Macos Security Vulnerabilities and Issues — Page 27 of Macos CVE List

Lucene search

AppleMacos

2776 matches found

CVE•added 2025/05/12 10:15 p.m.•76 views

CVE-2025-31251

The issue was addressed with improved input sanitization. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. Processing a maliciously crafted media file may lead to unexpected app term...

5.5CVSS5.8AI score0.00015EPSS

CVE•added 2019/04/03 6:29 p.m.•75 views

CVE-2018-4259

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.

10CVSS7AI score0.00632EPSS

CVE•added 2019/03/05 4:29 p.m.•75 views

CVE-2019-6231

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to read restricted memory.

5.5CVSS5AI score0.00359EPSS

CVE•added 2019/12/18 6:15 p.m.•75 views

CVE-2019-8598

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A malicious application may be able to read restricted memory.

5.5CVSS5.6AI score0.0023EPSS

CVE•added 2020/10/27 8:15 p.m.•75 views

CVE-2019-8633

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12.3, tvOS 12.3, watchOS 5.3. An application may be able to read restricted memory.

7.5CVSS6.2AI score0.00378EPSS

CVE•added 2019/12/18 6:15 p.m.•75 views

CVE-2019-8748

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with kernel privileges.

7.8CVSS8.2AI score0.00131EPSS

CVE•added 2020/10/27 8:15 p.m.•75 views

CVE-2019-8838

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3 and iPadOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, tvOS 13.3. An application may be able to execute arbitrary code w...

9.3CVSS7.5AI score0.00484EPSS

CVE•added 2020/12/08 9:15 p.m.•75 views

CVE-2020-27916

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution.

9.3CVSS7.5AI score0.00622EPSS

CVE•added 2020/10/27 9:15 p.m.•75 views

CVE-2020-3855

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra. A malicious application may be able to overwrite arbitrary files.

7.1CVSS6.6AI score0.00323EPSS

CVE•added 2020/06/09 4:15 p.m.•75 views

CVE-2020-9792

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A USB device may be able to cause a denial of service.

4.6CVSS4.6AI score0.00046EPSS

CVE•added 2020/10/16 5:15 p.m.•75 views

CVE-2020-9891

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.

7.8CVSS8AI score0.00462EPSS

CVE•added 2020/10/27 9:15 p.m.•75 views

CVE-2020-9973

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave, iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted USD file may lead to unexpected application termination...

9.3CVSS7.3AI score0.00248EPSS

CVE•added 2021/04/02 6:15 p.m.•75 views

CVE-2021-1775

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted font may lead to arbitrary code execution.

7.8CVSS7.6AI score0.00377EPSS

CVE•added 2021/04/02 6:15 p.m.•75 views

CVE-2021-1781

A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A malicious application may be able to leak sensitive...

5.5CVSS5.4AI score0.00236EPSS

CVE•added 2021/09/08 3:15 p.m.•75 views

CVE-2021-30673

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A malicious application may be able to access a user's call history.

5.5CVSS5.8AI score0.00178EPSS

CVE•added 2021/09/08 3:15 p.m.•75 views

CVE-2021-30678

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

9.8CVSS8.9AI score0.02479EPSS

CVE•added 2021/08/24 7:15 p.m.•75 views

CVE-2021-30868

A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel privileges.

7.6CVSS6.9AI score0.00191EPSS

CVE•added 2021/08/24 7:15 p.m.•75 views

CVE-2021-30871

This issue was addressed with a new entitlement. This issue is fixed in iOS 14.7, watchOS 7.6, macOS Big Sur 11.5. A local attacker may be able to access analytics data.

5.5CVSS5.6AI score0.00154EPSS

CVE•added 2021/08/24 7:15 p.m.•75 views

CVE-2021-30877

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process mem...

7.1CVSS6.2AI score0.00241EPSS

CVE•added 2022/05/26 8:15 p.m.•75 views

CVE-2022-26743

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.4. An attacker that has already achieved code execution in macOS Recovery may be able to escalate to kernel privileges.

7CVSS7.5AI score0.00123EPSS

CVE•added 2024/06/10 8:15 p.m.•75 views

CVE-2022-32897

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciously crafted tiff file may lead to arbitrary code execution.

8.1CVSS7.3AI score0.00322EPSS

CVE•added 2022/12/15 7:15 p.m.•75 views

CVE-2022-32948

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.

7.8CVSS7.7AI score0.00069EPSS

CVE•added 2022/12/15 7:15 p.m.•75 views

CVE-2022-42861

This issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2. An app may be able to break out of its sandbox.

8.8CVSS7.5AI score0.00021EPSS

CVE•added 2023/05/08 8:15 p.m.•75 views

CVE-2023-23534

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Big Sur 11.7.5. Processing a maliciously crafted image may result in disclosure of process memory.

5.5CVSS4.6AI score0.00051EPSS

CVE•added 2023/05/08 8:15 p.m.•75 views

CVE-2023-27955

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, macOS Big Sur 11.7.5. An app may be able to read arbitrary files.

5.5CVSS4.4AI score0.0006EPSS

CVE•added 2023/05/08 8:15 p.m.•75 views

CVE-2023-27960

This issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for macOS 10.4.8. An app may be able to gain elevated privileges during the installation of GarageBand.

7.8CVSS7.1AI score0.00095EPSS

CVE•added 2023/06/23 6:15 p.m.•75 views

CVE-2023-32399

The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to read sensitive location information.

5.5CVSS4.9AI score0.00039EPSS

CVE•added 2024/03/08 2:15 a.m.•75 views

CVE-2024-23231

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.6.5, macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6. An app may be able to access user-sensitive data.

5.5CVSS6.2AI score0.00025EPSS

CVE•added 2024/05/14 3:13 p.m.•75 views

CVE-2024-27829

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.5. Processing a file may lead to unexpected app termination or arbitrary code execution.

7.8CVSS6.9AI score0.00181EPSS

CVE•added 2024/07/29 11:15 p.m.•75 views

CVE-2024-40836

A logic issue was addressed with improved checks. This issue is fixed in watchOS 10.6, macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, iOS 16.7.9 and iPadOS 16.7.9. A shortcut may be able to use sensitive data with certain actions without prompting the user.

7.5CVSS5.5AI score0.00109EPSS

CVE•added 2019/04/03 6:29 p.m.•74 views

CVE-2018-4334

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.

9.3CVSS7.6AI score0.00149EPSS

CVE•added 2019/04/03 6:29 p.m.•74 views

CVE-2018-4411

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.

7.8CVSS7.2AI score0.00452EPSS

CVE•added 2019/12/18 6:15 p.m.•74 views

CVE-2019-8705

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15, tvOS 13. Processing a maliciously crafted movie may result in the disclosure of process memory.

5.5CVSS6.2AI score0.0021EPSS

CVE•added 2019/12/18 6:15 p.m.•74 views

CVE-2019-8789

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1. Parsing a maliciously crafted iBooks file may lead to disclosure of user information.

5.5CVSS5.3AI score0.00255EPSS

CVE•added 2020/12/08 9:15 p.m.•74 views

CVE-2020-27909

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution.

9.3CVSS7.4AI score0.00858EPSS

CVE•added 2021/04/02 6:15 p.m.•74 views

CVE-2020-27933

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, iCloud for Windows 7.20, watchOS 6.2.8, tvOS 13.4.8, macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. Processing a maliciously craft...

7.8CVSS8.3AI score0.00483EPSS

CVE•added 2021/04/02 6:15 p.m.•74 views

CVE-2020-27943

A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fixed in tvOS 14.3, iOS 14.3 and iPadOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.2. Processing a m...

7.8CVSS7.9AI score0.00433EPSS

CVE•added 2021/04/02 6:15 p.m.•74 views

CVE-2020-27948

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted audio file may lead to arbitrar...

7.8CVSS7.8AI score0.00461EPSS

CVE•added 2020/04/01 7:15 p.m.•74 views

CVE-2020-3848

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

9.8CVSS9.1AI score0.00857EPSS

CVE•added 2020/02/27 9:15 p.m.•74 views

CVE-2020-3875

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to read restricted memory.

5.5CVSS5.3AI score0.00325EPSS

CVE•added 2020/10/27 9:15 p.m.•74 views

CVE-2020-3880

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 6.1.2, iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra. Processing a maliciously crafted image may lead to arbi...

9.3CVSS7.3AI score0.00235EPSS

CVE•added 2020/10/22 6:15 p.m.•74 views

CVE-2020-9787

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. Some websites may not have appeared in Safari Preferences.

5.3CVSS5.5AI score0.00292EPSS

CVE•added 2020/06/09 5:15 p.m.•74 views

CVE-2020-9837

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5. A remote attacker may be able to leak memory.

7.5CVSS6.7AI score0.00764EPSS

CVE•added 2021/09/08 3:15 p.m.•74 views

CVE-2021-1762

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted USD file may lead to unexpected application termination or a...

7.8CVSS7.8AI score0.00275EPSS

CVE•added 2021/09/08 3:15 p.m.•74 views

CVE-2021-1784

A permissions issue existed in DiskArbitration. This was addressed with additional ownership checks. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to modify protected parts of the file system.

7.5CVSS7.3AI score0.00382EPSS

CVE•added 2021/09/08 3:15 p.m.•74 views

CVE-2021-1880

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, watchOS 7.4. Processing a maliciously crafted image may lead to arbitrary code execution.

7.8CVSS8.1AI score0.00364EPSS

CVE•added 2021/09/08 2:15 p.m.•74 views

CVE-2021-30733

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted font may result in the disclosure of ...

5.5CVSS5.7AI score0.00334EPSS

CVE•added 2021/09/08 2:15 p.m.•74 views

CVE-2021-30738

A malicious application may be able to overwrite arbitrary files. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-004 Mojave. An issue with path validation logic for hardlinks was addressed with improved path sanitization.

5.5CVSS6.2AI score0.0006EPSS

CVE•added 2021/09/08 2:15 p.m.•74 views

CVE-2021-30766

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to execute arbitrary code with kernel privileges.

9.3CVSS8.1AI score0.00521EPSS

CVE•added 2021/10/28 7:15 p.m.•74 views

CVE-2021-30813

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. A person with access to a host Mac may be able to bypass the Login Window in Remote Desktop for a locked instance of macOS.

6.5CVSS6.2AI score0.00055EPSS

Total number of security vulnerabilities2776