macOS 11.x — End of Life
EOL Actively exploited EOL: Feb 2, 20261 release in this series308 CVEs
macOS 11.x reached end of life on Feb 2, 2026, 263 days ago, and no longer receives security fixes. The most recent release in this series is 11.7.11. 308 CVEs are tracked for this series, including 10 critical and 6 actively exploited according to CISA KEV. 158 of them were published after the end of life of the affected cycle and will not get an official patch. The next major version is macOS 12. See macOS 12 →
macOS 11.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 11 | Nov 12, 2020 | — | Feb 2, 2026 | 11.7.11 | EOL |
CVEs affecting macOS 11.x (308)
| CVE | Severity | CVSS | EPSS | KEV | Cycle | Description | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-86950 | HIGH | 8.8 | 1.24% | KEV | 11 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 2… | Sep 28, 2026 |
| CVE-2026-86911 | MEDIUM | 5.5 | 0.15% | — | 11 | This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app ma… | Sep 14, 2026 |
| CVE-2026-86909 | MEDIUM | 4.4 | 0.15% | — | 11 | A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be a… | Sep 14, 2026 |
| CVE-2026-86905 | MEDIUM | 5.5 | 0.13% | — | 11 | This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate… | Sep 14, 2026 |
| CVE-2026-86903 | MEDIUM | 5.5 | 0.15% | — | 11 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS G… | Sep 14, 2026 |
| CVE-2026-86901 | HIGH | 7.1 | 0.17% | — | 11 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27. M… | Sep 14, 2026 |
| CVE-2026-86900 | MEDIUM | 6.5 | 0.34% | — | 11 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. M… | Sep 14, 2026 |
| CVE-2026-86898 | MEDIUM | 5.4 | 0.19% | — | 11 | A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macO… | Sep 14, 2026 |
| CVE-2026-86897 | MEDIUM | 5.5 | 0.15% | — | 11 | This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7,… | Sep 14, 2026 |
| CVE-2026-86894 | HIGH | 7.5 | 0.34% | — | 11 | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to bre… | Sep 14, 2026 |
| CVE-2026-86888 | LOW | 3.3 | 0.14% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golde… | Sep 14, 2026 |
| CVE-2026-86884 | MEDIUM | 5.5 | 0.14% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golde… | Sep 14, 2026 |
| CVE-2026-86870 | MEDIUM | 6.5 | 0.45% | — | 11 | A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS… | Sep 14, 2026 |
| CVE-2026-86869 | MEDIUM | 6.5 | 0.34% | — | 11 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.… | Sep 14, 2026 |
| CVE-2026-84635 | MEDIUM | 6.5 | 0.37% | — | 11 | A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macO… | Sep 14, 2026 |
| CVE-2026-84631 | HIGH | 7.8 | 0.14% | — | 11 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be … | Sep 14, 2026 |
| CVE-2026-84628 | MEDIUM | 5.5 | 0.15% | — | 11 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS … | Sep 14, 2026 |
| CVE-2026-84625 | CRITICAL | 9.1 | 0.47% | — | 11 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 27 and iPadOS 27, mac… | Sep 14, 2026 |
| CVE-2026-84606 | HIGH | 7.5 | 0.40% | — | 11 | A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS … | Sep 14, 2026 |
| CVE-2026-84601 | MEDIUM | 5.5 | 0.13% | — | 11 | A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app ma… | Sep 14, 2026 |
| CVE-2026-84600 | MEDIUM | 5.4 | 0.28% | — | 11 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS … | Sep 14, 2026 |
| CVE-2026-84597 | MEDIUM | 6.5 | 0.40% | — | 11 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, m… | Sep 14, 2026 |
| CVE-2026-84596 | MEDIUM | 6.5 | 0.40% | — | 11 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Go… | Sep 14, 2026 |
| CVE-2026-84589 | MEDIUM | 5.5 | 0.13% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27. An app may … | Sep 14, 2026 |
| CVE-2026-84588 | MEDIUM | 6.5 | 0.33% | — | 11 | A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. Mo… | Sep 14, 2026 |
| CVE-2026-84586 | MEDIUM | 5.5 | 0.15% | — | 11 | An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 2… | Sep 14, 2026 |
| CVE-2026-84585 | MEDIUM | 5.5 | 0.15% | — | 11 | A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app ma… | Sep 14, 2026 |
| CVE-2026-84584 | HIGH | 8.4 | 0.19% | — | 11 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27. An app may be … | Sep 14, 2026 |
| CVE-2026-84577 | HIGH | 8.2 | 0.16% | — | 11 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27, macOS T… | Sep 14, 2026 |
| CVE-2026-84571 | MEDIUM | 4.3 | 0.39% | — | 11 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden… | Sep 14, 2026 |
| CVE-2026-84569 | MEDIUM | 5.5 | 0.14% | — | 11 | An access issue was addressed with additional sandbox restrictions on the system pasteboards. This issue is fixed in mac… | Sep 14, 2026 |
| CVE-2026-84562 | MEDIUM | 4.7 | 0.09% | — | 11 | A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able t… | Sep 14, 2026 |
| CVE-2026-84560 | MEDIUM | 6.1 | 0.14% | — | 11 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS … | Sep 14, 2026 |
| CVE-2026-84558 | MEDIUM | 5.5 | 0.15% | — | 11 | A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27. An app m… | Sep 14, 2026 |
| CVE-2026-84551 | MEDIUM | 4.4 | 0.14% | — | 11 | A logic issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27,… | Sep 14, 2026 |
| CVE-2026-84533 | MEDIUM | 5.3 | 0.16% | — | 11 | A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 and iPadOS 27, macOS G… | Sep 14, 2026 |
| CVE-2026-84531 | MEDIUM | 6.2 | 0.14% | — | 11 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, m… | Sep 14, 2026 |
| CVE-2026-84530 | LOW | 3.3 | 0.14% | — | 11 | An information disclosure issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadO… | Sep 14, 2026 |
| CVE-2026-84522 | MEDIUM | 5.9 | 0.23% | — | 11 | A race condition was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may b… | Sep 14, 2026 |
| CVE-2026-84520 | CRITICAL | 9.8 | 0.44% | — | 11 | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27. A local atta… | Sep 14, 2026 |
| CVE-2026-84518 | MEDIUM | 4.3 | 0.32% | — | 11 | This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macO… | Sep 14, 2026 |
| CVE-2026-84491 | MEDIUM | 5.5 | 0.14% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 … | Sep 14, 2026 |
| CVE-2026-65415 | HIGH | 8.1 | 0.32% | — | 11 | A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gat… | Sep 14, 2026 |
| CVE-2026-65398 | HIGH | 7.8 | 0.16% | — | 11 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, … | Sep 14, 2026 |
| CVE-2026-65393 | MEDIUM | 5.5 | 0.15% | — | 11 | A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An ap… | Sep 14, 2026 |
| CVE-2026-65391 | HIGH | 8.8 | 0.41% | — | 11 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 26.6… | Sep 14, 2026 |
| CVE-2026-65390 | HIGH | 8.8 | 0.41% | — | 11 | An integer overflow was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and i… | Sep 14, 2026 |
| CVE-2026-65383 | MEDIUM | 4.4 | 0.13% | — | 11 | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may bypass Gatekeeper… | Sep 14, 2026 |
| CVE-2026-65380 | MEDIUM | 5.5 | 0.17% | — | 11 | An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fix… | Sep 14, 2026 |
| CVE-2026-65355 | MEDIUM | 4.3 | 0.34% | — | 11 | An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPa… | Sep 14, 2026 |
| CVE-2026-65354 | HIGH | 8.2 | 0.14% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golde… | Sep 14, 2026 |
| CVE-2026-65353 | MEDIUM | 5.5 | 0.14% | — | 11 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, ma… | Sep 14, 2026 |
| CVE-2026-65352 | MEDIUM | 4.3 | 0.32% | — | 11 | An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPad… | Sep 14, 2026 |
| CVE-2026-64753 | MEDIUM | 6.5 | 0.29% | — | 11 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 2… | Sep 14, 2026 |
| CVE-2026-64752 | HIGH | 7.3 | 0.17% | — | 11 | A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, ma… | Sep 14, 2026 |
| CVE-2026-43808 | MEDIUM | 5.5 | 0.15% | — | 11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, m… | Sep 14, 2026 |
| CVE-2026-43788 | MEDIUM | 6.6 | 0.14% | — | 11 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Processin… | Sep 14, 2026 |
| CVE-2026-43783 | HIGH | 7.8 | 0.12% | — | 11 | A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be ab… | Sep 14, 2026 |
| CVE-2026-43762 | MEDIUM | 5.5 | 0.15% | — | 11 | The issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionO… | Sep 14, 2026 |
| CVE-2026-43696 | MEDIUM | 5.3 | 0.29% | — | 11 | An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Golden Gate 27. An a… | Sep 14, 2026 |
| CVE-2026-43689 | HIGH | 7.8 | 0.15% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 … | Sep 14, 2026 |
| CVE-2026-43688 | HIGH | 7.8 | 0.16% | — | 11 | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, mac… | Sep 14, 2026 |
| CVE-2026-28937 | MEDIUM | 5.5 | 0.15% | — | 11 | This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate 27. An app may be a… | Sep 14, 2026 |
| CVE-2026-28836 | MEDIUM | 6.1 | 0.19% | — | 11 | A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.8. An attacker with phy… | Sep 14, 2026 |
| CVE-2026-43709 | MEDIUM | 6.5 | 0.37% | — | 11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 a… | Jun 29, 2026 |
| CVE-2026-43708 | MEDIUM | 4.3 | 0.37% | — | 11 | The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5… | Jun 29, 2026 |
| CVE-2026-43707 | MEDIUM | 6.5 | 0.68% | — | 11 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 … | Jun 29, 2026 |
| CVE-2026-43706 | MEDIUM | 6.5 | 0.38% | — | 11 | A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, … | Jun 29, 2026 |
| CVE-2026-43705 | HIGH | 8.8 | 0.42% | — | 11 | A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 2… | Jun 29, 2026 |
| CVE-2026-43704 | MEDIUM | 5.3 | 0.38% | — | 11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 a… | Jun 29, 2026 |
| CVE-2026-43703 | MEDIUM | 6.5 | 0.38% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe … | Jun 29, 2026 |
| CVE-2026-43701 | HIGH | 7.1 | 0.55% | — | 11 | The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS … | Jun 29, 2026 |
| CVE-2026-43700 | MEDIUM | 6.5 | 0.18% | — | 11 | A cross-origin issue was addressed with improved tracking of security origins. This issue is fixed in Safari 26.5.2, iOS… | Jun 29, 2026 |
| CVE-2026-43699 | MEDIUM | 6.5 | 0.39% | — | 11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 a… | Jun 29, 2026 |
| CVE-2026-43676 | MEDIUM | 6.5 | 0.46% | — | 11 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 26.… | Jun 29, 2026 |
| CVE-2026-43663 | MEDIUM | 6.5 | 0.36% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.… | Jun 29, 2026 |
| CVE-2026-39872 | MEDIUM | 6.5 | 0.36% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.… | Jun 29, 2026 |
| CVE-2026-39868 | CRITICAL | 9.1 | 0.68% | — | 11 | This issue was addressed with improved input validation. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Taho… | Jun 29, 2026 |
| CVE-2026-28979 | MEDIUM | 6.5 | 0.38% | — | 11 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 26.… | Jun 29, 2026 |
| CVE-2025-46315 | HIGH | 7.5 | 0.27% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be a… | Jun 11, 2026 |
| CVE-2025-46313 | MEDIUM | 5.5 | 0.13% | — | 11 | A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able … | Jun 11, 2026 |
| CVE-2025-46308 | MEDIUM | 5.3 | 0.23% | — | 11 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, ma… | Jun 11, 2026 |
| CVE-2025-46293 | MEDIUM | 5.5 | 0.14% | — | 11 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be ab… | Jun 11, 2026 |
| CVE-2025-43339 | MEDIUM | 5.5 | 0.11% | — | 11 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. A malicious… | Jun 11, 2026 |
| CVE-2025-43278 | MEDIUM | 5.5 | 0.15% | — | 11 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be ab… | Jun 11, 2026 |
| CVE-2025-31272 | HIGH | 7.8 | 0.11% | — | 11 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to bypass la… | Jun 11, 2026 |
| CVE-2025-30459 | MEDIUM | 5.5 | 0.12% | — | 11 | A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4. An app may be … | Jun 11, 2026 |
| CVE-2025-24284 | HIGH | 8.8 | 0.12% | — | 11 | This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Sequoia 15.4… | Jun 11, 2026 |
| CVE-2025-24268 | MEDIUM | 5.5 | 0.14% | — | 11 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in m… | Jun 11, 2026 |
| CVE-2022-48575 | LOW | 3.5 | 0.15% | — | 11 | A person with access to a Mac may be able to bypass Login Window. A consistency issue was addressed with improved state … | Jun 10, 2026 |
| CVE-2022-26758 | HIGH | 7.1 | 0.09% | — | 11 | A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was a… | Jun 10, 2026 |
| CVE-2025-46307 | MEDIUM | 5.5 | 0.15% | — | 11 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to acc… | May 26, 2026 |
| CVE-2025-46280 | MEDIUM | 5.5 | 0.13% | — | 11 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be … | May 26, 2026 |
| CVE-2025-43451 | MEDIUM | 5.5 | 0.13% | — | 11 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be … | May 26, 2026 |
| CVE-2026-28830 | MEDIUM | 4.7 | 0.10% | — | 11 | A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.4. An app may be able t… | May 11, 2026 |
| CVE-2026-20696 | MEDIUM | 5.5 | 0.11% | — | 11 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.4. An app may… | May 11, 2026 |
| CVE-2025-43264 | HIGH | 8.8 | 0.40% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6. Processing a malicious… | Apr 2, 2026 |
| CVE-2025-43257 | HIGH | 8.7 | 0.18% | — | 11 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.6. An app may be ab… | Apr 2, 2026 |
| CVE-2025-43219 | HIGH | 8.8 | 0.42% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6. Processing a malicious… | Apr 2, 2026 |
| CVE-2025-43202 | HIGH | 8.8 | 0.42% | — | 11 | This issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 1… | Apr 2, 2026 |
| CVE-2024-44303 | HIGH | 7.5 | 0.27% | — | 11 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1. A malicious application may be … | Apr 2, 2026 |
| CVE-2024-44286 | HIGH | 7.5 | 0.34% | — | 11 | This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. An attacker with … | Apr 2, 2026 |
| CVE-2024-44250 | HIGH | 8.2 | 0.15% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. An app may be… | Apr 2, 2026 |
| CVE-2024-44219 | HIGH | 7.5 | 0.34% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. A malicious a… | Apr 2, 2026 |
| CVE-2024-40858 | HIGH | 7.1 | 0.17% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. An app may be… | Apr 2, 2026 |
| CVE-2024-40849 | HIGH | 7.5 | 0.23% | — | 11 | A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.1. An app may be able… | Apr 2, 2026 |
| CVE-2026-28882 | MEDIUM | 4.0 | 0.17% | — | 11 | This issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS … | Mar 25, 2026 |
| CVE-2026-28871 | MEDIUM | 4.3 | 0.28% | — | 11 | A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS … | Mar 25, 2026 |
| CVE-2026-28870 | MEDIUM | 5.5 | 0.15% | — | 11 | An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iO… | Mar 25, 2026 |
| CVE-2026-28861 | MEDIUM | 4.3 | 0.19% | — | 11 | A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18… | Mar 25, 2026 |
| CVE-2026-28859 | MEDIUM | 4.3 | 0.56% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, mac… | Mar 25, 2026 |
| CVE-2026-28844 | MEDIUM | 6.5 | 0.33% | — | 11 | A file access issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.4. An attacker m… | Mar 25, 2026 |
| CVE-2026-20668 | MEDIUM | 5.5 | 0.17% | — | 11 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.… | Mar 25, 2026 |
| CVE-2026-20665 | MEDIUM | 6.5 | 0.61% | — | 11 | This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18… | Mar 25, 2026 |
| CVE-2026-20643 | MEDIUM | 5.4 | 0.36% | — | 11 | A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Backgrou… | Mar 17, 2026 |
| CVE-2023-43010 | HIGH | 8.8 | 0.91% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.… | Mar 12, 2026 |
| CVE-2026-20700 | HIGH | 7.8 | 1.39% | KEV | 11 | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3,… | Feb 11, 2026 |
| CVE-2026-20681 | LOW | 3.3 | 0.13% | — | 11 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Tahoe 2… | Feb 11, 2026 |
| CVE-2026-20680 | MEDIUM | 6.5 | 0.14% | — | 11 | The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in iOS 18.7… | Feb 11, 2026 |
| CVE-2026-20677 | CRITICAL | 9.0 | 0.31% | — | 11 | A race condition was addressed with improved handling of symbolic links. This issue is fixed in iOS 18.7.5 and iPadOS 18… | Feb 11, 2026 |
| CVE-2026-20676 | MEDIUM | 5.3 | 0.26% | — | 11 | This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3… | Feb 11, 2026 |
| CVE-2026-20673 | MEDIUM | 5.3 | 0.34% | — | 11 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sequoia 15.… | Feb 11, 2026 |
| CVE-2026-20669 | MEDIUM | 5.5 | 0.15% | — | 11 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in m… | Feb 11, 2026 |
| CVE-2026-20667 | HIGH | 8.8 | 0.15% | — | 11 | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4,… | Feb 11, 2026 |
| CVE-2026-20666 | MEDIUM | 5.5 | 0.12% | — | 11 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.3. An app may… | Feb 11, 2026 |
| CVE-2026-20662 | MEDIUM | 4.6 | 0.18% | — | 11 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS … | Feb 11, 2026 |
| CVE-2026-20660 | HIGH | 7.5 | 0.77% | — | 11 | A path handling issue was addressed with improved logic. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.… | Feb 11, 2026 |
| CVE-2026-20656 | LOW | 3.3 | 0.13% | — | 11 | A logic issue was addressed with improved validation. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, … | Feb 11, 2026 |
| CVE-2026-20654 | MEDIUM | 5.5 | 0.14% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3… | Feb 11, 2026 |
| CVE-2026-20653 | MEDIUM | 5.5 | 0.18% | — | 11 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in i… | Feb 11, 2026 |
| CVE-2026-20652 | HIGH | 7.5 | 0.69% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5,… | Feb 11, 2026 |
| CVE-2026-20650 | HIGH | 7.5 | 0.54% | — | 11 | A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS… | Feb 11, 2026 |
| CVE-2026-20649 | HIGH | 7.5 | 0.26% | — | 11 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe… | Feb 11, 2026 |
| CVE-2026-20648 | MEDIUM | 5.5 | 0.15% | — | 11 | A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Tahoe 26.3.… | Feb 11, 2026 |
| CVE-2026-20647 | MEDIUM | 5.5 | 0.16% | — | 11 | This issue was addressed with improved data protection. This issue is fixed in macOS Tahoe 26.3. An app may be able to a… | Feb 11, 2026 |
| CVE-2026-20646 | LOW | 3.3 | 0.14% | — | 11 | A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.3. A malicious app may… | Feb 11, 2026 |
| CVE-2026-20644 | MEDIUM | 6.5 | 0.35% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5,… | Feb 11, 2026 |
| CVE-2026-20636 | MEDIUM | 6.5 | 0.45% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, mac… | Feb 11, 2026 |
| CVE-2026-20635 | MEDIUM | 4.3 | 0.35% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5,… | Feb 11, 2026 |
| CVE-2026-20630 | MEDIUM | 5.5 | 0.15% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be a… | Feb 11, 2026 |
| CVE-2026-20629 | MEDIUM | 5.5 | 0.13% | — | 11 | A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.3. An app… | Feb 11, 2026 |
| CVE-2026-20623 | MEDIUM | 5.5 | 0.16% | — | 11 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.3. An app may b… | Feb 11, 2026 |
| CVE-2026-20621 | MEDIUM | 5.5 | 0.15% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and… | Feb 11, 2026 |
| CVE-2026-20618 | MEDIUM | 5.5 | 0.15% | — | 11 | An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.3. An app may be… | Feb 11, 2026 |
| CVE-2026-20611 | HIGH | 7.8 | 0.30% | — | 11 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.5 and iPadOS … | Feb 11, 2026 |
| CVE-2026-20610 | HIGH | 7.8 | 0.22% | — | 11 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.3. An app may be able… | Feb 11, 2026 |
| CVE-2026-20609 | MEDIUM | 4.4 | 0.14% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and… | Feb 11, 2026 |
| CVE-2026-20608 | MEDIUM | 5.5 | 0.27% | — | 11 | This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18… | Feb 11, 2026 |
| CVE-2026-20603 | MEDIUM | 4.4 | 0.15% | — | 11 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Tahoe 26.3. An a… | Feb 11, 2026 |
| CVE-2026-20602 | MEDIUM | 5.5 | 0.16% | — | 11 | The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8… | Feb 11, 2026 |
| CVE-2026-20601 | LOW | 3.3 | 0.16% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be a… | Feb 11, 2026 |
| CVE-2025-46303 | MEDIUM | 5.7 | 0.28% | — | 11 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i… | Feb 11, 2026 |
| CVE-2025-46302 | MEDIUM | 5.7 | 0.28% | — | 11 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i… | Feb 11, 2026 |
| CVE-2025-46301 | MEDIUM | 5.7 | 0.28% | — | 11 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i… | Feb 11, 2026 |
| CVE-2025-46300 | MEDIUM | 5.7 | 0.28% | — | 11 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i… | Feb 11, 2026 |
| CVE-2025-46290 | HIGH | 7.5 | 0.95% | — | 11 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPad… | Feb 11, 2026 |
| CVE-2025-43417 | MEDIUM | 5.5 | 0.23% | — | 11 | A path handling issue was addressed with improved logic. This issue is fixed in macOS Sonoma 14.8.4, macOS Tahoe 26.2. A… | Feb 11, 2026 |
| CVE-2025-43403 | MEDIUM | 5.5 | 0.20% | — | 11 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS … | Feb 11, 2026 |
| CVE-2025-46316 | MEDIUM | 4.3 | 0.32% | — | 11 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in Pages 15.1, iOS 26.1 and iPad… | Jan 28, 2026 |
| CVE-2025-46306 | MEDIUM | 5.5 | 0.14% | — | 11 | The issue was addressed with improved bounds checks. This issue is fixed in Keynote 15.1, iOS 26 and iPadOS 26, macOS Ta… | Jan 28, 2026 |
| CVE-2025-46299 | MEDIUM | 4.3 | 0.30% | — | 11 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 … | Jan 9, 2026 |
| CVE-2025-46298 | MEDIUM | 6.5 | 0.38% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, mac… | Jan 9, 2026 |
| CVE-2025-46297 | MEDIUM | 5.5 | 0.14% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.2. An app may be a… | Jan 9, 2026 |
| CVE-2025-46291 | HIGH | 7.8 | 0.20% | — | 11 | A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.2. An app may bypass Gatekee… | Dec 17, 2025 |
| CVE-2025-46288 | MEDIUM | 5.5 | 0.16% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS T… | Dec 17, 2025 |
| CVE-2025-46283 | MEDIUM | 5.5 | 0.18% | — | 11 | A logic issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8.4, macOS Tahoe 26.2. An a… | Dec 17, 2025 |
| CVE-2025-46282 | MEDIUM | 5.5 | 0.15% | — | 11 | The issue was addressed with additional permissions checks. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. An app… | Dec 17, 2025 |
| CVE-2025-46281 | HIGH | 8.8 | 0.20% | — | 11 | A logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.2. An app may be able to break o… | Dec 17, 2025 |
| CVE-2025-46279 | LOW | 3.3 | 0.36% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS… | Dec 17, 2025 |
| CVE-2025-46278 | MEDIUM | 5.5 | 0.16% | — | 11 | The issue was addressed with improved handling of caches. This issue is fixed in macOS Tahoe 26.2. An app may be able to… | Dec 17, 2025 |
| CVE-2025-46277 | LOW | 3.3 | 0.18% | — | 11 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe… | Dec 17, 2025 |
| CVE-2025-43541 | MEDIUM | 4.3 | 34.14% | — | 11 | A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iP… | Dec 17, 2025 |
| CVE-2025-43536 | MEDIUM | 4.3 | 0.57% | — | 11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and… | Dec 17, 2025 |
| CVE-2025-43535 | MEDIUM | 4.3 | 0.84% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3,… | Dec 17, 2025 |
| CVE-2025-43533 | MEDIUM | 5.7 | 0.30% | — | 11 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i… | Dec 17, 2025 |
| CVE-2025-43531 | LOW | 3.1 | 0.45% | — | 11 | A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 1… | Dec 17, 2025 |
| CVE-2025-43526 | CRITICAL | 9.8 | 0.53% | — | 11 | This issue was addressed with improved URL validation. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. On a Mac wi… | Dec 17, 2025 |
| CVE-2025-43514 | MEDIUM | 5.5 | 0.18% | — | 11 | The issue was addressed with improved handling of caches. This issue is fixed in macOS Tahoe 26.2. An app may be able to… | Dec 17, 2025 |
| CVE-2025-43501 | MEDIUM | 4.3 | 0.77% | — | 11 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and … | Dec 17, 2025 |
| CVE-2025-43428 | CRITICAL | 9.8 | 0.71% | — | 11 | A configuration issue was addressed with additional restrictions. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS… | Dec 17, 2025 |
| CVE-2025-46285 | HIGH | 7.8 | 0.19% | — | 11 | An integer overflow was addressed by adopting 64-bit timestamps. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iO… | Dec 12, 2025 |
| CVE-2025-46276 | MEDIUM | 5.5 | 0.18% | — | 11 | An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 18.7.3 and iPad… | Dec 12, 2025 |
| CVE-2025-43542 | HIGH | 7.5 | 0.85% | — | 11 | This issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 a… | Dec 12, 2025 |
| CVE-2025-43539 | HIGH | 8.8 | 6.15% | — | 11 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and i… | Dec 12, 2025 |
| CVE-2025-43538 | MEDIUM | 5.5 | 3.01% | — | 11 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.… | Dec 12, 2025 |
| CVE-2025-43532 | LOW | 2.8 | 0.27% | — | 11 | A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.3 and iPadOS 18.7… | Dec 12, 2025 |
| CVE-2025-43530 | MEDIUM | 5.5 | 0.22% | — | 11 | This issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Sequoia 15.7.3… | Dec 12, 2025 |
| CVE-2025-43527 | HIGH | 7.8 | 0.16% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe… | Dec 12, 2025 |
| CVE-2025-43523 | MEDIUM | 5.5 | 0.18% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe… | Dec 12, 2025 |
| CVE-2025-43522 | LOW | 3.3 | 0.11% | — | 11 | A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issu… | Dec 12, 2025 |
| CVE-2025-43521 | MEDIUM | 5.5 | 0.13% | — | 11 | A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issu… | Dec 12, 2025 |
| CVE-2025-43519 | MEDIUM | 5.5 | 0.33% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonom… | Dec 12, 2025 |
| CVE-2025-43518 | LOW | 3.3 | 0.15% | — | 11 | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3,… | Dec 12, 2025 |
| CVE-2025-43517 | LOW | 3.3 | 0.17% | — | 11 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia… | Dec 12, 2025 |
| CVE-2025-43516 | LOW | 3.3 | 0.16% | — | 11 | A session management issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma… | Dec 12, 2025 |
| CVE-2025-43513 | MEDIUM | 5.5 | 0.19% | — | 11 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.3, macOS So… | Dec 12, 2025 |
| CVE-2025-43512 | HIGH | 7.8 | 0.18% | — | 11 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Sequoia 15.… | Dec 12, 2025 |
| CVE-2025-43506 | HIGH | 7.5 | 0.46% | — | 11 | A logic error was addressed with improved error handling. This issue is fixed in macOS Tahoe 26.1. iCloud Private Relay … | Dec 12, 2025 |
| CVE-2025-43497 | MEDIUM | 5.2 | 0.15% | — | 11 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app may … | Dec 12, 2025 |
| CVE-2025-43473 | MEDIUM | 5.5 | 0.20% | — | 11 | This issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.1. An app may be able to … | Dec 12, 2025 |
| CVE-2025-43471 | MEDIUM | 5.5 | 0.18% | — | 11 | The issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sens… | Dec 12, 2025 |
| CVE-2025-43470 | MEDIUM | 5.5 | 0.13% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. A standard user… | Dec 12, 2025 |
| CVE-2025-43467 | HIGH | 7.8 | 0.18% | — | 11 | This issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.1. An app may be able to gain root … | Dec 12, 2025 |
| CVE-2025-43466 | MEDIUM | 5.5 | 0.22% | — | 11 | An injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.1. An app may be able t… | Dec 12, 2025 |
| CVE-2025-43465 | MEDIUM | 5.5 | 0.19% | — | 11 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in m… | Dec 12, 2025 |
| CVE-2025-43464 | MEDIUM | 6.5 | 0.38% | — | 11 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.1. Visitin… | Dec 12, 2025 |
| CVE-2025-43463 | MEDIUM | 5.5 | 0.21% | — | 11 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in m… | Dec 12, 2025 |
| CVE-2025-43461 | MEDIUM | 5.5 | 0.19% | — | 11 | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Tahoe 26.1. An app may be ab… | Dec 12, 2025 |
| CVE-2025-43416 | MEDIUM | 5.5 | 0.41% | — | 11 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3… | Dec 12, 2025 |
| CVE-2025-43410 | LOW | 2.4 | 0.24% | — | 11 | The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8… | Dec 12, 2025 |
| CVE-2025-43406 | MEDIUM | 5.5 | 0.19% | — | 11 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to a… | Dec 12, 2025 |
| CVE-2025-43404 | LOW | 3.3 | 0.15% | — | 11 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app … | Dec 12, 2025 |
| CVE-2025-43402 | HIGH | 7.8 | 0.21% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4,… | Dec 12, 2025 |
| CVE-2025-43393 | MEDIUM | 5.2 | 0.15% | — | 11 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app … | Dec 12, 2025 |
| CVE-2025-43388 | MEDIUM | 5.5 | 0.21% | — | 11 | An injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.1. An app may be able t… | Dec 12, 2025 |
| CVE-2025-43381 | MEDIUM | 5.5 | 0.19% | — | 11 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.1. A malicious app ma… | Dec 12, 2025 |
| CVE-2025-43351 | MEDIUM | 5.5 | 0.16% | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be a… | Dec 12, 2025 |
| CVE-2025-43320 | HIGH | 7.8 | 0.19% | — | 11 | The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26. An app … | Dec 12, 2025 |
| CVE-2025-14174 | HIGH | 8.8 | 22.32% | KEV | 11 | Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perfor… | Dec 12, 2025 |
| CVE-2025-43374 | MEDIUM | 4.3 | — | — | 11 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPad… | Nov 21, 2025 |
| CVE-2025-31266 | MEDIUM | 4.3 | — | — | 11 | A spoofing issue was addressed with improved truncation when displaying the fully qualified domain name. This issue is f… | Nov 21, 2025 |
| CVE-2025-31248 | MEDIUM | 5.5 | 0.16% | — | 11 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in m… | Nov 21, 2025 |
| CVE-2023-43000 | HIGH | 8.8 | 4.04% | KEV | 11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.… | Nov 5, 2025 |
| CVE-2025-43481 | MEDIUM | 5.2 | — | — | 11 | This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may… | Nov 4, 2025 |
| CVE-2025-43474 | HIGH | 7.8 | — | — | 11 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.2, macOS S… | Nov 4, 2025 |
| CVE-2025-43472 | HIGH | 7.8 | — | — | 11 | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.7.2, macOS So… | Nov 4, 2025 |
| CVE-2025-43468 | MEDIUM | 5.5 | — | — | 11 | A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issu… | Nov 4, 2025 |
| CVE-2025-43448 | MEDIUM | 6.3 | 0.31% | — | 11 | This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS … | Nov 4, 2025 |
| CVE-2025-43446 | MEDIUM | 5.5 | — | — | 11 | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma… | Nov 4, 2025 |
| CVE-2025-43445 | MEDIUM | 4.3 | 1.11% | — | 11 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2,… | Nov 4, 2025 |
| CVE-2025-43423 | LOW | 2.0 | 0.24% | — | 11 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.… | Nov 4, 2025 |
| CVE-2025-43420 | MEDIUM | 4.7 | — | — | 11 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 1… | Nov 4, 2025 |
| CVE-2025-43414 | MEDIUM | 6.2 | — | — | 11 | A permissions issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14… | Nov 4, 2025 |
| CVE-2025-43413 | HIGH | 7.5 | — | — | 11 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, mac… | Nov 4, 2025 |
| CVE-2025-43411 | MEDIUM | 5.5 | — | — | 11 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 1… | Nov 4, 2025 |
| CVE-2025-43409 | MEDIUM | 5.5 | — | — | 11 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, mac… | Nov 4, 2025 |
| CVE-2025-43408 | LOW | 2.4 | — | — | 11 | This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.7.2,… | Nov 4, 2025 |
| CVE-2025-43401 | HIGH | 7.5 | — | — | 11 | A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Son… | Nov 4, 2025 |
| CVE-2025-43399 | HIGH | 7.5 | 0.59% | — | 11 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7.2 and iPadOS … | Nov 4, 2025 |
| CVE-2025-43397 | MEDIUM | 5.5 | — | — | 11 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.2, macOS So… | Nov 4, 2025 |
| CVE-2025-43390 | MEDIUM | 5.5 | — | — | 11 | A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issu… | Nov 4, 2025 |
| CVE-2025-43387 | HIGH | 7.8 | — | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe… | Nov 4, 2025 |
| CVE-2025-43385 | MEDIUM | 4.3 | 1.00% | — | 11 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS … | Nov 4, 2025 |
| CVE-2025-43384 | MEDIUM | 4.3 | 1.00% | — | 11 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS … | Nov 4, 2025 |
| CVE-2025-43383 | MEDIUM | 4.3 | 1.00% | — | 11 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS … | Nov 4, 2025 |
| CVE-2025-43379 | MEDIUM | 5.5 | — | — | 11 | This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Se… | Nov 4, 2025 |
| CVE-2025-43378 | MEDIUM | 5.5 | — | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe… | Nov 4, 2025 |
| CVE-2025-43377 | MEDIUM | 5.5 | 0.18% | — | 11 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, … | Nov 4, 2025 |
| CVE-2025-43361 | HIGH | 7.8 | — | — | 11 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Se… | Nov 4, 2025 |
| CVE-2025-43338 | HIGH | 7.1 | — | — | 11 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, … | Nov 4, 2025 |
| CVE-2025-43288 | MEDIUM | 5.5 | — | — | 11 | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26… | Nov 4, 2025 |
| CVE-2025-43281 | HIGH | 7.8 | 0.14% | — | 11 | The issue was addressed with improved authentication. This issue is fixed in macOS Sequoia 15.6. A local attacker may be… | Oct 15, 2025 |
| CVE-2025-43296 | MEDIUM | 5.5 | 0.14% | — | 11 | A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeepe… | Oct 9, 2025 |
| CVE-2025-43372 | HIGH | 7.8 | — | — | 11 | The issue was addressed with improved input validation. This issue is fixed in iOS 26 and iPadOS 26, macOS Sonoma 14.8.2… | Sep 15, 2025 |
| CVE-2025-43368 | MEDIUM | 4.3 | — | — | 11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadO… | Sep 15, 2025 |
| CVE-2025-43357 | LOW | 3.3 | 0.23% | — | 11 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7 and iPadOS 18… | Sep 15, 2025 |
| CVE-2025-43356 | MEDIUM | 6.5 | — | — | 11 | The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iO… | Sep 15, 2025 |
| CVE-2025-43354 | MEDIUM | 5.5 | — | — | 11 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26,… | Sep 15, 2025 |
| CVE-2025-43347 | CRITICAL | 9.8 | — | — | 11 | This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, t… | Sep 15, 2025 |
| CVE-2025-43346 | MEDIUM | 5.5 | — | — | 11 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7 and iPadOS 18… | Sep 15, 2025 |
| CVE-2025-43344 | LOW | 3.3 | — | — | 11 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, … | Sep 15, 2025 |
| CVE-2025-43343 | CRITICAL | 9.8 | — | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tah… | Sep 15, 2025 |
| CVE-2025-43342 | CRITICAL | 9.8 | — | — | 11 | A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS … | Sep 15, 2025 |
| CVE-2025-43329 | HIGH | 8.8 | — | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe… | Sep 15, 2025 |
| CVE-2025-43327 | MEDIUM | 6.5 | — | — | 11 | The issue was addressed by adding additional logic. This issue is fixed in Safari 26, macOS Tahoe 26. Visiting a malicio… | Sep 15, 2025 |
| CVE-2025-43318 | MEDIUM | 6.2 | 0.20% | — | 11 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Tahoe 26. An app with root pri… | Sep 15, 2025 |
| CVE-2025-43317 | MEDIUM | 5.5 | — | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe… | Sep 15, 2025 |
| CVE-2025-43316 | HIGH | 7.8 | — | — | 11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26, visionOS 26. A ma… | Sep 15, 2025 |
| CVE-2025-43303 | MEDIUM | 5.5 | — | — | 11 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26,… | Sep 15, 2025 |
| CVE-2025-43297 | MEDIUM | 6.2 | 0.36% | — | 11 | A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26. An app may be… | Sep 15, 2025 |
| CVE-2025-43294 | LOW | 3.3 | — | — | 11 | An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue… | Sep 15, 2025 |
| CVE-2025-43272 | MEDIUM | 6.5 | — | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tah… | Sep 15, 2025 |
| CVE-2025-43214 | MEDIUM | 6.5 | 0.97% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, mac… | Jul 30, 2025 |
| CVE-2025-43213 | MEDIUM | 6.5 | 0.74% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, mac… | Jul 30, 2025 |
| CVE-2025-6558 | HIGH | 8.8 | 10.92% | KEV | 11 | Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote at… | Jul 15, 2025 |
| CVE-2025-31223 | HIGH | 8.0 | 0.59% | — | 11 | The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoi… | May 12, 2025 |
| CVE-2025-24170 | HIGH | 7.8 | 0.26% | — | 11 | A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5,… | Mar 31, 2025 |
| CVE-2024-54508 | HIGH | 7.5 | 0.97% | — | 11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPa… | Dec 12, 2024 |
| CVE-2023-41074 | HIGH | 8.8 | 4.12% | — | 11 | The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 1… | Sep 27, 2023 |
| CVE-2023-4781 | HIGH | 7.8 | 0.61% | — | 11 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873. | Sep 5, 2023 |
| CVE-2023-4752 | HIGH | 7.8 | 0.56% | — | 11 | Use After Free in GitHub repository vim/vim prior to 9.0.1858. | Sep 4, 2023 |
| CVE-2023-4750 | HIGH | 7.8 | 0.53% | — | 11 | Use After Free in GitHub repository vim/vim prior to 9.0.1857. | Sep 4, 2023 |
| CVE-2023-4733 | HIGH | 7.8 | 0.54% | — | 11 | Use After Free in GitHub repository vim/vim prior to 9.0.1840. | Sep 4, 2023 |
| CVE-2023-4734 | HIGH | 7.8 | 0.57% | — | 11 | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. | Sep 2, 2023 |
| CVE-2023-0433 | HIGH | 7.8 | 0.51% | — | 11 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. | Jan 21, 2023 |
| CVE-2023-0288 | HIGH | 7.8 | 0.48% | — | 11 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. | Jan 13, 2023 |
| CVE-2022-37434 | CRITICAL | 9.8 | 18.97% | — | 11 | zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header… | Aug 5, 2022 |
| CVE-2022-2294 | HIGH | 8.8 | 70.83% | KEV | 11 | Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit… | Jul 28, 2022 |
| CVE-2022-2126 | HIGH | 7.8 | 1.56% | — | 11 | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. | Jun 19, 2022 |
| CVE-2022-2125 | HIGH | 7.8 | 1.64% | — | 11 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. | Jun 19, 2022 |
| CVE-2022-2124 | HIGH | 7.8 | 1.56% | — | 11 | Buffer Over-read in GitHub repository vim/vim prior to 8.2. | Jun 19, 2022 |
| CVE-2022-2042 | HIGH | 7.8 | 1.48% | — | 11 | Use After Free in GitHub repository vim/vim prior to 8.2. | Jun 10, 2022 |
| CVE-2022-1674 | MEDIUM | 5.5 | 1.54% | — | 11 | NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938.… | May 12, 2022 |
| CVE-2022-1620 | HIGH | 7.5 | 1.59% | — | 11 | NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901.… | May 8, 2022 |
| CVE-2022-1619 | HIGH | 7.8 | 2.54% | — | 11 | Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerab… | May 8, 2022 |
| CVE-2022-1616 | HIGH | 7.8 | 2.71% | — | 11 | Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashi… | May 7, 2022 |
| CVE-2022-29458 | HIGH | 7.1 | 1.34% | — | 11 | ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_… | Apr 18, 2022 |
| CVE-2018-25032 | HIGH | 7.5 | 51.73% | — | 11 | zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matche… | Mar 25, 2022 |
| CVE-2022-0530 | MEDIUM | 5.5 | 2.10% | — | 11 | A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads … | Feb 9, 2022 |
| CVE-2022-0351 | HIGH | 7.8 | 0.60% | — | 11 | Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2. | Jan 25, 2022 |
| CVE-2021-4166 | HIGH | 7.1 | 1.57% | — | 11 | vim is vulnerable to Out-of-bounds Read | Dec 25, 2021 |
| CVE-2021-4136 | HIGH | 7.8 | 1.96% | — | 11 | vim is vulnerable to Heap-based Buffer Overflow | Dec 19, 2021 |
| CVE-2020-14155 | MEDIUM | 5.3 | 4.18% | — | 11 | libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring. | Jun 15, 2020 |
| CVE-2019-20838 | HIGH | 7.5 | 2.77% | — | 11 | libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than on… | Jun 15, 2020 |
| CVE-2020-13631 | MEDIUM | 5.5 | 0.65% | — | 11 | SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c an… | May 27, 2020 |
| CVE-2020-13630 | HIGH | 7.0 | 1.03% | — | 11 | ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature. | May 27, 2020 |
| CVE-2013-0340 | MEDIUM | 6.8 | 19.43% | — | 11 | expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetE… | Jan 21, 2014 |
| CVE-1999-0524 | MEDIUM | 4.0 | 32.15% | — | 11 | ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts. | Aug 1, 1997 |
macOS 11.x is EOL — migrate to macOS 12.x
macOS 12.x is the next major release. Plan your upgrade before macOS 11.x stops receiving security patches.
Add a macOS 11 EOL badge to your README
Show your users which macOS version your project runs and whether it is still supported. The badge updates automatically. More formats and options →
[](https://eolcanary.com/explore/macos/11)Frequently asked questions
Is macOS 11 end of life?
Yes. All macOS 11.x releases have reached end of life and no longer receive security patches. There are 308 known CVEs affecting macOS 11.x, including 10 critical. Migrate to macOS 12.x as soon as possible.
What CVEs affect macOS 11?
There are 308 CVEs tracked for macOS 11.x, including 10 critical severity issues and 6 listed in the CISA Known Exploited Vulnerabilities catalog. See the full list above with CVSS and EPSS scores.
What is the latest macOS 11 version?
The latest macOS 11.x patch release is 11.7.11, released on February 2, 2026. Always run the latest patch to benefit from all security fixes.
How to migrate from macOS 11 to macOS 12?
To migrate from macOS 11 to macOS 12: (1) review the official macOS 12 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run macOS 11 in production?
No. macOS 11 has reached end of life and security vulnerabilities are no longer patched. Critically, 6 CVEs affecting macOS 11.x are in the CISA KEV catalog — meaning they are actively exploited in the wild. Upgrade to a supported version immediately.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA