The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.6.2. It is, therefore, affected by multiple vulnerabilities:

  - An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and     iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to arbitrary code execution.
    (CVE-2026-65346)

  - A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari     26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing     maliciously crafted web content may lead to memory corruption. (CVE-2026-43794)

  - The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10     and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web     content may lead to an unexpected Safari crash. (CVE-2026-43795, CVE-2026-65338)

  - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari     26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing     maliciously crafted web content may lead to an unexpected process crash. (CVE-2026-64715)

  - The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS     18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Visiting a maliciously crafted website may leak     sensitive data. (CVE-2026-64778)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

Detections

Analytics

macOS 26.x < 26.6.2 Multiple Vulnerabilities (148281)

high Nessus Plugin ID 335968

Version 1.2