Apple macOS vulnerabilities

3,438 known vulnerabilities affecting apple/macos.

Total CVEs

3,438

CISA KEV

actively exploited

Public exploits

Exploited in wild

116

Severity breakdown

CRITICAL259HIGH1477MEDIUM1550LOW152

Vulnerabilities

SortPage 40 of 172

CVE-2020-9980P3HIGHCVSS 7.8≥ unspecified, < macOS Catalina 10.15.62020-10-22

CVE-2020-9980 [HIGH] CWE-787 CVE-2020-9980: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted font file may lead to arbitrary code execution.

nvd

CVE-2021-1744P3HIGHCVSS 7.8≥ 11.0.1, < 11.2≥ unspecified, < 11.2+2 more2021-04-02

CVE-2021-1744 [HIGH] CWE-787 CVE-2021-1744: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Bi An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.

nvd

CVE-2021-30752P3HIGHCVSS 7.8≥ 11.0, < 11.3≥ unspecified, < 11.32021-09-08

CVE-2021-30752 [HIGH] CWE-125 CVE-2021-30752: Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An out-of-bounds read was addressed with improved input validation.

nvd

CVE-2022-22633P3HIGHCVSS 7.8fixed in 12.3≥ unspecified, < 12.3+1 more2022-03-18

CVE-2022-22633 [HIGH] CWE-787 CVE-2022-22633: A memory corruption issue was addressed with improved state management. This issue is fixed in watch A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, macOS Monterey 12.3. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution.

nvd

CVE-2021-30958P3HIGHCVSS 7.8≥ 11.0, < 11.6.2≥ 12.0, < 12.1+4 more2021-08-24

CVE-2021-30958 [HIGH] CWE-125 CVE-2021-30958: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Playing a malicious audio file may lead to arbitrary code execution.

nvd

CVE-2021-1805P3HIGHCVSS 7.8≥ 11.0, < 11.2≥ unspecified, < 11.22021-04-02

CVE-2021-1805 [HIGH] CWE-787 CVE-2021-1805: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Bi An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, macOS Mojave 10.14.6 Security Update 2021-002. An application may be able to execute arbitrary code with kernel privileges.

nvd

CVE-2021-30653P3HIGHCVSS 7.8≥ 11.0, < 11.3≥ unspecified, < 11.32021-09-08

CVE-2021-30653 [HIGH] CVE-2021-30653: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 a This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted image may lead to arbitrary code execution.

nvd

CVE-2021-1858P3HIGHCVSS 7.8≥ 11.0, < 11.3≥ unspecified, < 11.3+1 more2021-09-08

CVE-2021-1858 [HIGH] CWE-787 CVE-2021-1858: Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An out-of-bounds write issue was addressed with improved bounds checking.

nvd

CVE-2023-40404P3HIGHCVSS 7.8v14.0≥ unspecified, < 14.12023-10-25

CVE-2023-40404 [HIGH] CWE-416 CVE-2023-40404: A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS S A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14.1. An app may be able to execute arbitrary code with kernel privileges.

nvd

CVE-2022-22640P3HIGHCVSS 7.8≥ 12.0, < 12.3≥ unspecified, < 12.32022-03-18

CVE-2022-22640 [HIGH] CWE-787 CVE-2022-22640: A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. An application may be able to execute arbitrary code with kernel privileges.

nvd

CVE-2021-1762P3HIGHCVSS 7.8≥ 11.0, < 11.2≥ unspecified, < 11.22021-09-08

CVE-2021-1762 [HIGH] CWE-787 CVE-2021-1762: An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

nvd

CVE-2020-27923P3HIGHCVSS 7.8≥ unspecified, < 11.0≥ unspecified, < 11.12021-04-02

CVE-2020-27923 [HIGH] CWE-787 CVE-2020-27923: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Bi An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, watchOS 7.1, tvOS 14.2. Processing a maliciously crafted image may lead to arbitrary code execution.

nvd

CVE-2020-10015P3HIGHCVSS 7.8≥ 11.0, < 11.1≥ unspecified, < 11.0+1 more2021-04-02

CVE-2020-10015 [HIGH] CWE-787 CVE-2020-10015: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.

nvd

CVE-2021-30834P3HIGHCVSS 7.8≥ 11.0, < 11.62021-10-28

CVE-2021-30834 [HIGH] CVE-2021-30834: A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPad A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, watchOS 8, Security Update 2021-007 Catalina. Processing a malicious audio file may result in unexpected application termination or arbitrary code execution.

nvd

CVE-2022-22611P3HIGHCVSS 7.8≥ 12.0, < 12.3≥ unspecified, < 12.32022-03-18

CVE-2022-22611 [HIGH] CWE-125 CVE-2022-22611: An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4 An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to arbitrary code execution.

nvd

CVE-2021-1785P3HIGHCVSS 7.8≥ 11.0, < 11.2≥ unspecified, < 11.2+2 more2021-04-02

CVE-2021-1785 [HIGH] CWE-125 CVE-2021-1785: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.

nvd

CVE-2020-29624P3HIGHCVSS 7.8≥ 11.0, < 11.1.0≥ unspecified, < 11.12021-04-02

CVE-2020-29624 [HIGH] CWE-787 CVE-2020-29624: A memory corruption issue existed in the processing of font files. This issue was addressed with imp A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted font file may lead to arbitrary cod

nvd

CVE-2020-9844P3HIGHCVSS 7.5≥ unspecified, < macOS Catalina 10.15.52020-06-09

CVE-2020-9844 [HIGH] CWE-415 CVE-2020-9844: A double free issue was addressed with improved memory management. This issue is fixed in iOS 13.5 a A double free issue was addressed with improved memory management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.

nvd

CVE-2020-29611P3HIGHCVSS 7.8≥ 11.0, < 11.1.0≥ unspecified, < 11.1+1 more2021-04-02

CVE-2020-29611 [HIGH] CWE-787 CVE-2020-29611: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvO An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, iCloud for Windows 12.0, watchOS 7.2. Processing a maliciously crafted image may lead to arbitrary code execution.

nvd

CVE-2020-9955P3HIGHCVSS 7.8≥ 11.0, < 11.0.1≥ unspecified, < 11.02021-04-02

CVE-2020-9955 [HIGH] CWE-787 CVE-2020-9955: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in wat An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0, macOS Big Sur 11.0.1. Processing a maliciously crafted image may lead to arbitrary code execution.

nvd

← Previous40 / 172Next →