Apple macOS vulnerabilities

3,135 known vulnerabilities affecting apple/macos.

Total CVEs
3,135
CISA KEV
75
actively exploited
Public exploits
44
Exploited in wild
61
Severity breakdown
CRITICAL203HIGH1362MEDIUM1421LOW149

Vulnerabilities

Page 40 of 157
CVE-2024-54549MEDIUMCVSS 5.5fixed in 15.22025-01-27
CVE-2024-54549 [MEDIUM] CWE-922 CVE-2024-54549: This issue was addressed with improved redaction of sensitive information. This issue is fixed in ma This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data.
nvd
CVE-2025-24127MEDIUMCVSS 5.5fixed in 13.7.3≥ 14.0, < 14.7.3+3 more2025-01-27
CVE-2025-24127 [MEDIUM] CWE-770 CVE-2025-24127: The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadO The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.3, visionOS 2.3. Parsing a file may lead to an unexpected app termination.
nvd
CVE-2024-54523MEDIUMCVSS 6.3fixed in 15.22025-01-27
CVE-2024-54523 [MEDIUM] CWE-787 CVE-2024-54523: The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2 The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2. An app may be able to corrupt coprocessor memory.
nvd
CVE-2025-24139MEDIUMCVSS 5.5fixed in 13.7.3≥ 14.0, < 14.7.3+4 more2025-01-27
CVE-2025-24139 [MEDIUM] CWE-787 CVE-2025-24139: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonom The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, macOS Ventura 13.7.5. Parsing a maliciously crafted file may lead to an unexpected app termination.
nvd
CVE-2024-54519MEDIUMCVSS 5.5fixed in 14.7.2≥ 15.0, < 15.2+1 more2025-01-27
CVE-2024-54519 [MEDIUM] CWE-532 CVE-2024-54519: The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2, macOS Sonom The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. An app may be able to read sensitive location information.
nvd
CVE-2025-24130MEDIUMCVSS 5.5fixed in 13.7.3≥ 14.0, < 14.7.3+3 more2025-01-27
CVE-2025-24130 [MEDIUM] CVE-2025-24130: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonom The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to modify protected parts of the file system.
nvd
CVE-2025-24131MEDIUMCVSS 6.5fixed in 15.3fixed in 13.7.5+1 more2025-01-27
CVE-2025-24131 [MEDIUM] CWE-120 CVE-2025-24131: The issue was addressed with improved memory handling. This issue is fixed in iOS 18.3 and iPadOS 18 The issue was addressed with improved memory handling. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3. An attacker on the local network may be able to cause a denial-of-service.
nvd
CVE-2025-24158MEDIUMCVSS 6.5fixed in 15.32025-01-27
CVE-2025-24158 [MEDIUM] CWE-79 CVE-2025-24158: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.3, iOS 18.3 The issue was addressed with improved memory handling. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Processing web content may lead to a denial-of-service.
nvd
CVE-2025-24163MEDIUMCVSS 5.5fixed in 14.7.3≥ 15.0, < 15.3+2 more2025-01-27
CVE-2025-24163 [MEDIUM] CVE-2025-24163: The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iOS 1 The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sequoia 15.4, macOS Sonoma 14.7.3, tvOS 18.3, tvOS 18.4, visionOS 2.3, visionOS 2.4, watchOS 11.3, watchOS 11.4. Parsing a file may lead to an unexpected app termination.
nvd
CVE-2025-24114MEDIUMCVSS 5.5fixed in 13.7.3≥ 14.0, < 14.7.3+3 more2025-01-27
CVE-2025-24114 [MEDIUM] CWE-863 CVE-2025-24114: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to modify protected parts of the file system.
nvd
CVE-2025-24106MEDIUMCVSS 5.5fixed in 13.7.3≥ 14.0, < 14.7.3+3 more2025-01-27
CVE-2025-24106 [MEDIUM] CVE-2025-24106: This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15 This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to cause unexpected system termination.
nvd
CVE-2024-54520MEDIUMCVSS 5.5fixed in 13.7.2≥ 14.0, < 14.7.2+3 more2025-01-27
CVE-2024-54520 [MEDIUM] CWE-22 CVE-2024-54520: A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 1 A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to overwrite arbitrary files.
nvd
CVE-2025-24149MEDIUMCVSS 5.5fixed in 13.7.3≥ 14.0, < 14.7.3+3 more2025-01-27
CVE-2025-24149 [MEDIUM] CWE-125 CVE-2025-24149: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.3 a An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Parsing a file may lead to disclosure of user information.
nvd
CVE-2025-24123MEDIUMCVSS 5.5fixed in 13.7.3≥ 14.0, < 14.7.3+3 more2025-01-27
CVE-2025-24123 [MEDIUM] CVE-2025-24123: The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadO The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Parsing a file may lead to an unexpected app termination.
nvd
CVE-2024-54547MEDIUMCVSS 5.5≥ 13.0, < 13.7.2≥ 14.0, < 14.7.2+4 more2025-01-27
CVE-2024-54547 [MEDIUM] CWE-200 CVE-2024-54547: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonom The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access protected user data.
nvd
CVE-2025-24094MEDIUMCVSS 4.7fixed in 13.7.3≥ 14.0, < 14.7.3+3 more2025-01-27
CVE-2025-24094 [MEDIUM] CWE-362 CVE-2025-24094: A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.3 A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access user-sensitive data.
nvd
CVE-2025-24138MEDIUMCVSS 5.5fixed in 13.7.3≥ 14.0, < 14.7.3+3 more2025-01-27
CVE-2025-24138 [MEDIUM] CWE-200 CVE-2025-24138: This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15. This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. A malicious application may be able to leak sensitive user information.
nvd
CVE-2025-24103MEDIUMCVSS 5.5fixed in 13.7.3≥ 14.0, < 14.7.3+3 more2025-01-27
CVE-2025-24103 [MEDIUM] CWE-59 CVE-2025-24103: This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access protected user data.
nvd
CVE-2024-54536MEDIUMCVSS 5.5fixed in 15.22025-01-27
CVE-2024-54536 [MEDIUM] CVE-2024-54536: The issue was addressed with improved validation of environment variables. This issue is fixed in ma The issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15.2. An app may be able to edit NVRAM variables.
nvd
CVE-2025-24112MEDIUMCVSS 5.5fixed in 14.7.3≥ 15.0, < 15.3+1 more2025-01-27
CVE-2025-24112 [MEDIUM] CWE-770 CVE-2025-24112: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonom The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3. Parsing a file may lead to an unexpected app termination.
nvd
← Previous40 / 157Next →