Apple macOS vulnerabilities

3,136 known vulnerabilities affecting apple/macos.

Total CVEs
3,136
CISA KEV
75
actively exploited
Public exploits
44
Exploited in wild
61
Severity breakdown
CRITICAL203HIGH1362MEDIUM1421LOW149UNKNOWN1

Vulnerabilities

Page 117 of 157
CVE-2021-30731MEDIUMCVSS 5.5≥ 11.0.1, < 11.4≥ unspecified, < 11.4+1 more2021-09-08
CVE-2021-30731 [MEDIUM] CVE-2021-30731: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, Security U This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-004 Catalina. An unprivileged application may be able to capture USB devices.
nvd
CVE-2021-1846MEDIUMCVSS 5.5≥ 11.0, < 11.3≥ unspecified, < 11.3+1 more2021-09-08
CVE-2021-1846 [MEDIUM] CWE-125 CVE-2021-1846: Processing a maliciously crafted audio file may disclose restricted memory. This issue is fixed in S Processing a maliciously crafted audio file may disclose restricted memory. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An out-of-bounds read was addressed with improved input validation.
nvd
CVE-2021-30689MEDIUMCVSS 6.1≥ 11.0, < 11.4≥ unspecified, < 11.4+3 more2021-09-08
CVE-2021-30689 [MEDIUM] CWE-79 CVE-2021-30689: A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14 A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site scripting.
nvd
CVE-2021-30778MEDIUMCVSS 5.5≥ 11.0, < 11.5≥ unspecified, < 11.52021-09-08
CVE-2021-30778 [MEDIUM] CVE-2021-30778: This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.5. A ma This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.5. A malicious application may be able to bypass Privacy preferences.
nvd
CVE-2021-30727MEDIUMCVSS 5.5≥ 11.0.1, < 11.4≥ unspecified, < 11.4+2 more2021-09-08
CVE-2021-30727 [MEDIUM] CVE-2021-30727: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11. A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. A malicious application may be able to modify protected parts of the file system.
nvd
CVE-2021-1857MEDIUMCVSS 6.5≥ 11.0, < 11.3≥ unspecified, < 11.3+1 more2021-09-08
CVE-2021-1857 [MEDIUM] CWE-665 CVE-2021-1857: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iT A memory initialization issue was addressed with improved memory handling. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may disclose sensitiv
nvd
CVE-2021-30700MEDIUMCVSS 5.5≥ 11.0, < 11.4≥ unspecified, < 11.4+2 more2021-09-08
CVE-2021-30700 [MEDIUM] CVE-2021-30700: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted image may lead to disclosure of user information.
nvd
CVE-2021-30718MEDIUMCVSS 4.3≥ 11.0, < 11.4≥ unspecified, < 11.42021-09-08
CVE-2021-30718 [MEDIUM] CVE-2021-30718: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4. A non-priv This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4. A non-privileged user may be able to modify restricted settings.
nvd
CVE-2021-30750MEDIUMCVSS 5.5≥ 11.0, < 11.3≥ unspecified, < 11.32021-09-08
CVE-2021-30750 [MEDIUM] CWE-276 CVE-2021-30750: The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.3. The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.3. A malicious application may be able to access the user's recent contacts.
nvd
CVE-2021-1825MEDIUMCVSS 6.1≥ 11.0, < 11.3≥ unspecified, < 11.32021-09-08
CVE-2021-1825 [MEDIUM] CWE-79 CVE-2021-1825: An input validation issue was addressed with improved input validation. This issue is fixed in iTune An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross site scripting attack.
nvd
CVE-2021-1832MEDIUMCVSS 5.5≥ 11.0, < 11.3≥ unspecified, < 11.3+1 more2021-09-08
CVE-2021-1832 [MEDIUM] CWE-276 CVE-2021-1832: Copied files may not have the expected file permissions. This issue is fixed in Security Update 2021 Copied files may not have the expected file permissions. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. The issue was addressed with improved permissions logic.
nvd
CVE-2021-1872MEDIUMCVSS 4.3≥ 11.0, < 11.3≥ unspecified, < 11.32021-09-08
CVE-2021-1872 [MEDIUM] CVE-2021-1872: A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPad A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, macOS Big Sur 11.3. Muting a CallKit call while ringing may not result in mute being enabled.
nvd
CVE-2021-30776MEDIUMCVSS 5.5fixed in 11.5≥ unspecified, < 11.5+2 more2021-09-08
CVE-2021-30776 [MEDIUM] CVE-2021-30776: A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Playing a malicious audio file may lead to an unexpected application termination.
nvd
CVE-2021-30768MEDIUMCVSS 5.5fixed in 11.5≥ unspecified, < 11.5+2 more2021-09-08
CVE-2021-30768 [MEDIUM] CVE-2021-30768: A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. A sandboxed process may be able to circumvent sandbox restrictions.
nvd
CVE-2021-1860MEDIUMCVSS 6.5≥ 11.0, < 11.3≥ unspecified, < 11.3+1 more2021-09-08
CVE-2021-1860 [MEDIUM] CWE-665 CVE-2021-1860: A memory initialization issue was addressed with improved memory handling. This issue is fixed in Se A memory initialization issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to disclose kernel memory.
nvd
CVE-2021-30720MEDIUMCVSS 5.4≥ 11.0.1, < 11.4≥ unspecified, < 11.4+3 more2021-09-08
CVE-2021-30720 [MEDIUM] CWE-287 CVE-2021-30720: A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 a A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious website may be able to access restricted ports on arbitrary servers.
nvd
CVE-2021-30721MEDIUMCVSS 6.5≥ 11.0.1, < 11.4≥ unspecified, < 11.4+1 more2021-09-08
CVE-2021-30721 [MEDIUM] CVE-2021-30721: A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 1 A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. An attacker in a privileged network position may be able to leak sensitive user information.
nvd
CVE-2021-30723MEDIUMCVSS 5.5≥ 11.0.1, < 11.4≥ unspecified, < 11.4+1 more2021-09-08
CVE-2021-30723 [MEDIUM] CVE-2021-30723: An information disclosure issue was addressed with improved state management. This issue is fixed in An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents.
nvd
CVE-2021-1815MEDIUMCVSS 5.5≥ 11.0, < 11.3≥ unspecified, < 11.32021-09-08
CVE-2021-1815 [MEDIUM] CWE-22 CVE-2021-1815: A parsing issue in the handling of directory paths was addressed with improved path validation. This A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A local user may be able to modify protected parts of the file system.
nvd
CVE-2021-30744MEDIUMCVSS 6.1≥ 11.0.1, < 11.4≥ unspecified, < 11.4+3 more2021-09-08
CVE-2021-30744 [MEDIUM] CWE-79 CVE-2021-30744: Description: A cross-origin issue with iframe elements was addressed with improved tracking of secur Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site scripting.
nvd
← Previous117 / 157Next →