Security feed

24 October 2026

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Apple macOS Unspecified Vulnerability

Apple macOS Transparency, Consent, and Control (TCC) contains an unspecified permissions issue which may allow a malicious application to bypass privacy preferences. CISA required action: Apply updates per vendor instructions.

macOS CVE-2021-30713

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-30713

macOS

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-30713
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3509 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:36:18 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Apple macOS Unspecified Vulnerability

Apple macOS contains an unspecified logic issue in System Preferences that may allow a malicious application to bypass Gatekeeper checks. CISA required action: Apply updates per vendor instructions.

macOS CVE-2021-30657

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-30657

macOS

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-30657
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3507 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:36:17 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Apple macOS Out-of-Bounds Read Vulnerability

macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory. CISA required action: Apply updates per vendor instructions.

macOS CVE-2022-22674

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-22674

macOS

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-22674
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2647 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:06 GMT
Publisher date: Mon, 04 Apr 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Apple macOS Out-of-Bounds Write Vulnerability

macOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code with kernel privileges. CISA required action: Apply updates per vendor instructions.

macOS CVE-2022-22675

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-22675

macOS

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-22675
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2644 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:04 GMT
Publisher date: Mon, 04 Apr 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Apple macOS Use-After-Free Vulnerability

Apple macOS contains a use-after-free vulnerability that could allow for privilege escalation. CISA required action: Apply updates per vendor instructions.

macOS CVE-2019-8526

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-8526

macOS

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-8526
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1340 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:01:24 GMT
Publisher date: Mon, 17 Apr 2023 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Apple macOS Improper Authentication Vulnerability

Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials. CISA required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

macOS CVE-2026-65400

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2026-65400

macOS

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-65400
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #90 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:40:18 GMT
Publisher date: Tue, 18 Aug 2026 00:00:00 GMT

Read the original announcement