Apple macOS vulnerabilities
4,037 known vulnerabilities affecting apple/macos.
Total CVEs
4,037
CISA KEV
77
actively exploited
Public exploits
70
Exploited in wild
119
Severity breakdown
CRITICAL268HIGH1576MEDIUM1757LOW161UNKNOWN275
Vulnerabilities
Page 16 of 202
CVE-2022-22630P3CRITICALCVSS 9.8≥ 11.0, < 11.6.6≥ 12.0, < 12.3+3 more2023-06-23
CVE-2022-22630 [CRITICAL] CWE-416 CVE-2022-22630: A use after free issue was addressed with improved memory management. This issue is fixed in macOS B
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.6, macOS Monterey 12.3, Security Update 2022-004 Catalina. A remote user may cause an unexpected app termination or arbitrary code execution
nvd
CVE-2020-9856P4MEDIUMCVSS 5.3PoC≥ unspecified, < macOS Catalina 10.15.52020-06-09
CVE-2020-9856 [MEDIUM] CVE-2020-9856: This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5. An app
This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5. An application may be able to gain elevated privileges.
nvd
CVE-2026-84520P3CRITICALCVSS 9.8fixed in 27.0fixed in 272026-09-14
CVE-2026-84520 [CRITICAL] CWE-120 CVE-2026-84520: A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden G
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27. A local attacker may be able to cause unexpected system termination or corrupt kernel memory.
nvd
CVE-2020-9789P3HIGHCVSS 8.8≥ unspecified, < macOS Catalina 10.15.52020-06-09
CVE-2020-9789 [HIGH] CWE-787 CVE-2020-9789: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2020-9790P3HIGHCVSS 8.8≥ unspecified, < macOS Catalina 10.15.52020-06-09
CVE-2020-9790 [HIGH] CWE-787 CVE-2020-9790: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2019-8676P3HIGHCVSS 8.8≥ unspecified, < macOS Mojave 10.14.62019-12-18
CVE-2019-8676 [HIGH] CWE-787 CVE-2019-8676: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2019-8684P3HIGHCVSS 8.8≥ unspecified, < macOS Mojave 10.14.62019-12-18
CVE-2019-8684 [HIGH] CWE-787 CVE-2019-8684: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2022-32845P3CRITICALCVSS 10.0≥ 12.0, < 12.5≥ unspecified, < 12.52022-09-23
CVE-2022-32845 [CRITICAL] CWE-693 CVE-2022-32845: This issue was addressed with improved checks. This issue is fixed in watchOS 8.7, iOS 15.6 and iPad
This issue was addressed with improved checks. This issue is fixed in watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to break out of its sandbox.
nvd
CVE-2019-8688P3HIGHCVSS 8.8≥ unspecified, < macOS Mojave 10.14.62019-12-18
CVE-2019-8688 [HIGH] CWE-787 CVE-2019-8688: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2019-8685P3HIGHCVSS 8.8≥ unspecified, < macOS Mojave 10.14.62019-12-18
CVE-2019-8685 [HIGH] CWE-787 CVE-2019-8685: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2021-30799P3HIGHCVSS 8.8≥ 11.0, < 11.5≥ unspecified, < 11.5+1 more2021-09-08
CVE-2021-30799 [HIGH] CWE-787 CVE-2021-30799: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2019-8830P3HIGHCVSS 8.8≥ unspecified, < 10.15≥ unspecified, < 6.1+2 more2020-10-27
CVE-2019-8830 [HIGH] CWE-125 CVE-2019-8830: An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 13.3
An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, iOS 13.3 and iPadOS 13.3, iOS 12.4.4, watchOS 5.3.4. Processing malicious video via FaceTime may lead to arbitrary code execution.
nvd
CVE-2021-30795P3HIGHCVSS 8.8≥ 11.0, < 11.5≥ unspecified, < 11.5+3 more2021-09-08
CVE-2021-30795 [HIGH] CWE-416 CVE-2021-30795: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2021-30734P3HIGHCVSS 8.8≥ 11.0.1, < 11.4≥ unspecified, < 11.4+3 more2021-09-08
CVE-2021-30734 [HIGH] CWE-787 CVE-2021-30734: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2019-8678P3HIGHCVSS 8.8≥ unspecified, < macOS Mojave 10.14.62019-12-18
CVE-2019-8678 [HIGH] CWE-787 CVE-2019-8678: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2019-8673P3HIGHCVSS 8.8≥ unspecified, < macOS Mojave 10.14.62019-12-18
CVE-2019-8673 [HIGH] CWE-787 CVE-2019-8673: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2021-1817P3HIGHCVSS 8.8≥ 11.0, < 11.3≥ unspecified, < 11.32021-09-08
CVE-2021-1817 [HIGH] CWE-787 CVE-2021-1817: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2021-1867P3HIGHCVSS 8.8≥ 11.0, < 11.3≥ unspecified, < 11.32021-09-08
CVE-2021-1867 [HIGH] CWE-125 CVE-2021-1867: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5, macOS Big Sur 11.3. A malicious application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2019-8683P3HIGHCVSS 8.8≥ unspecified, < macOS Mojave 10.14.62019-12-18
CVE-2019-8683 [HIGH] CWE-787 CVE-2019-8683: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2020-3846P3HIGHCVSS 8.8≥ unspecified, < macOS Catalina 10.15.32020-02-27
CVE-2020-3846 [HIGH] CWE-20 CVE-2020-3846: A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.3.1 and
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code executi
nvd