boxscore/security
PRODUCT · referenceProducts · latest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

MacOS

Product reference — MacOS by Apple · sector: Operating Systems & Platforms. Cumulative disclosure record for this product across the archive.

Follow MacOS — Atom feed

Product totals

Disclosures & known-exploited
All-timeYTD
CVEs321276
KEV entries61
Rate & severity
KEV/100Med CVSSMed EPSSCHML
1.96.5.002667771675

KEV/100 = KEV entries ÷ CVEs × 100. Med CVSS / Med EPSS are medians over this product's disclosures. C/H/M/L = disclosures by CVSS severity band.

Monthly disclosures

Trend (by first-seen month, full archive): ▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▁▁▁▁▁▁▁▁▁▁▂▁▂▃█▂

Last 12 months (new CVEs by first-seen day)
MonthNew CVEs
2025-090
2025-100
2025-1110
2025-120
2026-010
2026-020
2026-0320
2026-040
2026-0519
2026-0649
2026-07159
2026-0829

Notable CVEs

Ranked by the published formula: KEV → EPSS → CVSS → CVE ID.

Notable (ranked)
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2021-3065799.3YES2021-11-03
CVE-2022-2267595.9YES2022-04-04
CVE-2021-3071393.3YES2021-11-03
CVE-2022-2267463.9YES2022-04-04
CVE-2026-654009.852.2CRITICALYES2026-08-06
CVE-2019-852650.4YES2023-04-17
CVE-2025-304579.864.3CRITICAL2025-03-31
CVE-2025-304269.864.1CRITICAL2025-03-31
CVE-2025-434338.863.1HIGH2025-11-04
CVE-2025-242329.861.7CRITICAL2025-03-31
CVE-2025-434384.361.2MEDIUM2025-11-04
CVE-2025-242339.859.3CRITICAL2025-03-31
CVE-2026-398689.158.7CRITICAL2026-06-29
CVE-2025-242659.856.9CRITICAL2025-03-31
CVE-2025-434414.356.7MEDIUM2025-11-04

Recent CVEs

Most recently seen
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2026-653496.62.0MEDIUM2026-08-17
CVE-2026-653476.514.3MEDIUM2026-08-17
CVE-2026-653437.530.7HIGH2026-08-17
CVE-2026-653306.514.3MEDIUM2026-08-17
CVE-2026-653395.03.1MEDIUM2026-08-17
CVE-2026-647885.44.2MEDIUM2026-08-17
CVE-2026-653415.46.4MEDIUM2026-08-17
CVE-2026-653354.310.4MEDIUM2026-08-17
CVE-2026-653384.310.4MEDIUM2026-08-17
CVE-2026-653364.310.4MEDIUM2026-08-17
CVE-2026-647844.310.4MEDIUM2026-08-17
CVE-2026-653344.310.4MEDIUM2026-08-17
CVE-2026-653334.310.4MEDIUM2026-08-17
CVE-2026-647876.511.1MEDIUM2026-08-17
CVE-2026-653324.310.4MEDIUM2026-08-17

KEV entries

CISA Known Exploited Vulnerabilities (newest addition first)
CVEKEV addedCVSSEPSS %ileSeverity
CVE-2026-654002026-08-189.852.2CRITICAL
CVE-2019-85262023-04-1750.4
CVE-2022-226742022-04-0463.9
CVE-2022-226752022-04-0495.9
CVE-2021-306572021-11-0399.3
CVE-2021-307132021-11-0393.3

Related

Vendor: Apple — all products and the full vendor record.

Methodology

A product is a (vendor, product) pair as named in the affected-product data. Rate statistics are arithmetic over published figures. Counts key to first-seen day. Raw counts are not comparable across products; this is a reference page assembled from the public record, not a ranking by our judgment.

Sources. CVE Program (cvelistV5), NVD (NIST), CISA KEV, FIRST EPSS.