The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.8.4. It is, therefore, affected by multiple vulnerabilities:

  - A race condition was addressed with improved handling of symbolic links. This issue is fixed in iOS 18.7.5     and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3,     visionOS 26.3. A shortcut may be able to bypass sandbox restrictions. (CVE-2026-20677)

  - A path handling issue was addressed with improved logic. This issue is fixed in Safari 26.3, iOS 18.7.5     and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, macOS Tahoe 26.3,     visionOS 26.3. A remote user may be able to write arbitrary files. (CVE-2026-20660)

  - An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26     and iPadOS 26, macOS Sonoma 14.8.2, macOS Sonoma 14.8.4, macOS Tahoe 26. Processing a maliciously crafted     media file may lead to unexpected app termination or corrupt process memory. (CVE-2025-43338)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.4, macOS     Sonoma 14.8.4, macOS Tahoe 26.1. An app may be able to cause unexpected system termination or corrupt     process memory. (CVE-2025-43402)

  - An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia     15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26. An app may be able to access sensitive user data.
    (CVE-2025-43403)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.4. It is, therefore, affected by multiple vulnerabilities:

  - A logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. A user may be     able to elevate privileges. (CVE-2026-20631)

  - When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol     redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the     bearer token to the new target host. (CVE-2025-14524)

  - An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30     days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then     are repeated without delays until it succeeds. This issue affects Apache HTTP Server: from 2.4.30 before     2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue. (CVE-2025-55753)

  - Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not     mod_cgi) passes the shell-escaped query string to #exec cmd=... directives. This issue affects Apache     HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
    (CVE-2025-58098)

  - Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes     On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and     malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes the issue.
    (CVE-2025-59775)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.7.4. It is, therefore, affected by multiple vulnerabilities:

  - A race condition was addressed with improved handling of symbolic links. This issue is fixed in iOS 18.7.5     and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3,     visionOS 26.3. A shortcut may be able to bypass sandbox restrictions. (CVE-2026-20677)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.4, macOS     Sonoma 14.8.4, macOS Tahoe 26.1. An app may be able to cause unexpected system termination or corrupt     process memory. (CVE-2025-43402)

  - An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia     15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26. An app may be able to access sensitive user data.
    (CVE-2025-43403)

  - A path handling issue was addressed with improved logic. This issue is fixed in macOS Sequoia 15.7.4,     macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to access user-sensitive data. (CVE-2025-43417)

  - This issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4,     macOS Sonoma 14.8.4, macOS Tahoe 26.1. An app may be able to access sensitive user data. (CVE-2025-43473)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
298658	macOS 14.x < 14.8.4 Multiple Vulnerabilities (126350)	Nessus	MacOS X Local Security Checks	2/11/2026	8/21/2026	critical
303481	macOS 26.x < 26.4 Multiple Vulnerabilities (126794)	Nessus	MacOS X Local Security Checks	3/24/2026	8/21/2026	high
298657	macOS 15.x < 15.7.4 Multiple Vulnerabilities (126349)	Nessus	MacOS X Local Security Checks	2/11/2026	8/21/2026	critical

Detections

Analytics

Plugins Search

critical

high

critical