CyberSIXT Search
Apple product

macOS

← All Apple products

No CISA KEV deadline is open. CISA last added a macOS CVE on 18 Aug.

Tracked since 29 Jul · latest article Mon 5 Oct · RSS

Added to KEV · 90 days
1
of 6 in the full CISA catalogue · all time
High exploit odds · current
0
EPSS top 5%, not in KEV
Articles · 7 days
0
none this week

Exploited, by due date

CSV download
CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2026-65400macOS18 AugDeadline passed 21 Aug15 articles
CVE-2019-8526not in CyberSIXT coveragemacOS17 Apr 2023Deadline passed 8 May 2023
CVE-2022-22674not in CyberSIXT coveragemacOS4 Apr 2022Deadline passed 25 Apr 2022
CVE-2022-22675not in CyberSIXT coveragemacOS4 Apr 2022Deadline passed 25 Apr 2022
CVE-2021-30657not in CyberSIXT coveragemacOS3 Nov 2021Deadline passed 17 Nov 2021
CVE-2021-30713not in CyberSIXT coveragemacOS3 Nov 2021Deadline passed 17 Nov 2021

Coverage

23 articles · all timeFull timeline

23 articles from 8 outlets since 29 Jul; the latest 22 days ago.

macOS: coverage over time23 articles from 8 outlets. First report 29 Jul by SANS ISC. Busiest week: 10 articles, week of 17 Aug. 0 in the last 7 days. macOS: coverage over time23 articles from 8 outlets. First report 29 Jul by SANS ISC. Busiest week: 10 articles, week of 17 Aug. 0 in the last 7 days.
  • Article
  • First report
  • Official notice
Show as table
macOS: articles
Published (UTC)OutletHeadline
Mon 5 Oct · 01:12 UTCSecurityOnlinePublic Exploit Targets Critical macOS HFS+ Kernel Flaw
Tue 29 Sep · 15:00 UTCSecurityOnlinemacOS SMB Flaw Exposes Macs to Kernel Panics via Malicious Shares
Mon 28 Sep · 01:22 UTCSecurityOnlineApple Patches macOS Flaw Allowing Apps to Gain Root Access
Thu 24 Sep · 02:30 UTCSecurityOnlinemacOS Flaw Lets Sandboxed Apps Gain Root Using Public PoC
Wed 16 Sep · 21:58 UTCthezdi.comApple Patches 273 Flaws as Screen Sharing Bug Faces Active Attacks
Mon 14 Sep · 19:24 UTCSANS ISCApple Patches Record 261 Flaws Across New Operating Systems
Thu 3 Sep · 03:12 UTCSecurityOnlineCVE-2026-43748 (CVSS 9.8): Apple ANE Kernel Bug, PoC Out
Wed 19 Aug · 14:02 UTCSecurityOnlineTelegram seeks .gram domain as critical zero day exploits surge
Wed 19 Aug · 14:01 UTCSecurityOnlineUrgent Patches Address Flaws in Microsoft, Apple, IBM Db2
Wed 19 Aug · 14:00 UTCSecurityOnlineGoogle patches Android ContactsProvider2 SQLi high severity bug
Wed 19 Aug · 11:01 UTCSecurityWeekCISA warns of active exploits in Microsoft, VMware, Apple bugs
Wed 19 Aug · 08:01 UTCSecurity AffairsU.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog
Wed 19 Aug · 05:02 UTCSecurityOnlineCISA KEV Adds Four Exploited Flaws in SharePoint, vCenter
Wed 19 Aug · 00:03 UTCCISACISA flags macOS Screen Sharing bug CVE-2026-65400 as exploited
Tue 18 Aug · 19:44 UTCCISACISA Adds CVE-2026-65400 to Known Exploited Vulnerabilities Catalogue
Mon 17 Aug · 11:51 UTCMalwarebytesUpdate your Mac: Screen Sharing vulnerability exploited in the wild
Mon 17 Aug · 09:31 UTCSecurityWeekApple fixes macOS Screen Sharing bug exploited for crypto mining
Sat 15 Aug · 09:46 UTCSecurity AffairsHackers exploit CVE-2026-65400 to mine Monero on macOS
Fri 14 Aug · 18:45 UTCArs TechnicaApple patches CVE-2026-65400 macOS flaw after crypto miner attacks
Fri 7 Aug · 09:40 UTCSecurityWeekMicrosoft, Apple issue patches for critical RCE and auth bypass
Mon 3 Aug · 15:23 UTCSecurityOnlineApple patches CUPS flaw CVE‑2026‑39875 enabling root access
Thu 30 Jul · 15:50 UTCthezdi.comApple July 2026 Patch Fixes 210 Flaws Including ImageIO Bug
Wed 29 Jul · 09:31 UTCSANS ISCApple patches 187 flaws in macOS 14, 15 ahead of iOS 27 launch

Who reported 8 outlets, last 12 months

  • SecurityOnline10
  • SecurityWeek3
  • SANS ISC2
  • thezdi.com2
  • Security Affairs2
  • CISA2
  • Ars Technica1
  • Malwarebytes1
  1. Public Exploit Targets Critical macOS HFS+ Kernel FlawSecurityOnline
  2. macOS SMB Flaw Exposes Macs to Kernel Panics via Malicious SharesSecurityOnline
  3. Apple Patches macOS Flaw Allowing Apps to Gain Root AccessSecurityOnline
  4. macOS Flaw Lets Sandboxed Apps Gain Root Using Public PoCSecurityOnline
  5. Apple Patches 273 Flaws as Screen Sharing Bug Faces Active Attacksthezdi.com
  6. Apple Patches Record 261 Flaws Across New Operating SystemsSANS ISC
  7. CVE-2026-43748 (CVSS 9.8): Apple ANE Kernel Bug, PoC OutSecurityOnline
  8. Telegram seeks .gram domain as critical zero day exploits surgeSecurityOnline
  9. Urgent Patches Address Flaws in Microsoft, Apple, IBM Db2SecurityOnline
  10. Google patches Android ContactsProvider2 SQLi high severity bugSecurityOnline

All CVEs in coverage

13
CVE-2026-65400Apple macOS Improper Authentication VulnerabilityCVSS9.8CriticalExploited1.7%EPSS15articles
CVE-2026-64767Apple macOS vulnerabilityCVSS9.8Critical–Not in KEV0.8%EPSS1article
CVE-2026-43682Apple macOS vulnerabilityCVSS9.8Critical–Not in KEV0.7%EPSS1article
CVE-2026-43790Apple macOS vulnerabilityCVSSUnrated–Not in KEV0.7%EPSS1article
CVE-2026-43748Apple macOS vulnerabilityCVSS9.8Critical–Not in KEV0.6%EPSS1article
CVE-2026-84543Apple macOS vulnerabilityCVSS7.5High–Not in KEV0.4%EPSS1article
CVE-2026-28914Apple macOS vulnerabilityCVSS5.5Medium–Not in KEV0.2%EPSS1article
CVE-2026-84506Apple macOS vulnerabilityCVSSUnrated–Not in KEV0.2%EPSS1article
CVE-2026-28900Apple macOS vulnerabilityCVSS5.5Medium–Not in KEV0.2%EPSS1article
CVE-2026-28849Apple macOS vulnerabilityCVSS5.5Medium–Not in KEV0.2%EPSS1article
CVE-2026-43786Apple macOS vulnerabilityCVSS7.8High–Not in KEV0.1%EPSS1article
CVE-2026-39875Apple macOS vulnerabilityCVSS7.8High–Not in KEV0.1%EPSS1article
1 more CVEs
CVE-2026-43783Apple macOS vulnerabilityCVSS7.8High–Not in KEV0.1%EPSS1article
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device