Apple macOS vulnerabilities
4,037 known vulnerabilities affecting apple/macos.
Total CVEs
4,037
CISA KEV
77
actively exploited
Public exploits
70
Exploited in wild
119
Severity breakdown
CRITICAL268HIGH1576MEDIUM1757LOW161UNKNOWN275
Vulnerabilities
Page 13 of 202
CVE-2022-26776P3CRITICALCVSS 9.8≥ 11.0, < 11.6.6≥ 12.0.0, < 12.4+2 more2022-05-26
CVE-2022-26776 [CRITICAL] CWE-119 CVE-2022-26776: This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An attacker may be able to cause unexpected application termination or arbitrary code execution.
nvd
CVE-2021-30833P3MEDIUMCVSS 5.5fixed in 12.0.1≥ 11.6, < 11.6.1+1 more2021-10-28
CVE-2021-30833 [MEDIUM] CVE-2021-30833: This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacki
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files.
nvd
CVE-2019-8601P3HIGHCVSS 8.8≥ unspecified, < macOS Mojave 10.14.52019-12-18
CVE-2019-8601 [HIGH] CWE-190 CVE-2019-8601: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2023-34425P3CRITICALCVSS 9.8fixed in 11.7.9≥ 12.0, < 12.6.8+4 more2023-07-28
CVE-2023-34425 [CRITICAL] CVE-2023-34425: The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS Mon
The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, macOS Big Sur 11.7.9, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2023-28201P3CRITICALCVSS 9.8≥ 13.0, < 13.3≥ unspecified, < 13.32023-05-08
CVE-2023-28201 [CRITICAL] CWE-362 CVE-2023-28201: This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3,
This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4. A remote user may be able to cause unexpected app termination or arbitrary code execution.
nvd
CVE-2026-64774P3CRITICALCVSS 9.8≥ 14.0, < 14.8.8≥ 15.0, < 15.7.8+4 more2026-07-27
CVE-2026-64774 [CRITICAL] CWE-190 CVE-2026-64774: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.
nvd
CVE-2021-30937P3HIGHCVSS 7.8≥ 11.0, < 11.6.2≥ 12.0, < 12.1+4 more2021-08-24
CVE-2021-30937 [HIGH] CWE-787 CVE-2021-30937: A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2021-30851P3HIGHCVSS 8.8fixed in 12.0.1v12.0.12021-08-24
CVE-2021-30851 [HIGH] CWE-787 CVE-2021-30851: A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution.
nvd
CVE-2022-32934P3HIGHCVSS 8.8≥ 11.0, < 11.7≥ 12.0.0, < 12.6+3 more2022-11-01
CVE-2022-32934 [HIGH] CWE-119 CVE-2022-32934: The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, ma
The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. A remote user may be able to cause kernel code execution.
nvd
CVE-2021-30818P3HIGHCVSS 8.8fixed in 12.0.12021-10-28
CVE-2021-30818 [HIGH] CWE-843 CVE-2021-30818: A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 a
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2023-35074P3HIGHCVSS 8.8fixed in 14.0≥ unspecified, < 142023-09-27
CVE-2023-35074 [HIGH] CVE-2023-35074: The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, wa
The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.
nvd
CVE-2022-22590P3HIGHCVSS 8.8≥ 12.0.0, < 12.2≥ unspecified, < 12.22022-03-18
CVE-2022-22590 [HIGH] CWE-416 CVE-2022-22590: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2022-26748P3HIGHCVSS 8.8≥ 11.0, < 11.6.6≥ 12.0, < 12.4+2 more2022-05-26
CVE-2022-26748 [HIGH] CWE-787 CVE-2022-26748: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Se
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2021-30852P3HIGHCVSS 8.8fixed in 12.0.12021-08-24
CVE-2021-30852 [HIGH] CWE-843 CVE-2021-30852: A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 14.8
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2022-32888P3HIGHCVSS 8.8≥ 11.0, < 11.7≥ 12.0.0, < 12.6+4 more2022-11-01
CVE-2022-32888 [HIGH] CWE-787 CVE-2022-32888: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, watchOS 9, macOS Monterey 12.6, tvOS 16. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2023-38611P3HIGHCVSS 8.8≥ 13.0, < 13.5≥ unspecified, < 13.52023-07-27
CVE-2023-38611 [HIGH] CVE-2023-38611: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution.
nvd
CVE-2022-32885P3HIGHCVSS 8.8≥ 12.0.0, < 12.5≥ unspecified, < 12.5+1 more2023-05-08
CVE-2022-32885 [HIGH] CWE-787 CVE-2022-32885: A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 an
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution
nvd
CVE-2026-65346P3HIGHCVSS 8.8≥ 26.0, < 26.6.2fixed in 15.8+1 more2026-08-17
CVE-2026-65346 [HIGH] CWE-190 CVE-2026-65346: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to arbitrary code execution.
nvd
CVE-2026-43818P3HIGHCVSS 8.8≥ 14.0, < 14.8.8≥ 15.0, < 15.7.8+4 more2026-07-27
CVE-2026-43818 [HIGH] CWE-190 CVE-2026-43818: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2019-6208P4MEDIUMCVSS 5.5PoC≥ unspecified, < macOS Mojave 10.14.32019-03-05
CVE-2019-6208 [MEDIUM] CWE-665 CVE-2019-6208: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iO
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes.
nvd