Apple macOS vulnerabilities

3,135 known vulnerabilities affecting apple/macos.

Total CVEs
3,135
CISA KEV
75
actively exploited
Public exploits
44
Exploited in wild
61
Severity breakdown
CRITICAL203HIGH1362MEDIUM1421LOW149

Vulnerabilities

Page 28 of 157
CVE-2025-31256MEDIUMCVSS 5.5fixed in 15.52025-05-12
CVE-2025-31256 [MEDIUM] CWE-200 CVE-2025-31256: The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.5. The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.5. Hot corner may unexpectedly reveal a user’s deleted notes.
nvd
CVE-2025-31251MEDIUMCVSS 5.5fixed in 13.7.6≥ 14.0, < 14.7.6+3 more2025-05-12
CVE-2025-31251 [MEDIUM] CWE-400 CVE-2025-31251: The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.5 and iPadOS The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
nvd
CVE-2025-31236MEDIUMCVSS 5.5fixed in 15.52025-05-12
CVE-2025-31236 [MEDIUM] CWE-200 CVE-2025-31236: An information disclosure issue was addressed with improved privacy controls. This issue is fixed in An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.5. An app may be able to access sensitive user data.
nvd
CVE-2025-31235MEDIUMCVSS 6.5fixed in 13.7.6≥ 14.0, < 14.7.6+3 more2025-05-12
CVE-2025-31235 [MEDIUM] CWE-415 CVE-2025-31235: A double free issue was addressed with improved memory management. This issue is fixed in iPadOS 17. A double free issue was addressed with improved memory management. This issue is fixed in iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be able to cause unexpected system termination.
nvd
CVE-2025-31196MEDIUMCVSS 5.5fixed in 13.7.6≥ 14.0, < 14.7.6+2 more2025-05-12
CVE-2025-31196 [MEDIUM] CWE-125 CVE-2025-31196: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.4 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents.
nvd
CVE-2025-31257MEDIUMCVSS 4.7fixed in 15.52025-05-12
CVE-2025-31257 [MEDIUM] CWE-119 CVE-2025-31257: This issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 This issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
nvd
CVE-2025-31260MEDIUMCVSS 5.5fixed in 15.52025-05-12
CVE-2025-31260 [MEDIUM] CWE-284 CVE-2025-31260: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.5. An app may be able to access sensitive user data.
nvd
CVE-2025-24142MEDIUMCVSS 5.5fixed in 13.7.6≥ 14.0, < 14.7.6+3 more2025-05-12
CVE-2025-24142 [MEDIUM] CWE-200 CVE-2025-24142: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be able to access sensitive user data.
nvd
CVE-2025-31220MEDIUMCVSS 5.5fixed in 13.7.6≥ 14.0, < 14.7.6+3 more2025-05-12
CVE-2025-31220 [MEDIUM] CWE-200 CVE-2025-31220: A privacy issue was addressed by removing sensitive data. This issue is fixed in iPadOS 17.7.7, macO A privacy issue was addressed by removing sensitive data. This issue is fixed in iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. A malicious app may be able to read sensitive location information.
nvd
CVE-2025-31206MEDIUMCVSS 4.3fixed in 15.52025-05-12
CVE-2025-31206 [MEDIUM] CWE-843 CVE-2025-31206: A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 18. A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
nvd
CVE-2025-31239MEDIUMCVSS 4.3≥ 13.0, < 13.7.6≥ 14.0, < 14.7.6+4 more2025-05-12
CVE-2025-31239 [MEDIUM] CWE-416 CVE-2025-31239: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18. A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. Parsing a file may lead to an unexpected app termination.
nvd
CVE-2025-31241MEDIUMCVSS 5.3fixed in 13.7.6≥ 14.0, < 14.7.6+3 more2025-05-12
CVE-2025-31241 [MEDIUM] CWE-415 CVE-2025-31241: A double free issue was addressed with improved memory management. This issue is fixed in iOS 18.5 a A double free issue was addressed with improved memory management. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. A remote attacker may cause an unexpected app termination.
nvd
CVE-2025-31233MEDIUMCVSS 6.3fixed in 13.7.6≥ 14.0, < 14.7.6+3 more2025-05-12
CVE-2025-31233 [MEDIUM] CWE-20 CVE-2025-31233: The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.5 and iPadOS The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.
nvd
CVE-2025-31209MEDIUMCVSS 6.3fixed in 13.7.6≥ 14.0, < 14.7.6+3 more2025-05-12
CVE-2025-31209 [MEDIUM] CWE-125 CVE-2025-31209: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 a An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. Parsing a file may lead to disclosure of user information.
nvd
CVE-2025-31217MEDIUMCVSS 6.5fixed in 15.52025-05-12
CVE-2025-31217 [MEDIUM] CWE-20 CVE-2025-31217: The issue was addressed with improved input validation. This issue is fixed in Safari 18.5, iOS 18.5 The issue was addressed with improved input validation. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
nvd
CVE-2025-31242MEDIUMCVSS 5.5fixed in 13.7.6≥ 14.0, < 14.7.6+5 more2025-05-12
CVE-2025-31242 [MEDIUM] CWE-200 CVE-2025-31242: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.3, macOS Sonoma 14.7.6, macOS Ventura 13.7.3, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. An app may be able to access sensitive user data.
nvd
CVE-2025-24252HIGHCVSS 8.8fixed in 13.7.5≥ 14.0, < 14.7.5+3 more2025-04-29
CVE-2025-24252 [HIGH] CWE-416 CVE-2025-24252: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18. A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to corrupt process memory.
nvd
CVE-2025-24206HIGHCVSS 7.7fixed in 13.7.5≥ 14.0, < 14.7.5+3 more2025-04-29
CVE-2025-24206 [HIGH] CWE-288 CVE-2025-24206: An authentication issue was addressed with improved state management. This issue is fixed in iOS 18. An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to bypass authentication policy.
nvd
CVE-2025-31202MEDIUMCVSS 5.5fixed in 15.42025-04-29
CVE-2025-31202 [MEDIUM] CWE-476 CVE-2025-31202: A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to cause a denial-of-service.
nvd
CVE-2025-24270MEDIUMCVSS 5.7fixed in 13.7.5≥ 14.0, < 14.7.5+3 more2025-04-29
CVE-2025-24270 [MEDIUM] CWE-200 CVE-2025-24270: This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4 and iPadOS This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to leak sensitive user information.
nvd
← Previous28 / 157Next →