Apple macOS vulnerabilities

3,135 known vulnerabilities affecting apple/macos.

Total CVEs
3,135
CISA KEV
75
actively exploited
Public exploits
44
Exploited in wild
61
Severity breakdown
CRITICAL203HIGH1362MEDIUM1421LOW149

Vulnerabilities

Page 105 of 157
CVE-2022-22614HIGHCVSS 7.8≥ 11.6, < 11.6.5≥ 12.0, ≤ 12.3+4 more2022-03-18
CVE-2022-22614 [HIGH] CWE-416 CVE-2022-22614: A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15 A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2022-22664HIGHCVSS 7.8fixed in 12.3≥ unspecified, < 12.3+2 more2022-03-18
CVE-2022-22664 [HIGH] CWE-125 CVE-2022-22664: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
nvd
CVE-2022-22615HIGHCVSS 7.8≥ 11.6, < 11.6.5≥ 12.0, ≤ 12.3+4 more2022-03-18
CVE-2022-22615 [HIGH] CWE-416 CVE-2022-22615: A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15 A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2022-22631HIGHCVSS 7.8fixed in 11.6.5≥ 12.0.0, < 12.3+4 more2022-03-18
CVE-2022-22631 [HIGH] CWE-787 CVE-2022-22631: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to gain elevated privileges.
nvd
CVE-2022-22626HIGHCVSS 7.1fixed in 11.6.5≥ 12.0.0, < 12.3+4 more2022-03-18
CVE-2022-22626 [HIGH] CWE-125 CVE-2022-22626: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.
nvd
CVE-2022-22578HIGHCVSS 7.8fixed in 12.2≥ unspecified, < 12.22022-03-18
CVE-2022-22578 [HIGH] CVE-2022-22578: A logic issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and A logic issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS Monterey 12.2. A malicious application may be able to gain root privileges.
nvd
CVE-2022-22585HIGHCVSS 7.5fixed in 11.6.3≥ 12.0.0, < 12.2+2 more2022-03-18
CVE-2022-22585 [HIGH] CWE-59 CVE-2022-22585: An issue existed within the path validation logic for symlinks. This issue was addressed with improv An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access a user's files.
nvd
CVE-2021-30771HIGHCVSS 7.8≥ 11.0, < 11.4≥ unspecified, < 11.42022-03-18
CVE-2021-30771 [HIGH] CWE-787 CVE-2021-30771: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Bi An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6, watchOS 7.5, tvOS 14.6. Processing a maliciously crafted font file may lead to arbitrary code execution.
nvd
CVE-2022-22625HIGHCVSS 7.1fixed in 11.6.5≥ 12.0.0, < 12.3+4 more2022-03-18
CVE-2022-22625 [HIGH] CWE-125 CVE-2022-22625: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.
nvd
CVE-2022-22612HIGHCVSS 7.8≥ 12.0, < 12.3≥ unspecified, < 12.32022-03-18
CVE-2022-22612 [HIGH] CWE-787 CVE-2022-22612: A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to heap corruption.
nvd
CVE-2022-22609HIGHCVSS 7.5≥ 12.0, < 12.3≥ unspecified, < 12.32022-03-18
CVE-2022-22609 [HIGH] CVE-2022-22609: The issue was addressed with additional permissions checks. This issue is fixed in tvOS 15.4, iOS 15 The issue was addressed with additional permissions checks. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. A malicious application may be able to read other applications' settings.
nvd
CVE-2022-22591HIGHCVSS 7.8≥ 12.0.0, < 12.2≥ unspecified, < 12.22022-03-18
CVE-2022-22591 [HIGH] CWE-787 CVE-2022-22591: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2022-22657HIGHCVSS 7.8fixed in 12.3≥ unspecified, < 12.3+2 more2022-03-18
CVE-2022-22657 [HIGH] CWE-665 CVE-2022-22657: A memory initialization issue was addressed with improved memory handling. This issue is fixed in Lo A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
nvd
CVE-2022-22665HIGHCVSS 7.8≥ 11.0, < 11.6.5≥ 12.0, < 12.3+1 more2022-03-18
CVE-2022-22665 [HIGH] CVE-2022-22665: A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.3. A A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to gain root privileges.
nvd
CVE-2022-22661HIGHCVSS 7.8≥ 11.6, < 11.6.5≥ 12.0, < 12.3+4 more2022-03-18
CVE-2022-22661 [HIGH] CWE-843 CVE-2022-22661: A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2022-22620HIGHCVSS 8.8KEV≥ 12.0.0, < 12.2.1≥ unspecified, < 12.2+1 more2022-03-18
CVE-2022-22620 [HIGH] CWE-416 CVE-2022-22620: A use after free issue was addressed with improved memory management. This issue is fixed in macOS M A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (v. 16612.4.9.1.8 and 15612.4.9.1.8). Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
nvd
CVE-2022-22651HIGHCVSS 7.5≥ 11.0, < 11.6.5≥ 12.0, < 12.3+1 more2022-03-18
CVE-2022-22651 [HIGH] CWE-787 CVE-2022-22651: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.3. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
nvd
CVE-2022-22584HIGHCVSS 7.8fixed in 12.2≥ unspecified, < 12.22022-03-18
CVE-2022-22584 [HIGH] CWE-787 CVE-2022-22584: A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.3, A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS Monterey 12.2. Processing a maliciously crafted file may lead to arbitrary code execution.
nvd
CVE-2022-22643HIGHCVSS 7.5≥ 12.0, < 12.3≥ unspecified, < 12.32022-03-18
CVE-2022-22643 [HIGH] CVE-2022-22643: This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4, macO This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. A user may send audio and video in a FaceTime call without knowing that they have done so.
nvd
CVE-2022-22617HIGHCVSS 7.8fixed in 11.6.5≥ 12.0.0, < 12.4+4 more2022-03-18
CVE-2022-22617 [HIGH] CVE-2022-22617: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11. A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to gain elevated privileges.
nvd
← Previous105 / 157Next →