Apple macOS vulnerabilities

3,135 known vulnerabilities affecting apple/macos.

Total CVEs

3,135

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL203HIGH1362MEDIUM1421LOW149

Vulnerabilities

Page 81 of 157

CVE-2023-32439HIGHCVSS 8.8KEV≥ 13.0, < 13.4.1≥ unspecified, < 13.42023-06-23

CVE-2023-32439 [HIGH] CWE-843 CVE-2023-32439: A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPa A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

nvd

CVE-2023-32413HIGHCVSS 7.0≥ 11.0, < 11.7.7≥ 12.0, < 12.6.6+4 more2023-06-23

CVE-2023-32413 [HIGH] CWE-362 CVE-2023-32413: A race condition was addressed with improved state handling. This issue is fixed in watchOS 9.5, tvO A race condition was addressed with improved state handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to gain root privileges.

nvd

CVE-2023-32373HIGHCVSS 8.8KEVfixed in 13.4≥ unspecified, < 13.42023-06-23

CVE-2023-32373 [HIGH] CWE-416 CVE-2023-32373: A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively

nvd

CVE-2023-32434HIGHCVSS 7.8KEV≥ 11.0, < 11.7.8≥ 12.0.0, < 12.6.7+4 more2023-06-23

CVE-2023-32434 [HIGH] CWE-190 CVE-2023-32434: An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5 An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this i

nvd

CVE-2023-32414HIGHCVSS 8.6≥ 13.0, < 13.4≥ unspecified, < 13.42023-06-23

CVE-2023-32414 [HIGH] CWE-326 CVE-2023-32414: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.4. An app may The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.4. An app may be able to break out of its sandbox.

nvd

CVE-2023-32380HIGHCVSS 7.8≥ 11.0, < 11.7.7≥ 12.0.0, < 12.6.6+4 more2023-06-23

CVE-2023-32380 [HIGH] CWE-787 CVE-2023-32380: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. Processing a 3D model may lead to arbitrary code execution.

nvd

CVE-2023-23539HIGHCVSS 7.8≥ 13.0, < 13.2≥ unspecified, < 13.22023-06-23

CVE-2023-23539 [HIGH] CWE-120 CVE-2023-23539: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ve A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution.

nvd

CVE-2023-32420HIGHCVSS 7.1≥ 13.0, < 13.4≥ unspecified, < 13.42023-06-23

CVE-2023-32420 [HIGH] CWE-125 CVE-2023-32420: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to cause unexpected system termination or read kernel memory.

nvd

CVE-2023-32405HIGHCVSS 7.8≥ 11.0, < 11.7.7≥ 12.0, < 12.6.6+4 more2023-06-23

CVE-2023-32405 [HIGH] CWE-276 CVE-2023-32405: A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.7, macOS A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to gain root privileges.

nvd

CVE-2023-27930HIGHCVSS 7.8≥ 13.0, < 13.4≥ unspecified, < 13.42023-06-23

CVE-2023-27930 [HIGH] CWE-843 CVE-2023-27930: A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadO A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to execute arbitrary code with kernel privileges.

nvd

CVE-2023-32398HIGHCVSS 7.8≥ 11.0, < 11.7.7≥ 12.0, < 12.6.6+4 more2023-06-23

CVE-2023-32398 [HIGH] CWE-416 CVE-2023-32398: A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to execute arbitrary code with kernel privileges.

nvd

CVE-2023-32384HIGHCVSS 7.8≥ 11.0.0, < 11.7.7≥ 12.0.0, < 12.6.6+4 more2023-06-23

CVE-2023-32384 [HIGH] CWE-120 CVE-2023-32384: A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 9.5, t A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. Processing an image may lead to arbitrary code execution.

nvd

CVE-2023-32357HIGHCVSS 7.1≥ 11.0, < 11.7.7≥ 12.0.0, < 12.6.6+4 more2023-06-23

CVE-2023-32357 [HIGH] CWE-125 CVE-2023-32357: An authorization issue was addressed with improved state management. This issue is fixed in watchOS An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permission is revoked.

nvd

CVE-2023-32435HIGHCVSS 8.8KEV≥ 13.0, < 13.3≥ unspecified, < 13.32023-06-23

CVE-2023-32435 [HIGH] CWE-787 CVE-2023-32435: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released

nvd

CVE-2023-32369MEDIUMCVSS 6.0≥ 11.0, < 11.7.7≥ 12.0, < 12.6.6+4 more2023-06-23

CVE-2023-32369 [MEDIUM] CVE-2023-32369: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11. A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to modify protected parts of the file system.

nvd

CVE-2023-32367MEDIUMCVSS 5.5≥ 13.0, < 13.4≥ unspecified, < 13.42023-06-23

CVE-2023-32367 [MEDIUM] CVE-2023-32367: This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5 This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. An app may be able to access user-sensitive data.

nvd

CVE-2023-32372MEDIUMCVSS 5.5≥ 13.0, < 13.4≥ unspecified, < 13.42023-06-23

CVE-2023-32372 [MEDIUM] CWE-125 CVE-2023-32372: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. Processing an image may result in disclosure of process memory.

nvd

CVE-2023-32355MEDIUMCVSS 5.5≥ 11.0, < 11.7.7≥ 12.0.0, < 12.6.6+4 more2023-06-23

CVE-2023-32355 [MEDIUM] CWE-281 CVE-2023-32355: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11. A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to modify protected parts of the file system.

nvd

CVE-2023-32368MEDIUMCVSS 5.5≥ 12.0.0, < 12.6.6≥ 13.0, < 13.4+2 more2023-06-23

CVE-2023-32368 [MEDIUM] CWE-125 CVE-2023-32368: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9 An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. Processing a 3D model may result in disclosure of process memory.

nvd

CVE-2023-32399MEDIUMCVSS 5.5≥ 13.0, < 13.4≥ unspecified, < 13.42023-06-23

CVE-2023-32399 [MEDIUM] CWE-276 CVE-2023-32399: The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.5 and iPadOS The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to read sensitive location information.

nvd

← Previous81 / 157Next →