Apple macOS vulnerabilities

3,438 known vulnerabilities affecting apple/macos.

Total CVEs

3,438

CISA KEV

actively exploited

Public exploits

Exploited in wild

116

Severity breakdown

CRITICAL259HIGH1478MEDIUM1549LOW152

Vulnerabilities

SortPage 103 of 172

CVE-2019-8576P4HIGHCVSS 7.1≥ unspecified, < macOS Mojave 10.14.52019-12-18

CVE-2019-8576 [HIGH] CWE-125 CVE-2019-8576: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local user may be able to cause unexpected system termination or read kernel memory.

nvd

CVE-2020-3912P4HIGHCVSS 7.1≥ unspecified, < macOS Catalina 10.15.42020-04-01

CVE-2020-3912 [HIGH] CWE-125 CVE-2020-3912: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Cat An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory.

nvd

CVE-2020-3908P4HIGHCVSS 7.1≥ unspecified, < macOS Catalina 10.15.42020-04-01

CVE-2020-3908 [HIGH] CWE-125 CVE-2020-3908: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Cat An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory.

nvd

CVE-2024-44245P4HIGHCVSS 7.1≥ 14.0, < 14.7.2≥ 15.0, < 15.2+2 more2024-12-12

CVE-2024-44245 [HIGH] CWE-787 CVE-2024-44245: The issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18 The issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, visionOS 2.2. An app may be able to cause unexpected system termination or corrupt kernel memory.

nvd

CVE-2019-8759P4HIGHCVSS 7.1≥ unspecified, < 10.152020-10-27

CVE-2019-8759 [HIGH] CWE-125 CVE-2019-8759: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Cata An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. A local user may be able to cause unexpected system termination or read kernel memory.

nvd

CVE-2023-32420P4HIGHCVSS 7.1≥ 13.0, < 13.4≥ unspecified, < 13.42023-06-23

CVE-2023-32420 [HIGH] CWE-125 CVE-2023-32420: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to cause unexpected system termination or read kernel memory.

nvd

CVE-2020-9930P4HIGHCVSS 7.1≥ unspecified, < 10.152021-04-02

CVE-2020-9930 [HIGH] CWE-125 CVE-2020-9930: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Cat An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. A local user may be able to cause unexpected system termination or read kernel memory.

nvd

CVE-2024-27791P4HIGHCVSS 7.1≥ 12.0, < 12.7.3≥ 13.0, < 13.6.4+4 more2024-04-24

CVE-2024-27791 [HIGH] CWE-119 CVE-2024-27791: The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, i The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3. An app may be able to corrupt coprocessor memory.

nvd

CVE-2023-32436P4HIGHCVSS 7.1fixed in 13.3≥ unspecified, < 13.32024-01-10

CVE-2023-32436 [HIGH] CWE-119 CVE-2023-32436: The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3. An a The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.

nvd

CVE-2022-48578P4HIGHCVSS 7.1fixed in 12.5≥ unspecified, < 12.52024-06-10

CVE-2022-48578 [HIGH] CWE-125 CVE-2022-48578: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mont An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5. Processing an AppleScript may result in unexpected termination or disclosure of process memory.

nvd

CVE-2023-41988P4MEDIUMCVSS 6.8≥ 14.0, < 14.1≥ unspecified, < 14.12023-10-25

CVE-2023-41988 [MEDIUM] CWE-200 CVE-2023-41988: This issue was addressed by restricting options offered on a locked device. This issue is fixed in m This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data.

nvd

CVE-2023-23512P4MEDIUMCVSS 6.5≥ 13.0, < 13.2≥ unspecified, < 13.22023-02-27

CVE-2023-23512 [MEDIUM] CVE-2023-23512: The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.3, tvOS 1 The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Visiting a website may lead to an app denial-of-service.

nvd

CVE-2023-32362P4MEDIUMCVSS 6.5≥ 13.0, < 13.3≥ unspecified, < 13.32023-09-06

CVE-2023-32362 [MEDIUM] CVE-2023-32362: Error handling was changed to not reveal sensitive information. This issue is fixed in macOS Ventura Error handling was changed to not reveal sensitive information. This issue is fixed in macOS Ventura 13.3. A website may be able to track sensitive user information.

nvd

CVE-2021-30716P4MEDIUMCVSS 5.9≥ 11.0, < 11.4≥ unspecified, < 11.4+1 more2021-09-08

CVE-2021-30716 [MEDIUM] CVE-2021-30716: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11. A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. An attacker in a privileged network position may be able to perform denial of service.

nvd

CVE-2023-42914P4MEDIUMCVSS 6.3≥ 12.0.0, < 12.7.2≥ 13.0, < 13.6.3+4 more2023-12-12

CVE-2023-42914 [MEDIUM] CVE-2023-42914: The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, macOS Ventura 13.6.3, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Monterey 12.7.2. An app may be able to break out of its sandbox.

nvd

CVE-2021-30689P4MEDIUMCVSS 6.1≥ 11.0, < 11.4≥ unspecified, < 11.4+3 more2021-09-08

CVE-2021-30689 [MEDIUM] CWE-79 CVE-2021-30689: A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14 A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site scripting.

nvd

CVE-2020-3884P4MEDIUMCVSS 6.1≥ unspecified, < macOS Catalina 10.15.42020-04-01

CVE-2020-3884 [MEDIUM] CWE-20 CVE-2020-3884: An injection issue was addressed with improved validation. This issue is fixed in macOS Catalina 10. An injection issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. A remote attacker may be able to cause arbitrary javascript code execution.

nvd

CVE-2021-30744P4MEDIUMCVSS 6.1≥ 11.0.1, < 11.4≥ unspecified, < 11.4+3 more2021-09-08

CVE-2021-30744 [MEDIUM] CWE-79 CVE-2021-30744: Description: A cross-origin issue with iframe elements was addressed with improved tracking of secur Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site scripting.

nvd

CVE-2021-1826P4MEDIUMCVSS 6.1≥ 11.0, < 11.3≥ unspecified, < 11.32021-09-08

CVE-2021-1826 [MEDIUM] CWE-79 CVE-2021-1826: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.3, i A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to universal cross site scripting.

nvd

CVE-2021-30855P4MEDIUMCVSS 5.5fixed in 11.6≥ unspecified, < 11.6+4 more2021-08-24

CVE-2021-30855 [MEDIUM] CWE-59 CVE-2021-30855: A validation issue existed in the handling of symlinks. This issue was addressed with improved valid A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, iOS 15 and iPadOS 15, watchOS 8, macOS Big Sur 11.6. An application may be able to access restricted files.

nvd

← Previous103 / 172Next →