<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent vulnerabilities of macOS</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Vulnerabilities published under the CPE names of macOS.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 14 Sep 2026 01:58:21 +0000</lastBuildDate>
    <item>
      <title>CVE-2023-43010</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2023-43010</link>
      <description>The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2, Safari 17.2, iOS 16.7.15 and iPadOS 16.7.15, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.</description>
      <content:encoded>The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2, Safari 17.2, iOS 16.7.15 and iPadOS 16.7.15, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2023-43010</guid>
      <pubDate>Thu, 12 Mar 2026 00:52:05 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2025-31223</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-31223</link>
      <description>The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption.</description>
      <content:encoded>The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-31223</guid>
      <pubDate>Mon, 12 May 2025 21:42:17 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2025-31277</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-31277</link>
      <description>The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.</description>
      <content:encoded>The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-31277</guid>
      <pubDate>Tue, 29 Jul 2025 23:29:31 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2025-43433</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-43433</link>
      <description>The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption.</description>
      <content:encoded>The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-43433</guid>
      <pubDate>Tue, 04 Nov 2025 01:15:18 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2024-6387</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2024-6387</link>
      <description>Openssh: regresshion - race condition in ssh allows rce/dos</description>
      <content:encoded>Openssh: regresshion - race condition in ssh allows rce/dos</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2024-6387</guid>
      <pubDate>Mon, 01 Jul 2024 12:37:25 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-43670</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-43670</link>
      <description>A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy.</description>
      <content:encoded>A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-43670</guid>
      <pubDate>Tue, 25 Aug 2026 19:24:48 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-64705</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-64705</link>
      <description>A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7. An app may be able to cause unexpected system termination or write kernel memory.</description>
      <content:encoded>A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7. An app may be able to cause unexpected system termination or write kernel memory.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-64705</guid>
      <pubDate>Tue, 25 Aug 2026 19:24:53 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-28900</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-28900</link>
      <description>A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.</description>
      <content:encoded>A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-28900</guid>
      <pubDate>Mon, 27 Jul 2026 20:14:34 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-28849</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-28849</link>
      <description>The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.</description>
      <content:encoded>The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-28849</guid>
      <pubDate>Mon, 27 Jul 2026 20:14:24 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-28984</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-28984</link>
      <description>The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.</description>
      <content:encoded>The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-28984</guid>
      <pubDate>Mon, 17 Aug 2026 21:30:37 +0000</pubDate>
    </item>
  </channel>
</rss>
