Apple macOS vulnerabilities

3,135 known vulnerabilities affecting apple/macos.

Total CVEs
3,135
CISA KEV
75
actively exploited
Public exploits
44
Exploited in wild
61
Severity breakdown
CRITICAL203HIGH1362MEDIUM1421LOW149

Vulnerabilities

Page 69 of 157
CVE-2023-42901HIGHCVSS 7.8≥ 14.0, < 14.2≥ unspecified, < 14.22023-12-12
CVE-2023-42901 [HIGH] CWE-787 CVE-2023-42901: Multiple memory corruption issues were addressed with improved input validation. This issue is fixed Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
nvd
CVE-2023-42906HIGHCVSS 7.8≥ 14.0, < 14.2≥ unspecified, < 14.22023-12-12
CVE-2023-42906 [HIGH] CWE-787 CVE-2023-42906: Multiple memory corruption issues were addressed with improved input validation. This issue is fixed Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
nvd
CVE-2023-42902HIGHCVSS 7.8≥ 14.0, < 14.2≥ unspecified, < 14.22023-12-12
CVE-2023-42902 [HIGH] CWE-787 CVE-2023-42902: Multiple memory corruption issues were addressed with improved input validation. This issue is fixed Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
nvd
CVE-2023-42882HIGHCVSS 7.8≥ 14.0, < 14.2≥ unspecified, < 14.22023-12-12
CVE-2023-42882 [HIGH] CWE-787 CVE-2023-42882: The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2. Pro The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2. Processing an image may lead to arbitrary code execution.
nvd
CVE-2023-42909HIGHCVSS 7.8≥ 14.0, < 14.2≥ unspecified, < 14.22023-12-12
CVE-2023-42909 [HIGH] CWE-787 CVE-2023-42909: Multiple memory corruption issues were addressed with improved input validation. This issue is fixed Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
nvd
CVE-2023-42905HIGHCVSS 7.8≥ 14.0, < 14.2≥ unspecified, < 14.22023-12-12
CVE-2023-42905 [HIGH] CWE-787 CVE-2023-42905: Multiple memory corruption issues were addressed with improved input validation. This issue is fixed Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
nvd
CVE-2023-42894MEDIUMCVSS 5.5≥ 12.0.0, < 12.7.2≥ 13.0, < 13.6.3+4 more2023-12-12
CVE-2023-42894 [MEDIUM] CVE-2023-42894: This issue was addressed with improved redaction of sensitive information. This issue is fixed in ma This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. An app may be able to access information about a user's contacts.
nvd
CVE-2023-42932MEDIUMCVSS 5.5≥ 12.0, < 12.7.2≥ 13.0, < 13.6.3+4 more2023-12-12
CVE-2023-42932 [MEDIUM] CVE-2023-42932: A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2, macOS Ve A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. An app may be able to access protected user data.
nvd
CVE-2023-42891MEDIUMCVSS 5.5≥ 12.0.0, < 12.7.2≥ 13.0, < 13.6.3+4 more2023-12-12
CVE-2023-42891 [MEDIUM] CVE-2023-42891: An authentication issue was addressed with improved state management. This issue is fixed in macOS S An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. An app may be able to monitor keystrokes without user permission.
nvd
CVE-2023-42883MEDIUMCVSS 5.5≥ 14.0, < 14.2≥ unspecified, < 14.22023-12-12
CVE-2023-42883 [MEDIUM] CVE-2023-42883: The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Son The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3. Processing an image may lead to a denial-of-service.
nvd
CVE-2023-42900MEDIUMCVSS 5.5≥ 14.0, < 14.2≥ unspecified, < 14.22023-12-12
CVE-2023-42900 [MEDIUM] CVE-2023-42900: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2. An app may b The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2. An app may be able to access user-sensitive data.
nvd
CVE-2023-42914MEDIUMCVSS 6.3≥ 12.0.0, < 12.7.2≥ 13.0, < 13.6.3+4 more2023-12-12
CVE-2023-42914 [MEDIUM] CVE-2023-42914: The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, macOS Ventura 13.6.3, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Monterey 12.7.2. An app may be able to break out of its sandbox.
nvd
CVE-2023-42922MEDIUMCVSS 5.5≥ 12.0.0, < 12.7.2≥ 13.0, < 13.6.3+4 more2023-12-12
CVE-2023-42922 [MEDIUM] CVE-2023-42922: This issue was addressed with improved redaction of sensitive information. This issue is fixed in ma This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, macOS Ventura 13.6.3, iOS 16.7.3 and iPadOS 16.7.3, macOS Monterey 12.7.2. An app may be able to read sensitive location information.
nvd
CVE-2023-42898MEDIUMCVSS 5.5≥ 14.0, < 14.2≥ unspecified, < 14.22023-12-12
CVE-2023-42898 [MEDIUM] CVE-2023-42898: The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, wat The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, watchOS 10.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2. Processing an image may lead to arbitrary code execution.
nvd
CVE-2023-42924MEDIUMCVSS 5.5≥ 13.0, < 13.6.3≥ 14.0, < 14.2+2 more2023-12-12
CVE-2023-42924 [MEDIUM] CWE-732 CVE-2023-42924: A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2, macOS Ve A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3. An app may be able to access sensitive user data.
nvd
CVE-2023-42884MEDIUMCVSS 5.5≥ 13.0, < 13.6.3≥ 14.0, < 14.2+2 more2023-12-12
CVE-2023-42884 [MEDIUM] CWE-200 CVE-2023-42884: This issue was addressed with improved redaction of sensitive information. This issue is fixed in ma This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, macOS Ventura 13.6.3, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3. An app may be able to disclose kernel memory.
nvd
CVE-2023-42919MEDIUMCVSS 5.5≥ 12.0.0, < 12.7.2≥ 13.0, < 13.6.3+4 more2023-12-12
CVE-2023-42919 [MEDIUM] CVE-2023-42919: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, macOS Ventura 13.6.3, iOS 16.7.3 and iPadOS 16.7.3, macOS Monterey 12.7.2. An app may be able to access sensitive user data.
nvd
CVE-2023-42874LOWCVSS 2.4≥ 14.0, < 14.2≥ unspecified, < 14.22023-12-12
CVE-2023-42874 [LOW] CVE-2023-42874: This issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.2. S This issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.2. Secure text fields may be displayed via the Accessibility Keyboard when using a physical keyboard.
nvd
CVE-2023-45866MEDIUMCVSS 6.3v12.6.7v13.3.3+1 more2023-12-08
CVE-2023-45866 [MEDIUM] CVE-2023-45866: Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate an Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ub
nvd
CVE-2023-42917HIGHCVSS 8.8KEV≥ 14.0, < 14.1.2≥ unspecified, < 14.12023-11-30
CVE-2023-42917 [HIGH] CWE-787 CVE-2023-42917: A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17 A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.
nvd
← Previous69 / 157Next →