Class familyApple · macOS
Apple iOS and macOS authentication bypass flaws, 2022–2026
16 macOS CVEs with CWE-287 weaknesses, 1 Nov 2022 to 26 Oct 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2022’22
2023’23
3 2024’24
4 2025’25
8 2026’26
In CISA KEVNot in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2022-32935 | 1 Nov 2022 | A lock screen issue was addressed with improved state management | Grouped by weakness | 9.7 |
| CVE-2023-42935 | 23 Jan 2024 | An authentication issue was addressed with improved state management | Grouped by weakness | 6.5 |
| CVE-2024-23251 | 10 Jun 2024 | An authentication issue was addressed with improved state management | Grouped by weakness | 9.5 |
| CVE-2024-40794 | 29 Jul 2024 | This issue was addressed through improved state management | Grouped by weakness | 17.2 |
| CVE-2025-30430 | 31 Mar 2025 | This issue was addressed through improved state management | Grouped by weakness | 20.4 |
| CVE-2025-31264 | 29 May 2025 | An authentication issue was addressed with improved state management | Grouped by weakness | 6.9 |
| CVE-2025-31271 | 15 Sep 2025 | This issue was addressed through improved state management | Grouped by weakness | 12.1 |
| CVE-2025-43281 | 15 Oct 2025 | The issue was addressed with improved authentication | Grouped by weakness | 6.2 |
| CVE-2026-43766 | 27 Jul 2026 | An authorization issue was addressed with improved state management | Grouped by weakness | 5.3 |
| CVE-2026-64745 | 27 Jul 2026 | This issue was addressed with additional restrictions on the lock screen | Grouped by weakness | 3.0 |
| CVE-2026-65400KEV | 6 Aug 2026 | Apple macOS Improper Authentication Vulnerability | Grouped by weakness | 75.4 |
| CVE-2026-20683 | 14 Sep 2026 | An authentication issue was addressed with improved state management | Grouped by weakness | 6.7 |
| CVE-2026-65375 | 14 Sep 2026 | The issue was addressed with improved authentication | Grouped by weakness | 15.5 |
| CVE-2026-84606 | 14 Sep 2026 | A privacy issue was addressed with improved handling of identifiers | Grouped by weakness | 12.2 |
| CVE-2026-86868 | 20 Oct 2026 | An authentication issue was addressed with improved state management | Grouped by weakness | 16.5 |
| CVE-2026-112427 | 26 Oct 2026 | An authentication issue was addressed with improved state management | Grouped by weakness | 16.2 |