Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple BackendsEPSS 0.3%Oct 16, 2026
- Medium5.9A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS.EPSS 0.1%Oct 14, 2026
- Medium6.7The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component.EPSS 1.7%Oct 14, 2026
- Medium4.3Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a certain size threshold is mishandled.EPSS 0.1%Oct 14, 2026
- High7.1The macOS version of the DigiD app is not signed with Hardened Runtime.EPSS 0.1%Oct 13, 2026
- High8.8The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22).EPSS 0.4%Oct 12, 2026
- High7.2VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data.EPSS 0.1%Oct 12, 2026
- High8.8Apple Multiple Products Out-of-Bounds Write VulnerabilityKEVEPSS 1.2%Sep 28, 2026
- UnknownCVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)EPSS 0.1%Sep 12, 2026
- Critical9.8ZDI-26-651: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution VulnerabilityEPSS 0.4%Sep 1, 2026
- High8.8ZDI-26-610: Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution VulnerabilityEPSS 0.4%Aug 24, 2026
- Critical9.8Apple macOS Improper Authentication VulnerabilityKEVEPSS 1.7%Aug 6, 2026
- High7.8An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for CVE-2025-5199.EPSS 0.2%May 28, 2026
- Medium5.5A logic issue was addressed with improved restrictions.EPSS 0.1%May 26, 2026
- High7.0A race condition was addressed with additional validation.EPSS 0.1%May 26, 2026
- Medium5.5An out-of-bounds read was addressed with improved bounds checking.EPSS 0.1%May 26, 2026
- Medium5.5A permissions issue was addressed by removing the vulnerable code.EPSS 0.1%May 26, 2026
- High7.8A logic issue was addressed with improved checks.EPSS 0.1%May 26, 2026
- Medium5.5A permissions issue was addressed with additional restrictions.EPSS 0.1%May 26, 2026
- Medium5.5A logic issue was addressed with improved validation.EPSS 0.1%May 26, 2026
- High8.8The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing.May 22, 2026
- Medium6.5An attacker in a privileged network position may be able to leak sensitive information.EPSS 0.3%May 18, 2026
- High7.3An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge.EPSS 0.1%May 13, 2026
- High7.5An inconsistent user interface issue was addressed with improved state management.EPSS 0.2%May 12, 2026
- High8.8An access issue was addressed with additional sandbox restrictions.EPSS 0.1%May 12, 2026
340 records · page 1 of 14
PreviousNext