Apple macOS vulnerabilities

3,438 known vulnerabilities affecting apple/macos.

Total CVEs

3,438

CISA KEV

actively exploited

Public exploits

Exploited in wild

116

Severity breakdown

CRITICAL259HIGH1478MEDIUM1549LOW152

Vulnerabilities

SortPage 62 of 172

CVE-2019-8616P3HIGHCVSS 7.8≥ unspecified, < macOS Mojave 10.14.52019-12-18

CVE-2019-8616 [HIGH] CWE-787 CVE-2019-8616: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.

nvd

CVE-2019-8697P3HIGHCVSS 7.8≥ unspecified, < macOS Mojave 10.14.62019-12-18

CVE-2019-8697 [HIGH] CWE-787 CVE-2019-8697: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6. An application may be able to execute arbitrary code with system privileges.

nvd

CVE-2020-9900P3HIGHCVSS 7.8≥ unspecified, < macOS Catalina 10.15.62020-10-22

CVE-2020-9900 [HIGH] CWE-59 CVE-2020-9900: An issue existed within the path validation logic for symlinks. This issue was addressed with improv An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A local attacker may be able to elevate their privileges.

nvd

CVE-2023-42942P3HIGHCVSS 7.8≥ 13.0, < 13.6.1v14.0+2 more2024-02-21

CVE-2023-42942 [HIGH] CWE-59 CVE-2023-42942: This issue was addressed with improved handling of symlinks. This issue is fixed in watchOS 10.1, ma This issue was addressed with improved handling of symlinks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. A malicious app may be able to gain root privileges.

nvd

CVE-2022-46697P3HIGHCVSS 7.8fixed in 13.1≥ unspecified, < 13.12022-12-15

CVE-2022-46697 [HIGH] CWE-787 CVE-2022-46697: An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in ma An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.1. An app may be able to execute arbitrary code with kernel privileges.

nvd

CVE-2020-9927P3HIGHCVSS 7.8≥ unspecified, < macOS Catalina 10.15.62020-10-22

CVE-2020-9927 [HIGH] CWE-787 CVE-2020-9927: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6. An application may be able to execute arbitrary code with kernel privileges.

nvd

CVE-2025-30456P3HIGHCVSS 7.8fixed in 13.7.5≥ 14.0, < 14.7.5+3 more2025-03-31

CVE-2025-30456 [HIGH] CWE-281 CVE-2025-30456: A parsing issue in the handling of directory paths was addressed with improved path validation. This A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges.

nvd

CVE-2021-30927P3HIGHCVSS 7.8≥ 11.0, < 11.6.2≥ 12.0, < 12.1+4 more2021-08-24

CVE-2021-30927 [HIGH] CWE-416 CVE-2021-30927: A use after free issue was addressed with improved memory management. This issue is fixed in macOS B A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. An application may be able to execute arbitrary code with kernel privileges.

nvd

CVE-2022-42809P3HIGHCVSS 7.8fixed in 13.0≥ unspecified, < 132022-11-01

CVE-2022-42809 [HIGH] CWE-119 CVE-2022-42809: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. Proc The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted gcx file may lead to unexpected app termination or arbitrary code execution.

nvd

CVE-2020-9901P3HIGHCVSS 7.8≥ unspecified, < macOS Catalina 10.15.62020-10-22

CVE-2020-9901 [HIGH] CWE-59 CVE-2020-9901: An issue existed within the path validation logic for symlinks. This issue was addressed with improv An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8. A local attacker may be able to elevate their privileges.

nvd

CVE-2023-42926P3HIGHCVSS 7.8≥ 14.0, < 14.2≥ unspecified, < 14.22023-12-12

CVE-2023-42926 [HIGH] CWE-787 CVE-2023-42926: Multiple memory corruption issues were addressed with improved input validation. This issue is fixed Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

nvd

CVE-2024-27842P3HIGHCVSS 7.8≥ 14.0, < 14.5fixed in 14.52024-05-14

CVE-2024-27842 [HIGH] CWE-358 CVE-2024-27842: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app may b The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app may be able to execute arbitrary code with kernel privileges.

nvd

CVE-2023-36854P3HIGHCVSS 7.8≥ 11.0, < 11.7.9≥ 12.0.0, < 12.6.8+4 more2023-07-27

CVE-2023-36854 [HIGH] CVE-2023-36854: The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, macOS Ve The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. Processing a file may lead to unexpected app termination or arbitrary code execution.

nvd

CVE-2022-42805P3HIGHCVSS 7.8≥ 12.0.0, < 12.5≥ unspecified, < 12.5+1 more2022-12-15

CVE-2022-42805 [HIGH] CWE-190 CVE-2022-42805: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 15.6 an An integer overflow was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.

nvd

CVE-2024-44255P3HIGHCVSS 7.8fixed in 13.7.1≥ 14.0, < 14.7.1+2 more2024-10-28

CVE-2024-44255 [HIGH] CWE-22 CVE-2024-44255: A path handling issue was addressed with improved logic. This issue is fixed in iOS 18.1 and iPadOS A path handling issue was addressed with improved logic. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. A malicious app may be able to run arbitrary shortcuts without user consent.

nvd

CVE-2025-43277P3HIGHCVSS 7.8fixed in 14.8fixed in 15.62025-07-30

CVE-2025-43277 [HIGH] CWE-119 CVE-2025-43277: The issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18 The issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.8, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a maliciously crafted audio file may lead to memory corruption.

nvd

CVE-2023-41995P3HIGHCVSS 7.8fixed in 14.0≥ unspecified, < 142023-09-27

CVE-2023-41995 [HIGH] CWE-416 CVE-2023-41995: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.

nvd

CVE-2020-3915P3HIGHCVSS 7.8≥ unspecified, < macOS Catalina 10.15.42020-10-22

CVE-2020-3915 [HIGH] CVE-2020-3915: A path handling issue was addressed with improved validation. This issue is fixed in macOS Catalina A path handling issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to overwrite arbitrary files.

nvd

CVE-2023-38615P3HIGHCVSS 7.8fixed in 14.0≥ unspecified, < 142023-09-27

CVE-2023-38615 [HIGH] CVE-2023-38615: The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14. An ap The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.

nvd

CVE-2020-27899P3HIGHCVSS 7.8fixed in 11.0.1≥ unspecified, < 11.02021-04-02

CVE-2020-27899 [HIGH] CWE-416 CVE-2020-27899: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14. A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1, watchOS 7.1, tvOS 14.2. A local attacker may be able to elevate their privileges.

nvd

← Previous62 / 172Next →