Apple macOS vulnerabilities

3,438 known vulnerabilities affecting apple/macos.

Total CVEs

3,438

CISA KEV

actively exploited

Public exploits

Exploited in wild

116

Severity breakdown

CRITICAL204HIGH1438MEDIUM1494LOW151UNKNOWN151

Vulnerabilities

SortPage 1 of 172

CVE-2025-43300P1CRITICALCVSS 10.0KEVPoC≥ 13.0, < 13.7.8≥ 14.0, < 14.7.8+1 more2025-08-21

CVE-2025-43300 [CRITICAL] CWE-787 CVE-2025-43300: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious image file may result in memory corruption. Apple is awa

nvd

CVE-2025-24085P1CRITICALCVSS 10.0KEVPoC≥ 13.0, < 13.7.5≥ 14.0, < 14.7.5+4 more2025-01-27

CVE-2025-24085 [CRITICAL] CWE-416 CVE-2025-24085: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18. A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have be

nvd

CVE-2023-32434P1HIGHCVSS 7.8KEVPoC≥ 11.0, < 11.7.8≥ 12.0.0, < 12.6.7+4 more2023-06-23

CVE-2023-32434 [HIGH] CWE-190 CVE-2023-32434: An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5 An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this i

nvd

CVE-2023-28205P1HIGHCVSS 8.8KEVPoCfixed in 13.3.1≥ unspecified, < 13.32023-04-10

CVE-2023-28205 [HIGH] CWE-416 CVE-2023-28205: A use after free issue was addressed with improved memory management. This issue is fixed in Safari A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

nvd

CVE-2023-41993P1HIGHCVSS 8.8KEVPoCfixed in 14.0≥ unspecified, < 142023-09-21

CVE-2023-41993 [HIGH] CWE-754 CVE-2023-41993: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

nvd

CVE-2025-14174P1HIGHCVSS 8.8KEVPoCfixed in 26.2fixed in 26.32025-12-12

CVE-2025-14174 [HIGH] CWE-787 CVE-2025-14174: Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remot Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

nvd

CVE-2025-24201P1CRITICALCVSS 10.0KEVPoC≥ 15.0, < 15.3.2fixed in 15.3.22025-03-11

CVE-2025-24201 [CRITICAL] CWE-787 CVE-2025-24201: An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. Thi An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4. Maliciously crafted web content may be able to break ou

nvd

CVE-2021-30657P1MEDIUMCVSS 5.5KEVPoC≥ 11.0, < 11.3≥ unspecified, < 11.3+1 more2021-09-08

CVE-2021-30657 [MEDIUM] CWE-862 CVE-2021-30657: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11. A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited..

nvd

CVE-2022-22620P1HIGHCVSS 8.8KEVPoC≥ 12.0.0, < 12.2.1≥ unspecified, < 12.2+1 more2022-03-18

CVE-2022-22620 [HIGH] CWE-416 CVE-2022-22620: A use after free issue was addressed with improved memory management. This issue is fixed in macOS M A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (v. 16612.4.9.1.8 and 15612.4.9.1.8). Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

nvd

CVE-2025-43529P1HIGHCVSS 8.8KEVPoC≥ 26.0, < 26.22025-12-17

CVE-2025-43529 [HIGH] CVE-2025-43529: A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been expl

nvd

CVE-2023-28206P1HIGHCVSS 8.6KEVPoCfixed in 11.7.6≥ 12.0, < 12.6.5+4 more2023-04-10

CVE-2023-28206 [HIGH] CWE-787 CVE-2023-28206: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in ma An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been ac

nvd

CVE-2021-30858P1HIGHCVSS 8.8KEVPoCfixed in 11.6≥ unspecified, < 11.62021-08-24

CVE-2021-30858 [HIGH] CWE-416 CVE-2021-30858: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14. A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

nvd

CVE-2024-23222P1HIGHCVSS 8.8KEVPoC≥ 12.0, < 12.7.3≥ 13.0, < 13.6.4+4 more2024-01-23

CVE-2024-23222 [HIGH] CWE-843 CVE-2024-23222: A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 1 A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, visionOS 1.0.2. Processing maliciously crafted web content may lead to arbitrary code execution.

nvd

CVE-2024-44308P1HIGHCVSS 8.8KEVPoC≥ 15.0, < 15.1.1fixed in 15.1.12024-11-20

CVE-2024-44308 [HIGH] CVE-2024-44308: The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and i The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac sys

nvd

CVE-2025-6558P1HIGHCVSS 8.8KEVPoCfixed in 15.62025-07-15

CVE-2025-6558 [HIGH] CWE-20 CVE-2025-6558: Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvd

CVE-2021-30807P1HIGHCVSS 7.8KEVPoCfixed in 11.5.1≥ unspecified, < 11.5+2 more2021-10-19

CVE-2021-30807 [HIGH] CWE-787 CVE-2021-30807: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.

nvd

CVE-2020-27930P1HIGHCVSS 7.8KEVPoC≥ 11.0, < 11.0.1≥ unspecified, < 11.0+5 more2020-12-08

CVE-2020-27930 [HIGH] CWE-787 CVE-2020-27930: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. Processin

nvd

CVE-2023-41064P1HIGHCVSS 7.8KEVPoC≥ 11.0, < 11.7.10≥ 12.0, < 12.6.9+4 more2023-09-07

CVE-2023-41064 [HIGH] CWE-120 CVE-2023-41064: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 and iPadOS 15.7.9, macOS Big Sur 11.7.10. Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been

nvd

CVE-2019-8605P1HIGHCVSS 7.8KEVPoC≥ unspecified, < macOS Mojave 10.14.52019-12-18

CVE-2019-8605 [HIGH] CWE-416 CVE-2019-8605: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12. A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

nvd

CVE-2021-30883P1HIGHCVSS 7.8KEVPoC≥ 11.0, < 11.6.1v12.0+4 more2021-08-24

CVE-2021-30883 [HIGH] CWE-787 CVE-2021-30883: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have b

nvd

1 / 172Next →