Operating Systems & WebKit6 Active Advisories Tracked

Apple Vulnerability & Threat Radar

Security advisories for Apple macOS, iOS, iPadOS, and WebKit browser engine zero-day vulnerabilities exploited in targeted attacks.

Recommended Protective Controls for Apple Environments

Deploy continuous behavioral telemetry and micro-segmentation boundaries to shield Apple assets.

Evaluate Recommended Defenses →

Recent Disclosures & Advisories

2 Critical Severity
NVD
1d ago

CVE-2026-111923 - Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that all

Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers... This is a high threat mapped to CVE-2026-111923; security leaders should validate exposure, prioritize patching, and verify compensat...

CISA KEV
3d ago

Fortinet Multiple Products Path Traversal Vulnerability

FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands. This is a critical threat mapped to CVE-2025-61624; security leade...

NVD
3d ago

CVE-2026-99999 - In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing che

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of mischief. This is a critical threat mapped to CVE-2026-99...

NVD
3d ago

CVE-2026-98432 - In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. This is a high threat mapped to CVE-2026-98432; security leaders shou...

Share Intel:Share on XLinkedIn

Never Miss a Critical Apple Patch

Subscribe to the SecOps Pulse executive threat briefing for early warnings on unpatched vulnerabilities.

Weekly Executive Briefing

Top critical & high-severity threats, every week.

No spam. Unsubscribe anytime. SecOpsPulse may include sponsored security tool recommendations.