Apple macOS vulnerabilities

3,135 known vulnerabilities affecting apple/macos.

Total CVEs

3,135

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL203HIGH1362MEDIUM1421LOW149

Vulnerabilities

Page 94 of 157

CVE-2022-32904MEDIUMCVSS 5.5≥ 11.0, < 11.7≥ 12.0, < 12.6+3 more2022-11-01

CVE-2022-32904 [MEDIUM] CWE-284 CVE-2022-32904: An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app may be able to access user-sensitive data.

nvd

CVE-2022-42819MEDIUMCVSS 5.5≥ 11.0, < 11.7≥ 12.0, < 12.6+3 more2022-11-01

CVE-2022-42819 [MEDIUM] CWE-200 CVE-2022-42819: An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Su An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app may be able to read sensitive location information.

nvd

CVE-2022-42799MEDIUMCVSS 6.1fixed in 13.0≥ unspecified, < 132022-11-01

CVE-2022-42799 [MEDIUM] CWE-1021 CVE-2022-42799: The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 1 The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiting a malicious website may lead to user interface spoofing.

nvd

CVE-2022-32926MEDIUMCVSS 6.7fixed in 13.0≥ unspecified, < 132022-11-01

CVE-2022-32926 [MEDIUM] CWE-119 CVE-2022-32926: The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 an The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16. An app with root privileges may be able to execute arbitrary code with kernel privileges.

nvd

CVE-2022-42818MEDIUMCVSS 5.9fixed in 12.6≥ unspecified, < 132022-11-01

CVE-2022-42818 [MEDIUM] CWE-200 CVE-2022-42818: This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. A u This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. A user in a privileged network position may be able to track user activity.

nvd

CVE-2022-42825MEDIUMCVSS 5.5fixed in 13.0≥ 11.0, < 11.7.1+2 more2022-11-01

CVE-2022-42825 [MEDIUM] CWE-266 CVE-2022-42825: This issue was addressed by removing additional entitlements. This issue is fixed in tvOS 16.1, macO This issue was addressed by removing additional entitlements. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to modify protected parts of the file system.

nvd

CVE-2022-32936MEDIUMCVSS 5.5fixed in 13.0≥ unspecified, < 132022-11-01

CVE-2022-32936 [MEDIUM] CWE-125 CVE-2022-32936: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ven An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to disclose kernel memory.

nvd

CVE-2022-42810MEDIUMCVSS 5.5fixed in 13.0≥ unspecified, < 132022-11-01

CVE-2022-42810 [MEDIUM] CWE-200 CVE-2022-42810: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13. Processing a maliciously crafted USD file may disclose memory contents.

nvd

CVE-2022-42814MEDIUMCVSS 5.5fixed in 13.0≥ unspecified, < 132022-11-01

CVE-2022-42814 [MEDIUM] CWE-284 CVE-2022-42814: A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app ma A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data.

nvd

CVE-2022-42824MEDIUMCVSS 5.5fixed in 13.0≥ unspecified, < 132022-11-01

CVE-2022-42824 [MEDIUM] CVE-2022-42824: A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information.

nvd

CVE-2022-32858MEDIUMCVSS 5.5fixed in 13.0≥ unspecified, < 13+1 more2022-11-01

CVE-2022-32858 [MEDIUM] CWE-200 CVE-2022-32858: The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. An app may be able to leak sensitive kernel state.

nvd

CVE-2022-32895MEDIUMCVSS 4.7fixed in 13.0≥ unspecified, < 132022-11-01

CVE-2022-32895 [MEDIUM] CWE-362 CVE-2022-32895: A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13 A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system.

nvd

CVE-2022-32928MEDIUMCVSS 5.3fixed in 13.0≥ unspecified, < 13+1 more2022-11-01

CVE-2022-32928 [MEDIUM] CWE-287 CVE-2022-32928: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, macOS Ventura A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. A user in a privileged network position may be able to intercept mail credentials.

nvd

CVE-2022-32827MEDIUMCVSS 5.5fixed in 13.0≥ unspecified, < 13+1 more2022-11-01

CVE-2022-32827 [MEDIUM] CWE-787 CVE-2022-32827: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 1 A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to cause a denial-of-service.

nvd

CVE-2022-42790MEDIUMCVSS 5.5≥ 11.0, < 11.7≥ 12.0, < 12.6+5 more2022-11-01

CVE-2022-42790 [MEDIUM] CVE-2022-42790: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11. A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6. A user may be able to view restricted content from the lock screen.

nvd

CVE-2022-42815MEDIUMCVSS 5.5fixed in 13.0≥ unspecified, < 132022-11-01

CVE-2022-42815 [MEDIUM] CWE-200 CVE-2022-42815: This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data.

nvd

CVE-2022-42798MEDIUMCVSS 5.5≥ 11.0, < 11.7.1≥ 12.0, < 12.6.1+1 more2022-11-01

CVE-2022-42798 [MEDIUM] CWE-119 CVE-2022-42798: The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. Parsing a maliciously crafted audio file may lead to disclosure of user information.

nvd

CVE-2022-42831MEDIUMCVSS 6.4fixed in 13.0≥ unspecified, < 13+1 more2022-11-01

CVE-2022-42831 [MEDIUM] CWE-362 CVE-2022-42831: A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges.

nvd

CVE-2022-42793MEDIUMCVSS 5.5≥ 11.0, < 11.7≥ 12.0, < 12.6+5 more2022-11-01

CVE-2022-42793 [MEDIUM] CWE-347 CVE-2022-42793: An issue in code signature validation was addressed with improved checks. This issue is fixed in mac An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6. An app may be able to bypass code signing checks.

nvd

CVE-2022-32923MEDIUMCVSS 6.5fixed in 13.0≥ unspecified, < 132022-11-01

CVE-2022-32923 [MEDIUM] CWE-79 CVE-2022-32923: A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose internal states of the app.

nvd

← Previous94 / 157Next →