Apple macOS vulnerabilities

3,438 known vulnerabilities affecting apple/macos.

Total CVEs

3,438

CISA KEV

actively exploited

Public exploits

Exploited in wild

116

Severity breakdown

CRITICAL259HIGH1478MEDIUM1549LOW152

Vulnerabilities

SortPage 145 of 172

CVE-2023-32389P4MEDIUMCVSS 5.5≥ 13.0, < 13.4≥ unspecified, < 13.42023-06-23

CVE-2023-32389 [MEDIUM] CWE-125 CVE-2023-32389: This issue was addressed with improved redaction of sensitive information. This issue is fixed in i This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to disclose kernel memory.

nvd

CVE-2023-23537P4MEDIUMCVSS 5.5fixed in 11.7.5≥ 13.0, < 13.3+2 more2023-05-08

CVE-2023-23537 [MEDIUM] CVE-2023-23537: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, watchOS 9.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information.

nvd

CVE-2022-32825P4MEDIUMCVSS 5.5≥ 11.0, < 11.6.8≥ 12.0, < 12.5+2 more2022-09-23

CVE-2022-32825 [MEDIUM] CWE-200 CVE-2022-32825: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15 The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5. An app may be able to disclose kernel memory.

nvd

CVE-2024-40804P4MEDIUMCVSS 5.5fixed in 14.62024-07-29

CVE-2024-40804 [MEDIUM] CWE-200 CVE-2024-40804: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. A malicious The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. A malicious application may be able to access private information.

nvd

CVE-2023-32421P4MEDIUMCVSS 5.5fixed in 14.0≥ unspecified, < 142023-09-27

CVE-2023-32421 [MEDIUM] CVE-2023-32421: A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macO A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app may be able to observe unprotected user data.

nvd

CVE-2023-32363P4MEDIUMCVSS 5.5fixed in 13.4≥ unspecified, < 13.42023-06-23

CVE-2023-32363 [MEDIUM] CWE-125 CVE-2023-32363: A permissions issue was addressed by removing vulnerable code and adding additional checks. This iss A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Ventura 13.4. An app may be able to bypass Privacy preferences.

nvd

CVE-2023-38259P4MEDIUMCVSS 5.5≥ 11.0, < 11.7.9≥ 12.0, < 12.6.8+4 more2023-07-27

CVE-2023-38259 [MEDIUM] CVE-2023-38259: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6.8 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to access user-sensitive data.

nvd

CVE-2025-24122P4MEDIUMCVSS 5.5fixed in 13.7.3≥ 14.0, < 14.7.3+3 more2025-01-27

CVE-2025-24122 [MEDIUM] CWE-787 CVE-2025-24122: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing res A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to modify protected parts of the file system.

nvd

CVE-2023-32411P4MEDIUMCVSS 5.5≥ 11.0, < 11.7.7≥ 12.0, < 12.6.6+4 more2023-06-23

CVE-2023-32411 [MEDIUM] CVE-2023-32411: This issue was addressed with improved entitlements. This issue is fixed in tvOS 16.5, macOS Ventura This issue was addressed with improved entitlements. This issue is fixed in tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to bypass Privacy preferences.

nvd

CVE-2022-32849P4MEDIUMCVSS 5.5≥ 11.0, < 11.6.8≥ 12.0, < 12.5+3 more2022-09-23

CVE-2022-32849 [MEDIUM] CWE-200 CVE-2022-32849: An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed i An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to access sensitive user information.

nvd

CVE-2025-30455P4MEDIUMCVSS 5.5≥ 14.0, < 14.7.5≥ 15.0, < 15.4+2 more2025-03-31

CVE-2025-30455 [MEDIUM] CWE-200 CVE-2025-30455: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonom The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to access private information.

nvd

CVE-2024-27861P4MEDIUMCVSS 5.5fixed in 15.0fixed in 152024-09-17

CVE-2024-27861 [MEDIUM] CWE-125 CVE-2024-27861: The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An a The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An application may be able to read restricted memory.

nvd

CVE-2019-8702P4MEDIUMCVSS 5.5≥ unspecified, < 10.14≥ unspecified, < 12.42021-12-23

CVE-2019-8702 [MEDIUM] CWE-668 CVE-2019-8702: This issue was addressed with a new entitlement. This issue is fixed in macOS Mojave 10.14.6, Securi This issue was addressed with a new entitlement. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra, iOS 12.4, tvOS 12.4. A local user may be able to read a persistent account identifier.

nvd

CVE-2025-24261P4MEDIUMCVSS 5.5≥ 13.0, < 13.7.5≥ 14.0, < 14.7.5+4 more2025-03-31

CVE-2025-24261 [MEDIUM] CWE-200 CVE-2025-24261: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonom The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to modify protected parts of the file system.

nvd

CVE-2024-23282P4MEDIUMCVSS 5.5≥ 14.0, < 14.5fixed in 14.52024-06-10

CVE-2024-23282 [MEDIUM] CWE-552 CVE-2024-23282: The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, i The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, watchOS 10.5. A maliciously crafted email may be able to initiate FaceTime calls without user authorization.

nvd

CVE-2023-32367P4MEDIUMCVSS 5.5≥ 13.0, < 13.4≥ unspecified, < 13.42023-06-23

CVE-2023-32367 [MEDIUM] CVE-2023-32367: This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5 This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. An app may be able to access user-sensitive data.

nvd

CVE-2023-23502P4MEDIUMCVSS 5.5≥ 12.0.0, < 12.6.3≥ 13.0, < 13.2+2 more2023-02-27

CVE-2023-23502 [MEDIUM] CWE-125 CVE-2023-23502: An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed i An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be able to determine kernel memory layout.

nvd

CVE-2024-44280P4MEDIUMCVSS 5.5≥ 13.0, < 13.7.1≥ 14.0, < 14.7.1+3 more2024-10-28

CVE-2024-44280 [MEDIUM] CVE-2024-44280: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing res A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to modify protected parts of the file system.

nvd

CVE-2022-32904P4MEDIUMCVSS 5.5≥ 11.0, < 11.7≥ 12.0, < 12.6+3 more2022-11-01

CVE-2022-32904 [MEDIUM] CWE-284 CVE-2022-32904: An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app may be able to access user-sensitive data.

nvd

CVE-2024-23250P4MEDIUMCVSS 5.5≥ 14.0, < 14.4fixed in 14.42024-03-08

CVE-2024-23250 [MEDIUM] CWE-863 CVE-2024-23250: An access issue was addressed with improved access restrictions. This issue is fixed in iOS 17.4 and An access issue was addressed with improved access restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may be able to access Bluetooth-connected microphones without user permission.

nvd

← Previous145 / 172Next →