Apple macOS vulnerabilities
3,438 known vulnerabilities affecting apple/macos.
Total CVEs
3,438
CISA KEV
75
actively exploited
Public exploits
68
Exploited in wild
116
Severity breakdown
CRITICAL259HIGH1478MEDIUM1549LOW152
Vulnerabilities
Page 48 of 172
CVE-2020-9954P3HIGHCVSS 7.8≥ unspecified, < 10.15≥ unspecified, < 14.02020-12-08
CVE-2020-9954 [HIGH] CWE-120 CVE-2020-9954: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 7.0, tvOS 14.0, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave, iOS 14.0 and iPadOS 14.0. Playing a malicious audio file may lead to arbitrary code execution.
nvd
CVE-2020-3880P3HIGHCVSS 7.8≥ unspecified, < 10.15≥ unspecified, < 13.3+1 more2020-10-27
CVE-2020-3880 [HIGH] CWE-125 CVE-2020-3880: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 6
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 6.1.2, iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2020-9904P3HIGHCVSS 7.8≥ unspecified, < macOS Catalina 10.15.62020-10-22
CVE-2020-9904 [HIGH] CWE-787 CVE-2020-9904: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 1
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. An application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2020-9816P3HIGHCVSS 7.8≥ unspecified, < macOS Catalina 10.15.52020-06-09
CVE-2020-9816 [HIGH] CWE-787 CVE-2020-9816: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution.
nvd
CVE-2020-10004P3HIGHCVSS 7.8≥ unspecified, < 11.02020-12-08
CVE-2020-10004 [HIGH] CVE-2020-10004: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
nvd
CVE-2019-8786P3HIGHCVSS 7.8≥ unspecified, < macOS Catalina 10.15.12019-12-18
CVE-2019-8786 [HIGH] CWE-787 CVE-2019-8786: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2019-8831P3HIGHCVSS 7.8≥ unspecified, < 10.152020-10-27
CVE-2019-8831 [HIGH] CWE-787 CVE-2019-8831: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15, iOS 13.1 and iPadOS 13.1, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6. An application may be able to execute arbitrary code with system privileges.
nvd
CVE-2019-8838P3HIGHCVSS 7.8≥ unspecified, < 10.15≥ unspecified, < 6.1+1 more2020-10-27
CVE-2019-8838 [HIGH] CWE-787 CVE-2019-8838: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3 and iPadOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, tvOS 13.3. An application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2019-8833P3HIGHCVSS 7.8≥ unspecified, < 10.15≥ unspecified, < 6.1+1 more2020-10-27
CVE-2019-8833 [HIGH] CWE-787 CVE-2019-8833: A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.3 and iPadOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, tvOS 13.3. An application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2021-30748P3HIGHCVSS 7.8fixed in 11.5≥ unspecified, < 11.52021-09-08
CVE-2021-30748 [HIGH] CWE-787 CVE-2021-30748: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 1
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. An application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2020-3842P3HIGHCVSS 7.8≥ unspecified, < macOS Catalina 10.15.32020-02-27
CVE-2020-3842 [HIGH] CWE-787 CVE-2020-3842: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2020-9814P3HIGHCVSS 7.8≥ unspecified, < macOS Catalina 10.15.52020-06-09
CVE-2020-9814 [HIGH] CWE-787 CVE-2020-9814: A logic issue existed resulting in memory corruption. This was addressed with improved state managem
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2020-9813P3HIGHCVSS 7.8≥ unspecified, < macOS Catalina 10.15.52020-06-09
CVE-2020-9813 [HIGH] CWE-787 CVE-2020-9813: A logic issue existed resulting in memory corruption. This was addressed with improved state managem
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2020-3853P3HIGHCVSS 7.8≥ unspecified, < macOS Catalina 10.15.32020-02-27
CVE-2020-3853 [HIGH] CWE-843 CVE-2020-3853: A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. A malicious application may be able to execute arbitrary code with system privileges.
nvd
CVE-2020-9878P3HIGHCVSS 7.8≥ unspecified, < macOS Catalina 10.15.62020-10-16
CVE-2020-9878 [HIGH] CWE-120 CVE-2020-9878: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
nvd
CVE-2020-9821P3HIGHCVSS 7.8≥ unspecified, < macOS Catalina 10.15.52020-06-09
CVE-2020-9821 [HIGH] CWE-787 CVE-2020-9821: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 1
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2019-8828P3HIGHCVSS 7.8≥ unspecified, < 10.15≥ unspecified, < 6.1+1 more2020-10-27
CVE-2019-8828 [HIGH] CWE-787 CVE-2019-8828: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3 and iPadOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, tvOS 13.3. An application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2020-9852P3HIGHCVSS 7.8≥ unspecified, < macOS Catalina 10.15.52020-06-09
CVE-2020-9852 [HIGH] CWE-190 CVE-2020-9852: An integer overflow was addressed through improved input validation. This issue is fixed in iOS 13.5
An integer overflow was addressed through improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2021-30780P3HIGHCVSS 7.8≥ 11.0, < 11.5≥ unspecified, < 11.5+3 more2021-09-08
CVE-2021-30780 [HIGH] CWE-787 CVE-2021-30780: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. A malicious application may be able to gain root privileges.
nvd
CVE-2020-3877P3HIGHCVSS 7.5≥ unspecified, < macOS Catalina 10.15.32020-02-27
CVE-2020-3877 [HIGH] CWE-125 CVE-2020-3877: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Cat
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3, watchOS 6.1.2. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
nvd