Apple macOS vulnerabilities

3,135 known vulnerabilities affecting apple/macos.

Total CVEs
3,135
CISA KEV
75
actively exploited
Public exploits
44
Exploited in wild
61
Severity breakdown
CRITICAL203HIGH1362MEDIUM1421LOW149

Vulnerabilities

Page 43 of 157
CVE-2024-54489HIGHCVSS 7.8fixed in 13.7.2≥ 14.0, < 14.7.2+3 more2024-12-12
CVE-2024-54489 [HIGH] CWE-22 CVE-2024-54489: A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 1 A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. Running a mount command may unexpectedly execute arbitrary code.
nvd
CVE-2024-44245HIGHCVSS 7.1≥ 14.0, < 14.7.2≥ 15.0, < 15.2+2 more2024-12-12
CVE-2024-44245 [HIGH] CWE-787 CVE-2024-44245: The issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18 The issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, visionOS 2.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
nvd
CVE-2024-54508HIGHCVSS 7.5fixed in 15.22024-12-12
CVE-2024-54508 [HIGH] CVE-2024-54508: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to an unexpected process crash.
nvd
CVE-2024-44224HIGHCVSS 7.8≥ 13.0, < 13.7.2≥ 14.0, < 14.7.2+4 more2024-12-12
CVE-2024-44224 [HIGH] CWE-276 CVE-2024-44224: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A malicious app may be able to gain root privileges.
nvd
CVE-2024-54514HIGHCVSS 8.6≥ 13.0, < 13.7.2≥ 14.0, < 14.7.2+4 more2024-12-12
CVE-2024-54514 [HIGH] CVE-2024-54514: The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. An app may be able to break out of its sandbox.
nvd
CVE-2024-44291HIGHCVSS 7.8≥ 13.0, < 13.7.2≥ 14.0, < 14.7.2+4 more2024-12-12
CVE-2024-44291 [HIGH] CVE-2024-44291: A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2, A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A malicious app may be able to gain root privileges.
nvd
CVE-2024-54529HIGHCVSS 7.8≥ 13.0, < 13.7.2≥ 14.0, < 14.7.2+4 more2024-12-12
CVE-2024-54529 [HIGH] CWE-94 CVE-2024-54529: A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS S A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
nvd
CVE-2024-54505HIGHCVSS 8.8fixed in 15.22024-12-12
CVE-2024-54505 [HIGH] CWE-843 CVE-2024-54505: A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 18 A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to memory corruption.
nvd
CVE-2024-54500MEDIUMCVSS 5.5fixed in 13.7.2≥ 14.0, < 14.7.2+3 more2024-12-12
CVE-2024-54500 [MEDIUM] CVE-2024-54500: The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadO The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing a maliciously crafted image may result in disclosure of process memory.
nvd
CVE-2024-54526MEDIUMCVSS 5.5≤ 13.7.2≥ 14.0, ≤ 14.7.2+4 more2024-12-12
CVE-2024-54526 [MEDIUM] CVE-2024-54526: The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. A malicious app may be able to access private information.
nvd
CVE-2024-54527MEDIUMCVSS 5.5fixed in 13.7.2≥ 14.0, < 14.7.2+3 more2024-12-12
CVE-2024-54527 [MEDIUM] CVE-2024-54527: This issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macO This issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. An app may be able to access sensitive user data.
nvd
CVE-2024-54492MEDIUMCVSS 5.9fixed in 15.22024-12-12
CVE-2024-54492 [MEDIUM] CVE-2024-54492: This issue was addressed by using HTTPS when sending information over the network. This issue is fix This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, visionOS 2.2. An attacker in a privileged network position may be able to alter network traffic.
nvd
CVE-2024-44201MEDIUMCVSS 5.5≥ 13.0, < 13.7.2≥ 14.0, < 14.7.2+3 more2024-12-12
CVE-2024-44201 [MEDIUM] CWE-404 CVE-2024-44201: The issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18 The issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iPadOS 17.7.3, macOS Sequoia 15.1, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. Processing a malicious crafted file may lead to a denial-of-service.
nvd
CVE-2024-54504MEDIUMCVSS 5.5fixed in 15.22024-12-12
CVE-2024-54504 [MEDIUM] CWE-922 CVE-2024-54504: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data.
nvd
CVE-2024-44248MEDIUMCVSS 6.5≥ 13.0, < 13.7.2≥ 14.0, < 14.7.2+3 more2024-12-12
CVE-2024-44248 [MEDIUM] CVE-2024-44248: This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15. This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A user with screen sharing access may be able to view another user's screen.
nvd
CVE-2024-54476MEDIUMCVSS 5.5fixed in 13.7.2≥ 14.0, < 14.7.2+3 more2024-12-12
CVE-2024-54476 [MEDIUM] CWE-203 CVE-2024-54476: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonom The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access user-sensitive data.
nvd
CVE-2024-54486MEDIUMCVSS 6.5fixed in 13.7.2≥ 14.0, < 14.7.2+3 more2024-12-12
CVE-2024-54486 [MEDIUM] CVE-2024-54486: The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadO The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing a maliciously crafted font may result in the disclosure of process memory.
nvd
CVE-2024-54471MEDIUMCVSS 5.5fixed in 13.7.1≥ 14.0, < 14.7.1+2 more2024-12-12
CVE-2024-54471 [MEDIUM] CWE-522 CVE-2024-54471: This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15 This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious application may be able to leak a user's credentials.
nvd
CVE-2024-54490MEDIUMCVSS 5.5fixed in 15.22024-12-12
CVE-2024-54490 [MEDIUM] CWE-346 CVE-2024-54490: This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Sequoia 15.2. A This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Sequoia 15.2. A local attacker may gain access to user's Keychain items.
nvd
CVE-2024-54531MEDIUMCVSS 5.5fixed in 15.22024-12-12
CVE-2024-54531 [MEDIUM] CVE-2024-54531: The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. An The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. An app may be able to bypass kASLR.
nvd
← Previous43 / 157Next →