Apple macOS vulnerabilities
3,438 known vulnerabilities affecting apple/macos.
Total CVEs
3,438
CISA KEV
75
actively exploited
Public exploits
68
Exploited in wild
116
Severity breakdown
CRITICAL204HIGH1438MEDIUM1494LOW151UNKNOWN151
Vulnerabilities
Page 3 of 172
CVE-2022-22587P1CRITICALCVSS 9.8KEVfixed in 11.6.3≥ 12.0, < 12.2+2 more2022-03-18
CVE-2022-22587 [CRITICAL] CWE-787 CVE-2022-22587: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 1
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..
nvd
CVE-2021-1789P1HIGHCVSS 8.8KEV≥ 11.0, < 11.2≥ unspecified, < 11.2+3 more2021-04-02
CVE-2021-1789 [HIGH] CWE-843 CVE-2021-1789: A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2021-30661P1HIGHCVSS 8.8KEV≥ 11.0, < 11.3≥ unspecified, < 11.3+1 more2021-09-08
CVE-2021-30661 [HIGH] CWE-416 CVE-2021-30661: A use after free issue was addressed with improved memory management. This issue is fixed in Safari
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
nvd
CVE-2021-1870P1CRITICALCVSS 9.8KEV≥ 11.0.1, < 11.2≥ unspecified, < 11.22021-04-02
CVE-2021-1870 [CRITICAL] CVE-2021-1870: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, S
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
nvd
CVE-2023-43000P1HIGHCVSS 8.8KEVfixed in 13.5≥ unspecified, < 13.52025-11-05
CVE-2023-43000 [HIGH] CWE-416 CVE-2023-43000: A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS V
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.
nvd
CVE-2021-1871P1CRITICALCVSS 9.8KEV≥ 11.0.1, < 11.2≥ unspecified, < 11.22021-04-02
CVE-2021-1871 [CRITICAL] CVE-2021-1871: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, S
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
nvd
CVE-2022-48503P1HIGHCVSS 8.8KEV≥ 12.0.0, < 12.5≥ unspecified, < 12.52023-08-14
CVE-2022-48503 [HIGH] CWE-129 CVE-2022-48503: The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7,
The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution.
nvd
CVE-2022-22675P1HIGHCVSS 7.8KEV≥ 11.0, < 11.6.6≥ 12.0.0, < 12.3.1+1 more2022-05-26
CVE-2022-22675 [HIGH] CWE-787 CVE-2022-22675: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvO
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..
nvd
CVE-2021-30665P1HIGHCVSS 8.8KEVfixed in 11.3.1≥ unspecified, < 11.3+4 more2021-09-08
CVE-2021-30665 [HIGH] CWE-787 CVE-2021-30665: A memory corruption issue was addressed with improved state management. This issue is fixed in watch
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
nvd
CVE-2025-31277P1HIGHCVSS 8.8KEV≥ 15.0, < 15.6fixed in 15.62025-07-30
CVE-2025-31277 [HIGH] CWE-119 CVE-2025-31277: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.
nvd
CVE-2021-30952P1HIGHCVSS 7.8KEV≥ 12.0, < 12.1≥ unspecified, < 12.1+1 more2021-08-24
CVE-2021-30952 [HIGH] CWE-190 CVE-2021-30952: An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2,
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2021-30663P1HIGHCVSS 8.8KEV≥ 11.0, < 11.3.1≥ unspecified, < 11.3+4 more2021-09-08
CVE-2021-30663 [HIGH] CWE-190 CVE-2021-30663: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2022-32894P1HIGHCVSS 7.8KEV≥ 11.0, < 11.7≥ 12.0, < 12.5.1+1 more2022-08-24
CVE-2022-32894 [HIGH] CWE-787 CVE-2022-32894: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.
nvd
CVE-2022-32917P1HIGHCVSS 7.8KEV≥ 11.0, < 11.7≥ 12.0.0, < 12.6+3 more2022-09-20
CVE-2022-32917 [HIGH] CWE-787 CVE-2022-32917: The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS
The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..
nvd
CVE-2020-27932P1HIGHCVSS 7.8KEV≥ 11.0, < 11.0.1≥ unspecified, < 11.0+5 more2020-12-08
CVE-2020-27932 [HIGH] CWE-843 CVE-2020-27932: A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious app
nvd
CVE-2023-41990P1HIGHCVSS 7.8KEVfixed in 11.7.9≥ 12.0.0, < 12.6.8+4 more2023-09-12
CVE-2023-41990 [HIGH] CVE-2023-41990: The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3
The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploite
nvd
CVE-2021-30900P1HIGHCVSS 7.8KEVfixed in 11.6.12021-08-24
CVE-2021-30900 [HIGH] CWE-787 CVE-2021-30900: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A malicious application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2022-48618P1HIGHCVSS 7.0KEV≥ 13.0, < 13.1≥ unspecified, < 13.12024-01-09
CVE-2022-48618 [HIGH] CWE-367 CVE-2022-48618: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited against versions of iOS released before iOS 15.7
nvd
CVE-2023-41992P1HIGHCVSS 7.8KEV≥ 12.0, < 12.7≥ 13.0, < 13.6+2 more2023-09-21
CVE-2023-41992 [HIGH] CWE-754 CVE-2023-41992: The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 a
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
nvd
CVE-2024-23225P1HIGHCVSS 7.8KEV≥ 12.0, < 12.7.4≥ 13.0, < 13.6.5+4 more2024-03-05
CVE-2024-23225 [HIGH] CWE-787 CVE-2024-23225: A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protection
nvd