Apple macOS vulnerabilities
4,037 known vulnerabilities affecting apple/macos.
Total CVEs
4,037
CISA KEV
77
actively exploited
Public exploits
70
Exploited in wild
119
Severity breakdown
CRITICAL268HIGH1576MEDIUM1757LOW161UNKNOWN275
Vulnerabilities
Page 12 of 202
CVE-2023-38598P3CRITICALCVSS 9.8fixed in 11.7.9≥ 12.0, < 12.6.8+4 more2023-07-28
CVE-2023-38598 [CRITICAL] CWE-416 CVE-2023-38598: A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS
A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.6, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2022-32863P3CRITICALCVSS 9.8≥ 12.0.0, < 12.5≥ unspecified, < 12.5+1 more2022-09-20
CVE-2022-32863 [CRITICAL] CWE-787 CVE-2022-32863: A memory corruption issue was addressed with improved state management. This issue is fixed in Safar
A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 15.6, macOS Monterey 12.5. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2024-4558P3CRITICALCVSS 9.6fixed in 14.62024-05-07
CVE-2024-4558 [CRITICAL] CWE-416 CVE-2024-4558: Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potent
Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-64772P3CRITICALCVSS 9.8≥ 15.0, < 15.7.8≥ 26.0, < 26.6+2 more2026-07-27
CVE-2026-64772 [CRITICAL] CWE-787 CVE-2026-64772: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iO
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.
nvd
CVE-2026-43750P3CRITICALCVSS 9.8≥ 14.0, < 14.8.8≥ 15.0, < 15.7.8+4 more2026-07-27
CVE-2026-43750 [CRITICAL] CWE-120 CVE-2026-43750: A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
nvd
CVE-2021-30951P3HIGHCVSS 8.8≥ 12.0.0, < 12.1≥ unspecified, < 12.1+1 more2021-08-24
CVE-2021-30951 [HIGH] CWE-416 CVE-2021-30951: A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2021-30936P3HIGHCVSS 8.8≥ 12.0, < 12.1≥ unspecified, < 12.1+1 more2021-08-24
CVE-2021-30936 [HIGH] CWE-416 CVE-2021-30936: A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2021-30953P3HIGHCVSS 8.8≥ 12.0.0, ≤ 12.1≥ unspecified, < 12.1+1 more2021-08-24
CVE-2021-30953 [HIGH] CWE-125 CVE-2021-30953: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 15.2,
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2022-32787P3HIGHCVSS 8.8fixed in 10.15.7≥ 11.0, < 11.6.8+5 more2022-09-23
CVE-2022-32787 [HIGH] CWE-787 CVE-2022-32787: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2022-26717P3HIGHCVSS 8.8≥ 12.0.0, < 12.4≥ unspecified, < 12.4+1 more2022-11-01
CVE-2022-26717 [HIGH] CWE-416 CVE-2022-26717: A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTunes 12.12.4 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2022-42823P3HIGHCVSS 8.8fixed in 13.0≥ unspecified, < 132022-11-01
CVE-2022-42823 [HIGH] CWE-843 CVE-2022-42823: A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1
A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2023-38600P3HIGHCVSS 8.8≥ 13.0, < 13.5≥ unspecified, < 13.52023-07-27
CVE-2023-38600 [HIGH] CVE-2023-38600: The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution.
nvd
CVE-2022-46699P3HIGHCVSS 8.8fixed in 13.12022-12-15
CVE-2022-46699 [HIGH] CWE-787 CVE-2022-46699: A memory corruption issue was addressed with improved state management. This issue is fixed in Safar
A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2023-38595P3HIGHCVSS 8.8≥ 13.0, < 13.5≥ unspecified, < 13.52023-07-27
CVE-2023-38595 [HIGH] CVE-2023-38595: The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution.
nvd
CVE-2022-42863P3HIGHCVSS 8.8fixed in 13.12022-12-15
CVE-2022-42863 [HIGH] CWE-787 CVE-2022-42863: A memory corruption issue was addressed with improved state management. This issue is fixed in Safar
A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2024-27820P3HIGHCVSS 8.8≥ 14.0, < 14.5fixed in 14.52024-06-10
CVE-2024-27820 [HIGH] CWE-119 CVE-2024-27820: The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing web content may lead to arbitrary code execution.
nvd
CVE-2026-64759P3HIGHCVSS 8.8fixed in 15.8fixed in 26.7+1 more2026-10-26
CVE-2026-64759 [HIGH] CWE-190 CVE-2026-64759: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2021-30793P3CRITICALCVSS 9.8≥ 11.0, < 11.5≥ unspecified, < 11.5+1 more2021-09-08
CVE-2021-30793 [CRITICAL] CVE-2021-30793: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2020-3909P3CRITICALCVSS 9.8≥ unspecified, < macOS Catalina 10.15.42020-04-01
CVE-2020-3909 [CRITICAL] CWE-120 CVE-2020-3909: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and i
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.
nvd
CVE-2019-8746P3CRITICALCVSS 9.8≥ unspecified, < 10.15≥ unspecified, < 12.10+2 more2020-10-27
CVE-2019-8746 [CRITICAL] CWE-125 CVE-2019-8746: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Cat
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iTunes 12.10.1 for Windows. A remote attacker may be able to cause unexpected ap
nvd