Apple macOS vulnerabilities

3,135 known vulnerabilities affecting apple/macos.

Total CVEs
3,135
CISA KEV
75
actively exploited
Public exploits
44
Exploited in wild
61
Severity breakdown
CRITICAL203HIGH1362MEDIUM1421LOW149

Vulnerabilities

Page 86 of 157
CVE-2023-23538MEDIUMCVSS 5.5fixed in 12.6.4≥ 13.0, < 13.3+2 more2023-05-08
CVE-2023-23538 [MEDIUM] CWE-863 CVE-2023-23538: A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS M A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. An app may be able to modify protected parts of the file system.
nvd
CVE-2023-27942MEDIUMCVSS 5.5fixed in 12.6.4≥ 13.0, < 13.3+3 more2023-05-08
CVE-2023-27942 [MEDIUM] CWE-922 CVE-2023-27942: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 an The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data.
nvd
CVE-2023-23535MEDIUMCVSS 5.5fixed in 11.7.5≥ 13.0, < 13.3+3 more2023-05-08
CVE-2023-23535 [MEDIUM] CWE-120 CVE-2023-23535: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iO The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.6, tvOS 16.4, watchOS 9.4. Processing a maliciously crafted image may result in disclosure of process memory.
nvd
CVE-2023-27952MEDIUMCVSS 4.7fixed in 13.3≥ unspecified, < 13.32023-05-08
CVE-2023-27952 [MEDIUM] CWE-362 CVE-2023-27952: A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks.
nvd
CVE-2023-23527MEDIUMCVSS 5.5fixed in 11.7.5≥ 12.0, < 12.6.4+4 more2023-05-08
CVE-2023-23527 [MEDIUM] CVE-2023-23527: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 an The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. A user may gain access to protected parts of the file system.
nvd
CVE-2023-23533MEDIUMCVSS 5.5fixed in 12.6.4≥ 13.0, < 13.3+2 more2023-05-08
CVE-2023-23533 [MEDIUM] CVE-2023-23533: A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS M A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. An app may be able to modify protected parts of the file system.
nvd
CVE-2023-27966MEDIUMCVSS 6.3≥ 13.0, < 13.3≥ unspecified, < 13.32023-05-08
CVE-2023-27966 [MEDIUM] CVE-2023-27966: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may be able to break out of its sandbox.
nvd
CVE-2023-27929MEDIUMCVSS 5.5fixed in 13.3≥ unspecified, < 13.32023-05-08
CVE-2023-27929 [MEDIUM] CWE-125 CVE-2023-27929: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ven An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. Processing a maliciously crafted image may result in disclosure of process memory.
nvd
CVE-2023-27931MEDIUMCVSS 5.5fixed in 13.3≥ unspecified, < 13.3+2 more2023-05-08
CVE-2023-27931 [MEDIUM] CWE-203 CVE-2023-27931: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.3, This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.3, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data.
nvd
CVE-2023-28190MEDIUMCVSS 5.5fixed in 13.3≥ unspecified, < 13.32023-05-08
CVE-2023-28190 [MEDIUM] CVE-2023-28190: A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixe A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in macOS Ventura 13.3. An app may be able to access user-sensitive data.
nvd
CVE-2023-27945MEDIUMCVSS 6.3≥ unspecified, < 12.6≥ unspecified, < 11.72023-05-08
CVE-2023-27945 [MEDIUM] CWE-125 CVE-2023-27945: This issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Su This issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A sandboxed app may be able to collect system logs.
nvd
CVE-2023-28180MEDIUMCVSS 6.5fixed in 13.3≥ unspecified, < 13.32023-05-08
CVE-2023-28180 [MEDIUM] CVE-2023-28180: A denial-of-service issue was addressed with improved memory handling. This issue is fixed in macOS A denial-of-service issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. A user in a privileged network position may be able to cause a denial-of-service.
nvd
CVE-2023-27962MEDIUMCVSS 5.5≥ 11.0, < 11.7.5≥ 12.0, < 12.6.4+4 more2023-05-08
CVE-2023-27962 [MEDIUM] CWE-346 CVE-2023-27962: A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS M A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to modify protected parts of the file system.
nvd
CVE-2023-28189MEDIUMCVSS 5.5fixed in 11.7.5≥ 13.0, < 13.3+3 more2023-05-08
CVE-2023-28189 [MEDIUM] CVE-2023-28189: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monte The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to view sensitive information.
nvd
CVE-2023-23537MEDIUMCVSS 5.5fixed in 11.7.5≥ 13.0, < 13.3+2 more2023-05-08
CVE-2023-23537 [MEDIUM] CVE-2023-23537: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, watchOS 9.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information.
nvd
CVE-2023-27943MEDIUMCVSS 5.5fixed in 13.3≥ unspecified, < 13.32023-05-08
CVE-2023-27943 [MEDIUM] CVE-2023-27943: This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 a This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Files downloaded from the internet may not have the quarantine flag applied.
nvd
CVE-2023-27951MEDIUMCVSS 5.5fixed in 11.7.5≥ 12.0, < 12.6.4+4 more2023-05-08
CVE-2023-27951 [MEDIUM] CWE-863 CVE-2023-27951: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monte The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An archive may be able to bypass Gatekeeper.
nvd
CVE-2023-27928LOWCVSS 3.3fixed in 11.7.5≥ 13.0, < 13.3+2 more2023-05-08
CVE-2023-27928 [LOW] CVE-2023-27928: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4, macOS Big Sur 11.7.5. An app may be able to access information about a user’s contacts.
nvd
CVE-2023-23543LOWCVSS 3.6fixed in 13.3≥ unspecified, < 13.32023-05-08
CVE-2023-23543 [LOW] CVE-2023-23543: The issue was addressed with additional restrictions on the observability of app states. This issue The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. A sandboxed app may be able to determine which app is currently using the camera.
nvd
CVE-2023-23523LOWCVSS 3.3fixed in 13.3≥ unspecified, < 13.32023-05-08
CVE-2023-23523 [LOW] CVE-2023-23523: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.3, i A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup.
nvd
← Previous86 / 157Next →