Apple macOS vulnerabilities
4,038 known vulnerabilities affecting apple/macos.
Total CVEs
4,038
CISA KEV
77
actively exploited
Public exploits
70
Exploited in wild
119
Severity breakdown
CRITICAL269HIGH1579MEDIUM1773LOW161UNKNOWN256
Vulnerabilities
Page 28 of 202
CVE-2022-0729P3HIGHCVSS 8.8fixed in 13.02022-02-23
CVE-2022-0729 [HIGH] CWE-823 CVE-2022-0729: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.
nvd
CVE-2024-54498P3HIGHCVSS 8.8fixed in 13.7.2≥ 14.0, < 14.7.2+3 more2024-12-12
CVE-2024-54498 [HIGH] CVE-2024-54498: A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 1
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to break out of its sandbox.
nvd
CVE-2022-28739P3HIGHCVSS 7.5≥ 11.0, < 11.7.1≥ 12.0, < 12.6.12022-05-09
CVE-2022-28739 [HIGH] CWE-125 CVE-2022-28739: There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x b
There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f.
nvd
CVE-2022-26757P3HIGHCVSS 7.8≥ 11.0, < 11.6.6≥ 12.0, < 12.42022-05-26
CVE-2022-26757 [HIGH] CWE-416 CVE-2022-26757: A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2025-31246P3HIGHCVSS 8.8fixed in 14.7.6≥ 15.0, < 15.5+1 more2025-05-12
CVE-2025-31246 [HIGH] CWE-119 CVE-2025-31246: The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.5, ma
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6. Connecting to a malicious AFP server may corrupt kernel memory.
nvd
CVE-2023-42913P3HIGHCVSS 8.8fixed in 14.2≥ unspecified, < 14.22024-03-28
CVE-2023-42913 [HIGH] CWE-922 CVE-2023-42913: This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.2
This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.2. Remote Login sessions may be able to obtain full disk access permissions.
nvd
CVE-2019-8604P3HIGHCVSS 8.8≥ unspecified, < macOS Mojave 10.14.52019-12-18
CVE-2019-8604 [HIGH] CWE-787 CVE-2019-8604: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.
nvd
CVE-2025-43358P3HIGHCVSS 8.8≥ 14.0, < 14.8≥ 15.0, < 15.7+3 more2025-09-15
CVE-2025-43358 [HIGH] CWE-862 CVE-2025-43358: A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 1
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A shortcut may be able to bypass sandbox restrictions.
nvd
CVE-2020-25709P3HIGHCVSS 7.5≥ 11.0, < 11.0.12021-05-18
CVE-2020-25709 [HIGH] CWE-617 CVE-2020-25709: A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be pro
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
nvd
CVE-2026-28923P3HIGHCVSS 8.8≥ 14.0, < 14.8.7≥ 15.0, < 15.7.7+4 more2026-05-11
CVE-2026-28923 [HIGH] CWE-532 CVE-2026-28923: A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. A malicious app may be able to break out of its sandbox.
nvd
CVE-2022-26751P3HIGHCVSS 7.8≥ 11.0, < 11.6.6≥ 12.0, < 12.4+4 more2022-05-26
CVE-2022-26751 [HIGH] CWE-787 CVE-2022-26751: A memory corruption issue was addressed with improved input validation. This issue is fixed in iTune
A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2021-30981P3HIGHCVSS 7.8≥ 11.0, < 11.6.2≥ 12.0, < 12.1+3 more2021-08-24
CVE-2021-30981 [HIGH] CWE-120 CVE-2021-30981: A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. An application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2026-84546P3HIGHCVSS 8.4≥ 15.0, < 15.8≥ 26.0, < 26.7+3 more2026-09-14
CVE-2026-84546 [HIGH] CWE-787 CVE-2026-84546: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption.
nvd
CVE-2022-22584P3HIGHCVSS 7.8fixed in 12.2≥ unspecified, < 12.22022-03-18
CVE-2022-22584 [HIGH] CWE-787 CVE-2022-22584: A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.3,
A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS Monterey 12.2. Processing a maliciously crafted file may lead to arbitrary code execution.
nvd
CVE-2021-30942P3HIGHCVSS 7.8≥ 11.0, < 11.6.2≥ 12.0, < 12.1+4 more2021-08-24
CVE-2021-30942 [HIGH] CWE-787 CVE-2021-30942: Description: A memory corruption issue in the processing of ICC profiles was addressed with improved
Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2021-30954P3HIGHCVSS 7.8≥ 12.0, < 12.1≥ unspecified, < 12.1+1 more2021-08-24
CVE-2021-30954 [HIGH] CWE-843 CVE-2021-30954: A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2
A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2021-30928P3HIGHCVSS 7.8≥ 11.0, < 11.6≥ unspecified, < 11.6+2 more2021-08-24
CVE-2021-30928 [HIGH] CWE-787 CVE-2021-30928: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6, watchOS 8, tvOS 15, iOS 14.8 and iPadOS 14.8, iOS 15 and iPadOS 15. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2021-30926P3HIGHCVSS 7.8fixed in 12.1≥ 11.0, < 11.6.1+2 more2021-08-24
CVE-2021-30926 [HIGH] CWE-787 CVE-2021-30926: Description: A memory corruption issue in the processing of ICC profiles was addressed with improved
Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input validation. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2019-8547P3CRITICALCVSS 9.8≥ unspecified, < 10.14≥ unspecified, < 5.22020-10-27
CVE-2019-8547 [CRITICAL] CWE-125 CVE-2019-8547: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra
nvd
CVE-2024-23286P3HIGHCVSS 7.8≥ 12.0, < 12.7.4≥ 13.0, < 13.6.5+4 more2024-03-08
CVE-2024-23286 [HIGH] CWE-120 CVE-2024-23286: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing an image may lead to arbitrary code execution.
nvd