Apple macOS vulnerabilities

3,135 known vulnerabilities affecting apple/macos.

Total CVEs

3,135

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL203HIGH1362MEDIUM1421LOW149

Vulnerabilities

Page 110 of 157

CVE-2021-30831MEDIUMCVSS 5.5fixed in 12.0.12021-10-28

CVE-2021-30831 [MEDIUM] CWE-125 CVE-2021-30831: An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted font may result in the disclosure of process memory.

nvd

CVE-2020-29629MEDIUMCVSS 5.5fixed in 11.0.1≥ unspecified, < 11.02021-10-28

CVE-2020-29629 [MEDIUM] CWE-125 CVE-2020-29629: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to read restricted memory.

nvd

CVE-2021-30841HIGHCVSS 7.8≥ 11.0, < 11.6≥ unspecified, < 11.6+4 more2021-10-19

CVE-2021-30841 [HIGH] CVE-2021-30841: This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macO This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted dfont file may lead to arbitrary code execution.

nvd

CVE-2021-30835HIGHCVSS 7.8fixed in 11.62021-10-19

CVE-2021-30835 [HIGH] CVE-2021-30835: This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catal This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, iTunes 12.12 for Windows, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted image may lead to arbitrary code execution.

nvd

CVE-2021-30843HIGHCVSS 7.8≥ 11.0, < 11.6≥ unspecified, < 11.6+4 more2021-10-19

CVE-2021-30843 [HIGH] CVE-2021-30843: This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macO This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted dfont file may lead to arbitrary code execution.

nvd

CVE-2021-30832HIGHCVSS 7.8≥ 11.0, < 11.6≥ unspecified, < 11.6+1 more2021-10-19

CVE-2021-30832 [HIGH] CWE-787 CVE-2021-30832: A memory corruption issue was addressed with improved state management. This issue is fixed in Secur A memory corruption issue was addressed with improved state management. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local attacker may be able to elevate their privileges.

nvd

CVE-2021-30830HIGHCVSS 7.8≥ 11.0, < 11.6≥ unspecified, < 11.6+1 more2021-10-19

CVE-2021-30830 [HIGH] CWE-787 CVE-2021-30830: A memory corruption issue was addressed with improved memory handling. This issue is fixed in Securi A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A malicious application may be able to execute arbitrary code with kernel privileges.

nvd

CVE-2021-30829HIGHCVSS 7.8≥ 11.0, < 11.6≥ unspecified, < 11.6+1 more2021-10-19

CVE-2021-30829 [HIGH] CVE-2021-30829: A URI parsing issue was addressed with improved parsing. This issue is fixed in Security Update 2021 A URI parsing issue was addressed with improved parsing. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local user may be able to execute arbitrary files.

nvd

CVE-2021-30827HIGHCVSS 7.8≥ 11.0, < 11.6≥ unspecified, < 11.6+1 more2021-10-19

CVE-2021-30827 [HIGH] CWE-281 CVE-2021-30827: A permissions issue existed. This issue was addressed with improved permission validation. This issu A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local attacker may be able to elevate their privileges.

nvd

CVE-2021-30848HIGHCVSS 7.8fixed in 12.0.12021-10-19

CVE-2021-30848 [HIGH] CWE-787 CVE-2021-30848: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution.

nvd

CVE-2021-30842HIGHCVSS 7.8≥ 11.0, < 11.6≥ unspecified, < 11.6+4 more2021-10-19

CVE-2021-30842 [HIGH] CVE-2021-30842: This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macO This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted dfont file may lead to arbitrary code execution.

nvd

CVE-2021-30847HIGHCVSS 7.8≥ 11.0, < 11.6≥ unspecified, < 11.6+4 more2021-10-19

CVE-2021-30847 [HIGH] CVE-2021-30847: This issue was addressed with improved checks. This issue is fixed in watchOS 8, macOS Big Sur 11.6, This issue was addressed with improved checks. This issue is fixed in watchOS 8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution.

nvd

CVE-2021-30849HIGHCVSS 7.8fixed in 12.0.12021-10-19

CVE-2021-30849 [HIGH] CWE-787 CVE-2021-30849: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, watchOS 8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

nvd

CVE-2021-30838HIGHCVSS 7.8≥ 11.0, < 11.62021-10-19

CVE-2021-30838 [HIGH] CVE-2021-30838: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15 and iPadOS 15. A malicious application may be able to execute arbitrary code with system privileges on devices with an Apple Neural Engine.

nvd

CVE-2021-30807HIGHCVSS 7.8KEVfixed in 11.5.1≥ unspecified, < 11.5+2 more2021-10-19

CVE-2021-30807 [HIGH] CWE-787 CVE-2021-30807: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.

nvd

CVE-2021-30844HIGHCVSS 7.5fixed in 11.6.1≥ unspecified, < 11.6+1 more2021-10-19

CVE-2021-30844 [HIGH] CWE-401 CVE-2021-30844: A logic issue was addressed with improved state management. This issue is fixed in Security Update 2 A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A remote attacker may be able to leak memory.

nvd

CVE-2021-30846HIGHCVSS 7.8fixed in 12.0.12021-10-19

CVE-2021-30846 [HIGH] CWE-787 CVE-2021-30846: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.

nvd

CVE-2021-30819MEDIUMCVSS 5.5fixed in 11.62021-10-19

CVE-2021-30819 [MEDIUM] CWE-125 CVE-2021-30819: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15 an An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15 and iPadOS 15. Processing a maliciously crafted USD file may disclose memory contents.

nvd

CVE-2021-30845MEDIUMCVSS 5.5≥ 11.0, < 11.6≥ unspecified, < 11.62021-10-19

CVE-2021-30845 [MEDIUM] CWE-125 CVE-2021-30845: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6. A local user may be able to read kernel memory.

nvd

CVE-2021-30811MEDIUMCVSS 5.5fixed in 11.62021-10-19

CVE-2021-30811 [MEDIUM] CVE-2021-30811: This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15, watchOS This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8. A local attacker may be able to read sensitive information.

nvd

← Previous110 / 157Next →