macOS Security News

Security news specific to Apple macOS: vulnerabilities, malware and patches affecting Mac systems.

macOS has a smaller attack surface than Windows in raw volume, but it is an increasingly common target as enterprise adoption grows. macOS-specific vulnerabilities, malware families targeting Macs, and Apple's security update releases show up here.

Recent macOS items

CVE-2026-123806 python-tuf is a Python reference implementation of The Update Framework (TUF). Prior to 7.0.0, DelegatedRole._is_target_in_pathpattern in tuf/api/_payload.py uses fnmatch.fnmatch, whic...
@cveNotify · Nov 12, 2026
CVE-2026-113970 A use-after-free issue was addressed with improved memory management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7....
@cveNotify · Nov 12, 2026
CVE-2026-113969 A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27....
@cveNotify · Nov 12, 2026
CVE-2026-113968 A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27....
@cveNotify · Nov 12, 2026
CVE-2026-113965 This issue was addressed with improved checks. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadO...
@cveNotify · Nov 12, 2026
CVE-2026-113964 A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27....
@cveNotify · Nov 12, 2026
CVE-2026-113961 An authorization issue was addressed with improved validation. This issue is fixed in HomeView Software Version 27.2, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS...
@cveNotify · Nov 12, 2026
CVE-2026-113960 This issue was addressed by removing the vulnerable code. This issue is fixed in HomeView Software Version 27.2, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golde...
@cveNotify · Nov 12, 2026
CVE-2026-68548 Algernon is a small self-contained pure-Go web server. Prior to version 1.17.10, Algernon's URL-prefix authorization gate matches its protected prefixes (/admin, /repo, /data) with case...
@cveNotify · Nov 12, 2026
CVE-2026-126329 Docker Sandboxes reuses existing state and configuration directories without verifying their ownership. If sbx or sandboxd is run as root with HOME or, on Linux, XDG_STATE_HOME pointin...
@cveNotify · Nov 12, 2026
CVE-2026-123139 Improper verification of the source of a communication channel vulnerability in Opera Neon on macOS and Windows allows a malicious browser extension to take control of the browser by s...
@cveNotify · Nov 12, 2026
CVE-2001-1411 Format string vulnerability in gm4 (aka m4) on Mac OS X may allow local users to gain privileges if gm4 is called by setuid programs. 🎖
@cveNotify · Nov 12, 2026
CVE-2026-126186 Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2 , ActiveStorage::Blob#open...
@cveNotify · Nov 10, 2026
Getting your video on the macOS lock screen needs temporal sub-layers, even empty ones https://museslabs.org/blog/macos-lock-screen/
@secharvester · Nov 10, 2026
CVE-2026-116790 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. P...
@cveNotify · Nov 10, 2026
CVE-2026-116789 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. P...
@cveNotify · Nov 10, 2026
CVE-2026-116788 FreeSWITCH is an open-source software telecommunications platform. Before version 1.11.2, an integer underflow in switch_xml_decode() can cause an undersized heap allocation when an XM...
@cveNotify · Nov 10, 2026
Swarm Desktop and bee-js Updates Targeted Wallet Keys On November 9, Swarm’s own release pipeline shipped two malicious updates: the npm package /bee-js 13.3.0 and Swarm Desktop 0.56.2. The desktop bu...
@topcybersecurity · Nov 10, 2026
CVE-2026-14542 The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation. This flaw can only be exploited after authenticating with an ad...
@cveNotify · Nov 10, 2026
CVE-2026-113970 A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1,...
@cveNotify · Nov 10, 2026
CVE-2026-116779 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. P...
@cveNotify · Nov 9, 2026
CVE-2026-112523 This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access user-...
@cveNotify · Nov 9, 2026
Hackers compromised Ethersphere's bee-js npm package and Swarm Desktop app to deliver crypto wallet-stealing malware. The malicious releases also install backdoors on Windows, macOS, and Linux. Both v...
@thehackernews · Nov 9, 2026
CVE-2026-86959 An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8,...
@cveNotify · Nov 9, 2026
CVE-2026-86957 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS...
@cveNotify · Nov 9, 2026
CVE-2026-86953 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacke...
@cveNotify · Nov 9, 2026
CVE-2026-86944 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to ca...
@cveNotify · Nov 9, 2026
CVE-2026-86922 A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously cr...
@cveNotify · Nov 9, 2026
CVE-2026-86921 A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker ma...
@cveNotify · Nov 9, 2026
CVE-2026-86919 A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tah...
@cveNotify · Nov 9, 2026

Other topics

CVE
Recent CVE identifiers and vulnerability disclosures aggregated from security feeds: new IDs, published advisories, and the vendors and products they affect.
Ransomware
Ransomware attacks, extortion group activity, victim disclosures and decryptor releases.
Phishing
Phishing campaigns, credential-harvesting kits, and social-engineering techniques used to compromise users and organizations.
Zero-Day
Zero-day vulnerabilities being actively exploited before a patch exists, and the fixes that follow.
Data Breach
Confirmed and reported data breaches: what was exposed, which organizations were affected, and how the incident came to light.
Exploit
Public exploit code, proof-of-concept releases, and technical exploitation write-ups for known vulnerabilities.