Apple macOS vulnerabilities

3,438 known vulnerabilities affecting apple/macos.

Total CVEs

3,438

CISA KEV

actively exploited

Public exploits

Exploited in wild

116

Severity breakdown

CRITICAL259HIGH1478MEDIUM1549LOW152

Vulnerabilities

SortPage 100 of 172

CVE-2022-26698P4HIGHCVSS 7.1≥ 11.0, < 11.6.6≥ 12.0.0, < 12.4+2 more2022-05-26

CVE-2022-26698 [HIGH] CWE-125 CVE-2022-26698: An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in Secu An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.

nvd

CVE-2021-30876P4HIGHCVSS 7.1≥ 11.0, < 11.6.1≥ 12.0, < 12.0.1+3 more2021-08-24

CVE-2021-30876 [HIGH] CWE-125 CVE-2021-30876: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mont An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.

nvd

CVE-2021-30879P4HIGHCVSS 7.1≥ 11.0, < 11.6.1≥ 12.0, < 12.0.1+3 more2021-08-24

CVE-2021-30879 [HIGH] CWE-125 CVE-2021-30879: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mont An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.

nvd

CVE-2021-30877P4HIGHCVSS 7.1≥ 11.0, < 11.6.1≥ 12.0, < 12.0.1+3 more2021-08-24

CVE-2021-30877 [HIGH] CWE-125 CVE-2021-30877: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mont An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.

nvd

CVE-2021-30880P4HIGHCVSS 7.1≥ 11.0, < 11.6.1≥ 12.0, < 12.0.1+3 more2021-08-24

CVE-2021-30880 [HIGH] CWE-125 CVE-2021-30880: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mont An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.

nvd

CVE-2020-36521P4HIGHCVSS 7.1fixed in 10.15.72022-09-23

CVE-2020-36521 [HIGH] CWE-125 CVE-2020-36521: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iCloud fo An out-of-bounds read was addressed with improved input validation. This issue is fixed in iCloud for Windows 11.4, iOS 14.0 and iPadOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9. Processing a maliciously crafted tiff file may lead to a denial-of-service or potentially disclose memory contents.

nvd

CVE-2023-40454P4HIGHCVSS 7.1≥ 12.0.0, < 12.7≥ 13.0, < 13.6+3 more2023-09-27

CVE-2023-40454 [HIGH] CVE-2023-40454: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to delete files for which it does not have permission.

nvd

CVE-2021-30676P4HIGHCVSS 7.1≥ 11.0, < 11.4≥ unspecified, < 11.4+1 more2021-09-08

CVE-2021-30676 [HIGH] CVE-2021-30676: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11. A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A local user may be able to cause unexpected system termination or read kernel memory.

nvd

CVE-2019-8545P4HIGHCVSS 7.1≥ unspecified, < macOS Mojave 10.14.42019-12-18

CVE-2019-8545 [HIGH] CWE-787 CVE-2019-8545: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 1 A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A local user may be able to cause unexpected system termination or read kernel memory.

nvd

CVE-2020-9929P4HIGHCVSS 7.1≥ unspecified, < macOS Catalina 10.15.62020-10-22

CVE-2020-9929 [HIGH] CWE-787 CVE-2020-9929: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to cause unexpected system termination or read kernel memory.

nvd

CVE-2020-9779P4HIGHCVSS 7.1≥ unspecified, < macOS Catalina 10.15.42020-10-22

CVE-2020-9779 [HIGH] CWE-125 CVE-2020-9779: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Cat An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory.

nvd

CVE-2020-27936P4HIGHCVSS 7.1≥ unspecified, < 11.12021-04-02

CVE-2020-27936 [HIGH] CWE-125 CVE-2020-27936: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A local user may be able to cause unexpected system termination or read kernel memory.

nvd

CVE-2020-9908P4HIGHCVSS 7.1≥ unspecified, < macOS Catalina 10.15.62020-10-22

CVE-2020-9908 [HIGH] CWE-125 CVE-2020-9908: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Cat An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to cause unexpected system termination or read kernel memory.

nvd

CVE-2021-30719P4HIGHCVSS 7.1≥ 11.0, < 11.4≥ unspecified, < 11.4+1 more2021-09-08

CVE-2021-30719 [HIGH] CWE-125 CVE-2021-30719: A local user may be able to cause unexpected system termination or read kernel memory. This issue is A local user may be able to cause unexpected system termination or read kernel memory. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. An out-of-bounds read issue was addressed by removing the vulnerable code.

nvd

CVE-2024-40805P4HIGHCVSS 7.1≥ 14.0, < 14.6fixed in 14.62024-07-29

CVE-2024-40805 [HIGH] CWE-276 CVE-2024-40805: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.6 and A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, watchOS 10.6. An app may be able to bypass Privacy preferences.

nvd

CVE-2025-43239P4HIGHCVSS 7.1fixed in 13.7.7≥ 14.0, < 14.7.7+3 more2025-07-30

CVE-2025-43239 [HIGH] CWE-125 CVE-2025-43239: An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in ma An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Processing a maliciously crafted file may lead to unexpected app termination.

nvd

CVE-2024-40821P4HIGHCVSS 7.1≥ 12.0, < 12.7.6≥ 13.0, < 13.6.8+4 more2024-07-29

CVE-2024-40821 [HIGH] CWE-281 CVE-2024-40821: An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Mon An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Third party app extensions may not receive the correct sandbox restrictions.

nvd

CVE-2025-43254P4HIGHCVSS 7.1≥ 13.0, < 13.7.7≥ 14.0, < 14.7.7+4 more2025-07-30

CVE-2025-43254 [HIGH] CWE-125 CVE-2025-43254: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Seq An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Processing a maliciously crafted file may lead to unexpected app termination.

nvd

CVE-2024-27825P4HIGHCVSS 7.1≥ 14.0, < 14.5fixed in 14.52024-05-14

CVE-2024-27825 [HIGH] CWE-277 CVE-2024-27825: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing res A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.5. An app may be able to bypass certain Privacy preferences.

nvd

CVE-2026-64692P4HIGHCVSS 7.1≥ 14.0, < 14.8.8≥ 15.0, < 15.7.8+4 more2026-07-27

CVE-2026-64692 [HIGH] CWE-125 CVE-2026-64692: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.6 a An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause a denial-of-service.

nvd

← Previous100 / 172Next →