Apple macOS vulnerabilities
3,135 known vulnerabilities affecting apple/macos.
Total CVEs
3,135
CISA KEV
75
actively exploited
Public exploits
44
Exploited in wild
61
Severity breakdown
CRITICAL203HIGH1362MEDIUM1421LOW149
Vulnerabilities
Page 112 of 157
CVE-2021-30652HIGHCVSS 7.0≥ 11.0, < 11.3≥ unspecified, < 11.3+1 more2021-09-08
CVE-2021-30652 [HIGH] CWE-362 CVE-2021-30652: A race condition was addressed with additional validation. This issue is fixed in Security Update 20
A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to gain root privileges.
nvd
CVE-2021-30683HIGHCVSS 7.8≥ 11.0, < 11.4≥ unspecified, < 11.4+1 more2021-09-08
CVE-2021-30683 [HIGH] CWE-416 CVE-2021-30683: A use after free issue was addressed with improved memory management. This issue is fixed in macOS B
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A malicious application could execute arbitrary code leading to compromise of user information.
nvd
CVE-2021-30797HIGHCVSS 8.8fixed in 11.5≥ unspecified, < 11.5+3 more2021-09-08
CVE-2021-30797 [HIGH] CVE-2021-30797: This issue was addressed with improved checks. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS
This issue was addressed with improved checks. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to code execution.
nvd
CVE-2021-1841HIGHCVSS 7.8≥ 11.0, < 11.3≥ unspecified, < 11.3+1 more2021-09-08
CVE-2021-1841 [HIGH] CWE-787 CVE-2021-1841: A malicious application may be able to execute arbitrary code with kernel privileges. This issue is
A malicious application may be able to execute arbitrary code with kernel privileges. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. An out-of-bounds write issue was addressed with improved bounds checking.
nvd
CVE-2021-30712HIGHCVSS 7.8≥ 11.0, < 11.4≥ unspecified, < 11.4+1 more2021-09-08
CVE-2021-30712 [HIGH] CVE-2021-30712: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
nvd
CVE-2021-1784HIGHCVSS 7.5≥ 11.0, < 11.3≥ unspecified, < 11.3+1 more2021-09-08
CVE-2021-1784 [HIGH] CVE-2021-1784: A permissions issue existed in DiskArbitration. This was addressed with additional ownership checks.
A permissions issue existed in DiskArbitration. This was addressed with additional ownership checks. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to modify protected parts of the file system.
nvd
CVE-2021-30795HIGHCVSS 8.8≥ 11.0, < 11.5≥ unspecified, < 11.5+3 more2021-09-08
CVE-2021-30795 [HIGH] CWE-416 CVE-2021-30795: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2021-30789HIGHCVSS 7.8fixed in 11.5≥ 11.0, < 11.5+3 more2021-09-08
CVE-2021-30789 [HIGH] CWE-125 CVE-2021-30789: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.7,
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution.
nvd
CVE-2021-30781HIGHCVSS 7.8≥ 11.0, < 11.5≥ unspecified, < 11.5+3 more2021-09-08
CVE-2021-30781 [HIGH] CVE-2021-30781: This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,
This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. A local attacker may be able to cause unexpected application termination or arbitrary code execution.
nvd
CVE-2021-30786HIGHCVSS 7.0≥ 11.0, < 11.5≥ unspecified, < 11.52021-09-08
CVE-2021-30786 [HIGH] CWE-362 CVE-2021-30786: A race condition was addressed with improved state handling. This issue is fixed in iOS 14.7, macOS
A race condition was addressed with improved state handling. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution.
nvd
CVE-2021-30703HIGHCVSS 7.8≥ 11.0, < 11.4≥ unspecified, < 11.4+3 more2021-09-08
CVE-2021-30703 [HIGH] CWE-415 CVE-2021-30703: A double free issue was addressed with improved memory management. This issue is fixed in tvOS 14.6,
A double free issue was addressed with improved memory management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, macOS Big Sur 11.4, watchOS 7.5. An application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2021-1808HIGHCVSS 7.5≥ 11.0, < 11.3≥ unspecified, < 11.3+1 more2021-09-08
CVE-2021-1808 [HIGH] CWE-787 CVE-2021-1808: A memory corruption issue was addressed with improved validation. This issue is fixed in Security Up
A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to read restricted memory.
nvd
CVE-2021-30661HIGHCVSS 8.8KEV≥ 11.0, < 11.3≥ unspecified, < 11.3+1 more2021-09-08
CVE-2021-30661 [HIGH] CWE-416 CVE-2021-30661: A use after free issue was addressed with improved memory management. This issue is fixed in Safari
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
nvd
CVE-2021-30680HIGHCVSS 7.8fixed in 11.4≥ unspecified, < 11.42021-09-08
CVE-2021-30680 [HIGH] CVE-2021-30680: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4. A local user may be able to load unsigned kernel extensions.
nvd
CVE-2021-30779HIGHCVSS 7.8fixed in 11.5≥ unspecified, < 11.5+2 more2021-09-08
CVE-2021-30779 [HIGH] CVE-2021-30779: This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,
This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2021-30688HIGHCVSS 8.8≥ 11.0, < 11.4≥ unspecified, < 11.4+1 more2021-09-08
CVE-2021-30688 [HIGH] CVE-2021-30688: A malicious application may be able to break out of its sandbox. This issue is fixed in macOS Big Su
A malicious application may be able to break out of its sandbox. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A path handling issue was addressed with improved validation.
nvd
CVE-2021-30774HIGHCVSS 7.8fixed in 11.5≥ unspecified, < 11.5+2 more2021-09-08
CVE-2021-30774 [HIGH] CVE-2021-30774: A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur
A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. A malicious application may be able to gain root privileges.
nvd
CVE-2021-30785HIGHCVSS 7.8fixed in 11.5≥ unspecified, < 11.5+2 more2021-09-08
CVE-2021-30785 [HIGH] CWE-120 CVE-2021-30785: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macO
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2021-30752HIGHCVSS 7.8≥ 11.0, < 11.3≥ unspecified, < 11.32021-09-08
CVE-2021-30752 [HIGH] CWE-125 CVE-2021-30752: Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in
Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An out-of-bounds read was addressed with improved input validation.
nvd
CVE-2021-1817HIGHCVSS 8.8≥ 11.0, < 11.3≥ unspecified, < 11.32021-09-08
CVE-2021-1817 [HIGH] CWE-787 CVE-2021-1817: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd