Apple macOS vulnerabilities

3,135 known vulnerabilities affecting apple/macos.

Total CVEs
3,135
CISA KEV
75
actively exploited
Public exploits
44
Exploited in wild
61
Severity breakdown
CRITICAL203HIGH1362MEDIUM1421LOW149

Vulnerabilities

Page 37 of 157
CVE-2024-54467MEDIUMCVSS 6.5fixed in 15.0fixed in 152025-03-10
CVE-2024-54467 [MEDIUM] CWE-200 CVE-2024-54467: A cookie management issue was addressed with improved state management. This issue is fixed in Safar A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin.
nvd
CVE-2024-54473MEDIUMCVSS 5.5fixed in 15.0fixed in 152025-03-10
CVE-2024-54473 [MEDIUM] CWE-200 CVE-2024-54473: This issue was addressed with improved redaction of sensitive information. This issue is fixed in ma This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15. An app may be able to access user-sensitive data.
nvd
CVE-2024-54560MEDIUMCVSS 5.5fixed in 15.0fixed in 152025-03-10
CVE-2024-54560 [MEDIUM] CWE-269 CVE-2024-54560: A logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS A logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, watchOS 11. A malicious app may be able to modify other apps without having App Management permission.
nvd
CVE-2024-54463MEDIUMCVSS 5.5fixed in 15.0fixed in 152025-03-10
CVE-2024-54463 [MEDIUM] CWE-200 CVE-2024-54463: This issue was addressed with improved entitlements. This issue is fixed in macOS Sequoia 15. An app This issue was addressed with improved entitlements. This issue is fixed in macOS Sequoia 15. An app may be able to access removable volumes without user consent.
nvd
CVE-2022-48610MEDIUMCVSS 5.5fixed in 13.1≥ unspecified, < 13.12025-03-10
CVE-2022-48610 [MEDIUM] CWE-200 CVE-2022-48610: This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13. This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2. An app may be able to access user-sensitive data.
nvd
CVE-2024-44179LOWCVSS 2.4fixed in 15.0fixed in 152025-03-10
CVE-2024-44179 [LOW] CWE-200 CVE-2024-44179: This issue was addressed by restricting options offered on a locked device. This issue is fixed in i This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a device may be able to read contact numbers from the lock screen.
nvd
CVE-2024-54558LOWCVSS 2.8fixed in 15.0fixed in 152025-03-10
CVE-2024-54558 [LOW] CWE-451 CVE-2024-54558: A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed i A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to trick a user into granting access to photos from the user's photo library.
nvd
CVE-2024-27859HIGHCVSS 8.8fixed in 14.42025-02-10
CVE-2024-27859 [HIGH] CWE-94 CVE-2024-27859: The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing web content may lead to arbitrary code execution.
nvd
CVE-2024-54658MEDIUMCVSS 6.5fixed in 14.42025-02-10
CVE-2024-54658 [MEDIUM] CWE-400 CVE-2024-54658: The issue was addressed with improved memory handling. This issue is fixed in Safari 17.4, iOS 17.4 The issue was addressed with improved memory handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing web content may lead to a denial-of-service.
nvd
CVE-2025-24099MEDIUMCVSS 5.1fixed in 13.7.3≥ 14.0, < 14.7.3+3 more2025-01-30
CVE-2025-24099 [MEDIUM] CWE-863 CVE-2025-24099: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonom The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. A local attacker may be able to elevate their privileges.
nvd
CVE-2024-54542CRITICALCVSS 9.1fixed in 15.22025-01-27
CVE-2024-54542 [CRITICAL] CWE-862 CVE-2024-54542: An authentication issue was addressed with improved state management. This issue is fixed in Safari An authentication issue was addressed with improved state management. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, watchOS 11.2. Private Browsing tabs may be accessed without authentication.
nvd
CVE-2025-24093CRITICALCVSS 9.8fixed in 13.7.3≥ 14.0, < 14.7.3+2 more2025-01-27
CVE-2025-24093 [CRITICAL] CWE-276 CVE-2025-24093: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access removable volumes without user consent.
nvd
CVE-2025-24154CRITICALCVSS 9.1fixed in 13.7.3≥ 14.0, < 14.7.3+3 more2025-01-27
CVE-2025-24154 [CRITICAL] CWE-787 CVE-2025-24154: An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 18.3 An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, visionOS 2.3. An attacker may be able to cause unexpected system termination or corrupt kernel memory.
nvd
CVE-2025-24085CRITICALCVSS 10.0KEVPoC≥ 13.0, < 13.7.5≥ 14.0, < 14.7.5+4 more2025-01-27
CVE-2025-24085 [CRITICAL] CWE-416 CVE-2025-24085: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18. A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have be
nvd
CVE-2024-54530CRITICALCVSS 9.1fixed in 15.22025-01-27
CVE-2024-54530 [CRITICAL] CWE-863 CVE-2024-54530: The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, visionOS 2.2, watchOS 11.2. Password autofill may fill in passwords after failing authentication.
nvd
CVE-2025-24102CRITICALCVSS 9.8≥ 13.0, < 13.7.3≥ 14.0, < 14.7.3+4 more2025-01-27
CVE-2025-24102 [CRITICAL] CWE-200 CVE-2025-24102: The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15 The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to determine a user’s current location.
nvd
CVE-2025-24146CRITICALCVSS 9.8fixed in 13.7.3≥ 14.0, < 14.7.3+3 more2025-01-27
CVE-2025-24146 [CRITICAL] CWE-200 CVE-2025-24146: This issue was addressed with improved redaction of sensitive information. This issue is fixed in ma This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. Deleting a conversation in Messages may expose user contact information in system logging.
nvd
CVE-2025-24137HIGHCVSS 8.0fixed in 14.7.3≥ 15.0, < 15.3+1 more2025-01-27
CVE-2025-24137 [HIGH] CWE-843 CVE-2025-24137: A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadO A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, tvOS 18.3, visionOS 2.3. An attacker on the local network may corrupt process memory.
nvd
CVE-2024-54468HIGHCVSS 8.2fixed in 13.7.2≥ 14.0, < 14.7.2+3 more2025-01-27
CVE-2024-54468 [HIGH] CVE-2024-54468: The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadO The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. An app may be able to break out of its sandbox.
nvd
CVE-2025-24126HIGHCVSS 7.3fixed in 15.3fixed in 13.7.5+1 more2025-01-27
CVE-2025-24126 [HIGH] CWE-400 CVE-2025-24126: An input validation issue was addressed. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequ An input validation issue was addressed. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3. An attacker on the local network may be able to corrupt process memory.
nvd
← Previous37 / 157Next →