Apple macOS vulnerabilities

3,135 known vulnerabilities affecting apple/macos.

Total CVEs
3,135
CISA KEV
75
actively exploited
Public exploits
44
Exploited in wild
61
Severity breakdown
CRITICAL203HIGH1362MEDIUM1421LOW149

Vulnerabilities

Page 88 of 157
CVE-2023-23507HIGHCVSS 7.8≥ 12.0.0, < 12.6.3≥ 13.0, < 13.2+2 more2023-02-27
CVE-2023-23507 [HIGH] CWE-119 CVE-2023-23507: The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6.3, m The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2. An app may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2023-23504HIGHCVSS 7.8≥ 12.0.0, < 12.6.3≥ 13.0, < 13.2+2 more2023-02-27
CVE-2023-23504 [HIGH] CWE-787 CVE-2023-23504: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2022-42826HIGHCVSS 8.8fixed in 13.0≥ unspecified, < 13+1 more2023-02-27
CVE-2022-42826 [HIGH] CWE-416 CVE-2022-42826: A use after free issue was addressed with improved memory management. This issue is fixed in macOS V A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1 and iPadOS 16, Safari 16.1. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2023-23529HIGHCVSS 8.8KEV≥ 13.0, < 13.2.1≥ unspecified, < 13.22023-02-27
CVE-2023-23529 [HIGH] CWE-843 CVE-2023-23529: A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPa A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
nvd
CVE-2023-23506MEDIUMCVSS 5.5fixed in 13.2≥ unspecified, < 13.22023-02-27
CVE-2023-23506 [MEDIUM] CWE-863 CVE-2023-23506: A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13. A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be able to access user-sensitive data.
nvd
CVE-2023-23512MEDIUMCVSS 6.5≥ 13.0, < 13.2≥ unspecified, < 13.22023-02-27
CVE-2023-23512 [MEDIUM] CVE-2023-23512: The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.3, tvOS 1 The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Visiting a website may lead to an app denial-of-service.
nvd
CVE-2023-23520MEDIUMCVSS 5.9fixed in 13.2≥ unspecified, < 13.22023-02-27
CVE-2023-23520 [MEDIUM] CWE-367 CVE-2023-23520: A race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS A race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may be able to read arbitrary files as root.
nvd
CVE-2023-23501MEDIUMCVSS 5.5fixed in 13.2≥ unspecified, < 13.22023-02-27
CVE-2023-23501 [MEDIUM] CWE-668 CVE-2023-23501: The issue was addressed with improved memory handling This issue is fixed in macOS Ventura 13.2. An The issue was addressed with improved memory handling This issue is fixed in macOS Ventura 13.2. An app may be able to disclose kernel memory.
nvd
CVE-2023-23508MEDIUMCVSS 5.5≥ 11.0, < 11.7.3≥ 12.0.0, < 12.6.3+4 more2023-02-27
CVE-2023-23508 [MEDIUM] CWE-284 CVE-2023-23508: The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. An app may be able to bypass Privacy preferences.
nvd
CVE-2022-46705MEDIUMCVSS 4.3fixed in 13.1≥ unspecified, < 13.1+1 more2023-02-27
CVE-2022-46705 [MEDIUM] CVE-2022-46705: A spoofing issue existed in the handling of URLs. This issue was addressed with improved input valid A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safari 16.2. Visiting a malicious website may lead to address bar spoofing.
nvd
CVE-2023-23511MEDIUMCVSS 5.5≥ 12.0.0, < 12.6.3≥ 13.0, < 13.2+2 more2023-02-27
CVE-2023-23511 [MEDIUM] CWE-200 CVE-2023-23511: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be able to bypass Privacy preferences.
nvd
CVE-2023-23503MEDIUMCVSS 5.5fixed in 13.2≥ unspecified, < 13.22023-02-27
CVE-2023-23503 [MEDIUM] CWE-288 CVE-2023-23503: A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, watchOS 9.3. An app may be able to bypass Privacy preferences.
nvd
CVE-2022-46713MEDIUMCVSS 4.7≥ 11.0, < 11.7.1≥ 12.0.0, < 12.6.1+3 more2023-02-27
CVE-2022-46713 [MEDIUM] CWE-362 CVE-2022-46713: A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to modify protected parts of the file system.
nvd
CVE-2022-32902MEDIUMCVSS 5.5≥ 11.0, < 11.7≥ 12.0.0, < 12.6+3 more2023-02-27
CVE-2022-32902 [MEDIUM] CWE-284 CVE-2022-32902: A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6, macOS Big Sur 11.7. An app may be able to bypass Privacy preferences.
nvd
CVE-2023-23500MEDIUMCVSS 5.5≥ 13.0, < 13.2≥ unspecified, < 13.22023-02-27
CVE-2023-23500 [MEDIUM] CWE-200 CVE-2023-23500: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iO The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, watchOS 9.3. An app may be able to leak sensitive kernel state.
nvd
CVE-2023-23502MEDIUMCVSS 5.5≥ 12.0.0, < 12.6.3≥ 13.0, < 13.2+2 more2023-02-27
CVE-2023-23502 [MEDIUM] CWE-125 CVE-2023-23502: An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed i An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be able to determine kernel memory layout.
nvd
CVE-2022-46704MEDIUMCVSS 5.5≥ 11.0, < 11.7.2≥ 12.0.0, < 12.6.2+4 more2023-02-27
CVE-2022-46704 [MEDIUM] CWE-863 CVE-2022-46704: A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Monterey 12.6.2. An app may be able to modify protected parts of the file system.
nvd
CVE-2022-32896MEDIUMCVSS 5.5≥ 11.0, < 11.7≥ 12.0.0, < 12.6+2 more2023-02-27
CVE-2022-32896 [MEDIUM] CWE-200 CVE-2022-32896: This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6, m This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6, macOS Big Sur 11.7. A user may be able to view sensitive user information.
nvd
CVE-2023-23510MEDIUMCVSS 5.5fixed in 13.2≥ unspecified, < 13.22023-02-27
CVE-2023-23510 [MEDIUM] CWE-863 CVE-2023-23510: A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13. A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be able to access a user’s Safari history.
nvd
CVE-2022-22582MEDIUMCVSS 5.5≥ 11.0, < 11.6.5≥ 12.0.0, < 12.3+3 more2023-02-27
CVE-2022-22582 [MEDIUM] CWE-59 CVE-2022-22582: A validation issue existed in the handling of symlinks. This issue was addressed with improved valid A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5, macOS Monterey 12.3. A local user may be able to write arbitrary files.
nvd
← Previous88 / 157Next →