Apple macOS vulnerabilities

3,135 known vulnerabilities affecting apple/macos.

Total CVEs
3,135
CISA KEV
75
actively exploited
Public exploits
44
Exploited in wild
61
Severity breakdown
CRITICAL203HIGH1362MEDIUM1421LOW149

Vulnerabilities

Page 33 of 157
CVE-2025-24255HIGHCVSS 8.4≥ 13.0, < 13.7.5≥ 14.0, < 14.7.5+4 more2025-03-31
CVE-2025-24255 [HIGH] CWE-20 CVE-2025-24255: A file access issue was addressed with improved input validation. This issue is fixed in macOS Sequo A file access issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to break out of its sandbox.
nvd
CVE-2025-24267HIGHCVSS 7.8≥ 13.0, < 13.7.5≥ 14.0, < 14.7.5+4 more2025-03-31
CVE-2025-24267 [HIGH] CWE-276 CVE-2025-24267: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges.
nvd
CVE-2025-30449HIGHCVSS 7.8≥ 13.0, < 13.7.5≥ 14.0, < 14.7.5+4 more2025-03-31
CVE-2025-30449 [HIGH] CWE-281 CVE-2025-30449: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges.
nvd
CVE-2025-30456HIGHCVSS 7.8fixed in 13.7.5≥ 14.0, < 14.7.5+3 more2025-03-31
CVE-2025-30456 [HIGH] CWE-281 CVE-2025-30456: A parsing issue in the handling of directory paths was addressed with improved path validation. This A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges.
nvd
CVE-2025-24234HIGHCVSS 7.8≥ 13.0, < 13.7.5≥ 14.0, < 14.7.5+4 more2025-03-31
CVE-2025-24234 [HIGH] CWE-276 CVE-2025-24234: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4, This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to gain root privileges.
nvd
CVE-2025-30471HIGHCVSS 7.5fixed in 13.7.5fixed in 14.7.5+2 more2025-03-31
CVE-2025-30471 [HIGH] CWE-20 CVE-2025-30471: A validation issue was addressed with improved logic. This issue is fixed in iOS 18.4 and iPadOS 18. A validation issue was addressed with improved logic. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. A remote user may be able to cause a denial-of-service.
nvd
CVE-2025-31188HIGHCVSS 7.8≥ 13.0, < 13.7.5≥ 14.0, < 14.7.5+4 more2025-03-31
CVE-2025-31188 [HIGH] CWE-362 CVE-2025-31188: A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.4 A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to bypass Privacy preferences.
nvd
CVE-2025-24236MEDIUMCVSS 5.5≥ 14.0, < 14.7.5≥ 15.0, < 15.4+2 more2025-03-31
CVE-2025-24236 [MEDIUM] CWE-284 CVE-2025-24236: An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Seq An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data.
nvd
CVE-2025-30432MEDIUMCVSS 6.4≥ 13.0, < 13.7.5≥ 14.0, < 14.7.5+2 more2025-03-31
CVE-2025-30432 [MEDIUM] CWE-287 CVE-2025-30432: A logic issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPad A logic issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures.
nvd
CVE-2025-24248MEDIUMCVSS 5.0fixed in 15.42025-03-31
CVE-2025-24248 [MEDIUM] CWE-284 CVE-2025-24248: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to enumerate devices that have signed into the user's Apple Account.
nvd
CVE-2025-24278MEDIUMCVSS 5.5≥ 13.0, < 13.7.5≥ 14.0, < 14.7.5+4 more2025-03-31
CVE-2025-24278 [MEDIUM] CWE-59 CVE-2025-24278: This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data.
nvd
CVE-2025-24215MEDIUMCVSS 5.5≥ 13.0, < 13.7.5≥ 14.0, < 14.7.5+4 more2025-03-31
CVE-2025-24215 [MEDIUM] CWE-284 CVE-2025-24215: The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.6, macOS Sequoia 15 The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access private information.
nvd
CVE-2025-24217MEDIUMCVSS 5.5≥ 15.0, < 15.4fixed in 15.42025-03-31
CVE-2025-24217 [MEDIUM] CWE-200 CVE-2025-24217: This issue was addressed with improved redaction of sensitive information. This issue is fixed in iO This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. An app may be able to access sensitive user data.
nvd
CVE-2025-31187MEDIUMCVSS 5.5fixed in 13.7.5≥ 14.0, < 14.7.5+3 more2025-03-31
CVE-2025-31187 [MEDIUM] CWE-284 CVE-2025-31187: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4, This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to modify protected parts of the file system.
nvd
CVE-2025-31191MEDIUMCVSS 5.5fixed in 13.7.5≥ 14.0, < 14.7.5+3 more2025-03-31
CVE-2025-31191 [MEDIUM] CWE-200 CVE-2025-31191: This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPad This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to access sensitive user data.
nvd
CVE-2025-24192MEDIUMCVSS 6.5≥ 15.0, < 15.4fixed in 15.42025-03-31
CVE-2025-24192 [MEDIUM] CVE-2025-24192: A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, iO A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. Visiting a website may leak sensitive data.
nvd
CVE-2025-24097MEDIUMCVSS 5.0fixed in 14.7.5fixed in 15.42025-03-31
CVE-2025-24097 [MEDIUM] CWE-125 CVE-2025-24097: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.4 and A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. An app may be able to read arbitrary file metadata.
nvd
CVE-2025-24272MEDIUMCVSS 6.8≥ 13.0, < 13.7.5≥ 14.0, < 14.7.5+4 more2025-03-31
CVE-2025-24272 [MEDIUM] CWE-284 CVE-2025-24272: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonom The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to modify protected parts of the file system.
nvd
CVE-2025-24182MEDIUMCVSS 5.5≥ 15.0, < 15.4fixed in 15.42025-03-31
CVE-2025-24182 [MEDIUM] CWE-125 CVE-2025-24182: An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted font may result in the disclosure of process memory.
nvd
CVE-2025-24203MEDIUMCVSS 5.0≥ 13.0, < 13.7.5≥ 14.0, < 14.7.5+4 more2025-03-31
CVE-2025-24203 [MEDIUM] CVE-2025-24203: The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadO The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to modify protected parts of the file system.
nvd
← Previous33 / 157Next →