NCSC-2026-0214 [1.00] [M/H] Vulnerabilities fixed in Apple MacOS
Apple has fixed multiple vulnerabilities in macOS Tahoe. The vulnerabilities included out-of-bounds access, use-after-free, memory handling errors, type confusion, double free, stack overflow, insufficient input validation, and race conditions. These could lead to unexpected crashes of processes, memory corruption, unauthorized access to sensitive data such as clipboard content and kernel information, and bypassing sandbox restrictions. Malicious actors can exploit these vulnerabilities by providing specially crafted web content or applications that trigger the mentioned errors, resulting in process instability, system termination, or data leaks. The vulnerabilities have been resolved through improved bounds checking, input validation, memory management, state management, and synchronization.
CSIRTS triage
- What
- Multiple vulnerabilities can lead to crashes, memory corruption, and unauthorized access to sensitive data.
- Who is affected
- Users of macOS devices.
- Urgency
- Remediation is urgent due to the potential for exploitation and data leaks.
- Action
- Update to the latest version of macOS.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch macOS
Get an email when a new macOS advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://advisories.ncsc.nl/advisory?id=NCSC-2026-0214
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-289790.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 16% of all scored CVEs.
- Low exploitation riskCVE-2026-398680.37% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 29% of all scored CVEs.
- Low exploitation riskCVE-2026-398720.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 9% of all scored CVEs.
- Low exploitation riskCVE-2026-436630.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 9% of all scored CVEs.
- Low exploitation riskCVE-2026-436760.26% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 17% of all scored CVEs.
- Low exploitation riskCVE-2026-436990.24% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 15% of all scored CVEs.
- Low exploitation riskCVE-2026-437000.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all scored CVEs.
- Low exploitation riskCVE-2026-437010.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all scored CVEs.
- Low exploitation riskCVE-2026-437030.22% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 13% of all scored CVEs.
- Low exploitation riskCVE-2026-437040.22% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 12% of all scored CVEs.
Referenced CVEs
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownApple Products Multiple Vulnerabilitieshkcert
- unknownNCSC-2026-0215 [1.00] [M/H] Vulnerabilities fixed in Apple iOS and iPadOSncsc-nl
- unknownMultiple vulnerabilities in Apple products (June 30, 2026)cert-fr-avis
- mediumCVE-2026-43746: A use-after-free issue was addressed with improved memory management. This issue is fixed in S…nvd
- mediumCVE-2026-43745: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed…nvd
- mediumCVE-2026-43743: A race condition was addressed with improved state handling. This issue is fixed in iOS 26.5.2…nvd
- mediumCVE-2026-43742: A use-after-free issue was addressed with improved memory management. This issue is fixed in S…nvd
- mediumCVE-2026-43740: The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, i…nvd
- highCVE-2026-43735: The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2…nvd
- mediumCVE-2026-43734: A use-after-free issue was addressed with improved memory management. This issue is fixed in S…nvd
- mediumCVE-2026-43732: A path handling issue was addressed with improved validation. This issue is fixed in Safari 26…nvd
- highCVE-2026-43731: A use-after-free issue was addressed with improved memory management. This issue is fixed in S…nvd
Recent advisories for Apple MacOS
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- criticalexploitedCVE-2025-43300: Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerabilitycisa-kev · 2025-08-21
- criticalexploitedCVE-2023-41064: Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerabilitycisa-kev · 2023-09-11
- criticalexploitedCVE-2019-8526: Apple macOS Use-After-Free Vulnerabilitycisa-kev · 2023-04-17
- criticalexploitedCVE-2023-28206: Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerabilitycisa-kev · 2023-04-10
- criticalexploitedCVE-2021-30900: Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerabilitycisa-kev · 2023-03-30
- criticalexploitedCVE-2022-32917: Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerabilitycisa-kev · 2022-09-14
More from NCSC-NL Advisories
- unknownNCSC-2026-0223 [1.00] [M/H] Vulnerabilities fixed in BeyondTrust Remote Support and Privileged Remote Access2026-07-10
- unknownNCSC-2026-0222 [1.00] [M/H] Vulnerabilities fixed in GitLab Enterprise Edition and Community Edition2026-07-10
- unknownNCSC-2026-0221 [1.00] [M/H] Vulnerabilities fixed in UniFi products from Ubiquiti Networks2026-07-07
- unknownNCSC-2026-0220 [1.00] [M/H] Vulnerabilities fixed in Rancher by Rancher Labs2026-07-03
- unknownNCSC-2026-0219 [1.00] [M/H] Vulnerabilities fixed in GitHub Enterprise Server2026-07-03