T… | Dec 17, 2025 |
| CVE-2025-46283 | MEDIUM | 5.5 | 0.18% | — | 11 | A logic issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8.4, macOS Tahoe 26.2. An a… | Dec 17, 2025 |
| CVE-2025-46282 | MEDIUM | 5.5 | 0.15% | — | 11 | The issue was addressed with additional permissions checks. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. An app… | Dec 17, 2025 |
| CVE-2025-46281 | HIGH | 8.8 | 0.19% | — | 11 | A logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.2. An app may be able to break o… | Dec 17, 2025 |
| CVE-2025-46279 | LOW | 3.3 | 0.34% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS… | Dec 17, 2025 |
| CVE-2025-46278 | MEDIUM | 5.5 | 0.16% | — | 11 | The issue was addressed with improved handling of caches. This issue is fixed in macOS Tahoe 26.2. An app may be able to… | Dec 17, 2025 |
| CVE-2025-46277 | LOW | 3.3 | 0.17% | — | 11 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe… | Dec 17, 2025 |
| CVE-2025-43541 | MEDIUM | 4.3 | 32.48% | — | 11 | A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iP… | Dec 17, 2025 |
| CVE-2025-43536 | MEDIUM | 4.3 | 0.56% | — | 11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and… | Dec 17, 2025 |
| CVE-2025-43535 | MEDIUM | 4.3 | 0.80% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3,… | Dec 17, 2025 |
| CVE-2025-43533 | MEDIUM | 5.7 | 0.32% | — | 11 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i… | Dec 17, 2025 |
| CVE-2025-43531 | LOW | 3.1 | 0.45% | — | 11 | A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 1… | Dec 17, 2025 |
| CVE-2025-43526 | CRITICAL | 9.8 | 0.52% | — | 11 | This issue was addressed with improved URL validation. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. On a Mac wi… | Dec 17, 2025 |
| CVE-2025-43514 | MEDIUM | 5.5 | 0.17% | — | 11 | The issue was addressed with improved handling of caches. This issue is fixed in macOS Tahoe 26.2. An app may be able to… | Dec 17, 2025 |
| CVE-2025-43501 | MEDIUM | 4.3 | 0.71% | — | 11 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and … | Dec 17, 2025 |
| CVE-2025-43428 | CRITICAL | 9.8 | 0.71% | — | 11 | A configuration issue was addressed with additional restrictions. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS… | Dec 17, 2025 |
| CVE-2025-46285 | HIGH | 7.8 | 0.18% | — | 11 | An integer overflow was addressed by adopting 64-bit timestamps. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iO… | Dec 12, 2025 |
| CVE-2025-46276 | MEDIUM | 5.5 | 0.18% | — | 11 | An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 18.7.3 and iPad… | Dec 12, 2025 |
| CVE-2025-43542 | HIGH | 7.5 | 0.85% | — | 11 | This issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 a… | Dec 12, 2025 |
| CVE-2025-43539 | HIGH | 8.8 | 5.81% | — | 11 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and i… | Dec 12, 2025 |
| CVE-2025-43538 | MEDIUM | 5.5 | 3.04% | — | 11 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.… | Dec 12, 2025 |
| CVE-2025-43532 | LOW | 2.8 | 0.27% | — | 11 | A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.3 and iPadOS 18.7… | Dec 12, 2025 |
| CVE-2025-43530 | MEDIUM | 5.5 | 0.20% | — | 11 | This issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Sequoia 15.7.3… | Dec 12, 2025 |
| CVE-2025-43527 | HIGH | 7.8 | 0.15% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe… | Dec 12, 2025 |
| CVE-2025-43523 | MEDIUM | 5.5 | 0.18% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe… | Dec 12, 2025 |
| CVE-2025-43522 | LOW | 3.3 | 0.11% | — | 11 | A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issu… | Dec 12, 2025 |
| CVE-2025-43521 | MEDIUM | 5.5 | 0.13% | — | 11 | A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issu… | Dec 12, 2025 |
| CVE-2025-43519 | MEDIUM | 5.5 | 0.33% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonom… | Dec 12, 2025 |
| CVE-2025-43518 | LOW | 3.3 | 0.15% | — | 11 | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3,… | Dec 12, 2025 |
| CVE-2025-43517 | LOW | 3.3 | 0.17% | — | 11 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia… | Dec 12, 2025 |
| CVE-2025-43516 | LOW | 3.3 | 0.15% | — | 11 | A session management issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma… | Dec 12, 2025 |
| CVE-2025-43513 | MEDIUM | 5.5 | 0.18% | — | 11 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.3, macOS So… | Dec 12, 2025 |
| CVE-2025-43512 | HIGH | 7.8 | 0.18% | — | 11 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Sequoia 15.… | Dec 12, 2025 |
| CVE-2025-43506 | HIGH | 7.5 | 0.43% | — | 11 | A logic error was addressed with improved error handling. This issue is fixed in macOS Tahoe 26.1. iCloud Private Relay … | Dec 12, 2025 |
| CVE-2025-43497 | MEDIUM | 5.2 | 0.14% | — | 11 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app may … | Dec 12, 2025 |
| CVE-2025-43473 | MEDIUM | 5.5 | 0.17% | — | 11 | This issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.1. An app may be able to … | Dec 12, 2025 |
| CVE-2025-43471 | MEDIUM | 5.5 | 0.17% | — | 11 | The issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sens… | Dec 12, 2025 |
| CVE-2025-43470 | MEDIUM | 5.5 | 0.12% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. A standard user… | Dec 12, 2025 |
| CVE-2025-43467 | HIGH | 7.8 | 0.17% | — | 11 | This issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.1. An app may be able to gain root … | Dec 12, 2025 |
| CVE-2025-43466 | MEDIUM | 5.5 | 0.20% | — | 11 | An injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.1. An app may be able t… | Dec 12, 2025 |
| CVE-2025-43465 | MEDIUM | 5.5 | 0.18% | — | 11 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in m… | Dec 12, 2025 |
| CVE-2025-43464 | MEDIUM | 6.5 | 0.35% | — | 11 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.1. Visitin… | Dec 12, 2025 |
| CVE-2025-43463 | MEDIUM | 5.5 | 0.20% | — | 11 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in m… | Dec 12, 2025 |
| CVE-2025-43461 | MEDIUM | 5.5 | 0.18% | — | 11 | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Tahoe 26.1. An app may be ab… | Dec 12, 2025 |
| CVE-2025-43416 | MEDIUM | 5.5 | 0.38% | — | 11 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3… | Dec 12, 2025 |
| CVE-2025-43410 | LOW | 2.4 | 0.23% | — | 11 | The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8… | Dec 12, 2025 |
| CVE-2025-43406 | MEDIUM | 5.5 | 0.18% | — | 11 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to a… | Dec 12, 2025 |
| CVE-2025-43404 | LOW | 3.3 | 0.14% | — | 11 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app … | Dec 12, 2025 |
| CVE-2025-43402 | HIGH | 7.8 | 0.20% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4,… | Dec 12, 2025 |
| CVE-2025-43393 | MEDIUM | 5.2 | 0.14% | — | 11 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app … | Dec 12, 2025 |
| CVE-2025-43388 | MEDIUM | 5.5 | 0.20% | — | 11 | An injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.1. An app may be able t… | Dec 12, 2025 |
| CVE-2025-43381 | MEDIUM | 5.5 | 0.18% | — | 11 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.1. A malicious app ma… | Dec 12, 2025 |
| CVE-2025-43351 | MEDIUM | 5.5 | 0.15% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be a… | Dec 12, 2025 |
| CVE-2025-43320 | HIGH | 7.8 | 0.18% | — | 11 | The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26. An app … | Dec 12, 2025 |
| CVE-2025-14174 | HIGH | 8.8 | 22.72% | KEV | 11 | Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perfor… | Dec 12, 2025 |
| CVE-2025-43357 | LOW | 3.3 | 0.22% | — | 11 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7 and iPadOS 18… | Sep 15, 2025 |
| CVE-2025-43214 | MEDIUM | 6.5 | 0.96% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, mac… | Jul 30, 2025 |
| CVE-2025-43213 | MEDIUM | 6.5 | 0.73% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, mac… | Jul 30, 2025 |
| CVE-2025-31223 | HIGH | 8.0 | 0.53% | — | 11 | The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoi… | May 12, 2025 |
| CVE-2025-24170 | HIGH | 7.8 | 0.25% | — | 11 | A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5,… | Mar 31, 2025 |
| CVE-2024-54508 | HIGH | 7.5 | 0.98% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPa… | Dec 12, 2024 |
| CVE-2022-37434 | CRITICAL | 9.8 | 15.50% | — | 11 | zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header… | Aug 5, 2022 |
| CVE-2022-29458 | HIGH | 7.1 | 1.34% | — | 11 | ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_… | Apr 18, 2022 |
| CVE-2018-25032 | HIGH | 7.5 | 50.84% | — | 11 | zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matche… | Mar 25, 2022 |
| CVE-1999-0524 | MEDIUM | 4.0 | 31.59% | — | 11 | ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts. | Aug 1, 1997 |
macOS 11.x is EOL — migrate to macOS 12.x
macOS 12.x is the next major release. Plan your upgrade before macOS 11.x stops receiving security patches.
Frequently asked questions
Is macOS 11 end of life?
Yes. All macOS 11.x releases have reached end of life and no longer receive security patches. There are 163 known CVEs affecting macOS 11.x, including 5 critical. Migrate to macOS 12.x as soon as possible.
What CVEs affect macOS 11?
There are 163 CVEs tracked for macOS 11.x, including 5 critical severity issues and 2 listed in the CISA Known Exploited Vulnerabilities catalog. See the full list above with CVSS and EPSS scores.
What is the latest macOS 11 version?
The latest macOS 11.x patch release is 11.7.11, released on February 2, 2026. Always run the latest patch to benefit from all security fixes.
How to migrate from macOS 11 to macOS 12?
To migrate from macOS 11 to macOS 12: (1) review the official macOS 12 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run macOS 11 in production?
No. macOS 11 has reached end of life and security vulnerabilities are no longer patched. Critically, 2 CVEs affecting macOS 11.x are in the CISA KEV catalog — meaning they are actively exploited in the wild. Upgrade to a supported version immediately.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA