Macos Security Vulnerabilities and Issues — Page 3 of Macos CVE List

Lucene search

AppleMacos

425 matches found

CVE•added 2023/05/30 10:15 p.m.•259 views

CVE-2023-2953

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.

7.5CVSS7.3AI score0.0114EPSS

CVE•added 2023/07/27 1:15 a.m.•259 views

CVE-2023-32429

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. An app may be able to bypass Privacy preferences.

5.5CVSS4.7AI score0.00013EPSS

CVE•added 2023/10/25 7:15 p.m.•259 views

CVE-2023-40447

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.

8.8CVSS8.2AI score0.00295EPSS

CVE•added 2023/10/25 7:15 p.m.•258 views

CVE-2023-42849

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. An attacker that has already achieved kernel code execution may be able to bypass kerne...

6.5CVSS6.1AI score0.00241EPSS

CVE•added 2023/10/25 7:15 p.m.•258 views

CVE-2023-42861

A logic issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1. An attacker with knowledge of a standard user's credentials can unlock another standard user's locked screen on the same Mac.

6.5CVSS5.9AI score0.00056EPSS

CVE•added 2023/10/25 7:15 p.m.•256 views

CVE-2023-41982

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data.

4.6CVSS4.7AI score0.00087EPSS

CVE•added 2023/10/25 7:15 p.m.•255 views

CVE-2023-41976

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.

8.8CVSS8.3AI score0.00346EPSS

CVE•added 2023/10/25 7:15 p.m.•255 views

CVE-2023-42857

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.

3.3CVSS3.5AI score0.00035EPSS

CVE•added 2023/10/25 7:15 p.m.•254 views

CVE-2023-40401

The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.6.1. An attacker may be able to access passkeys without authentication.

7.5CVSS6.5AI score0.00089EPSS

CVE•added 2023/10/25 7:15 p.m.•254 views

CVE-2023-40416

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. Processing an image may result in disclosure of process memory.

6.5CVSS5.7AI score0.00285EPSS

CVE•added 2023/10/25 7:15 p.m.•254 views

CVE-2023-40423

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. An app may be able to execute arbitrary code with kernel privileges.

7.8CVSS7.2AI score0.00046EPSS

CVE•added 2023/10/25 7:15 p.m.•252 views

CVE-2023-41997

4.6CVSS4.7AI score0.00087EPSS

CVE•added 2023/10/25 7:15 p.m.•250 views

CVE-2023-42847

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An attacker may be able to access passkeys without authentication.

7.5CVSS6.6AI score0.00202EPSS

CVE•added 2023/10/25 7:15 p.m.•247 views

CVE-2023-40404

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14.1. An app may be able to execute arbitrary code with kernel privileges.

7.8CVSS7.6AI score0.00871EPSS

CVE•added 2023/10/25 7:15 p.m.•246 views

CVE-2023-40413

The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. An app may be able to read sensitive location information.

5.5CVSS4.9AI score0.00034EPSS

CVE•added 2023/10/25 7:15 p.m.•246 views

CVE-2023-41077

An app may be able to access protected user data. This issue is fixed in macOS Sonoma 14, macOS Ventura 13.6.1. The issue was addressed with improved checks.

5.5CVSS5.1AI score0.00051EPSS

CVE•added 2023/10/25 7:15 p.m.•245 views

CVE-2023-40421

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to access sensitive user data.

5.5CVSS5.3AI score0.00019EPSS

CVE•added 2023/10/25 7:15 p.m.•245 views

CVE-2023-41975

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. A website may be able to access the microphone without the microphone use indicator being shown.

4.3CVSS4.9AI score0.00177EPSS

CVE•added 2023/10/25 7:15 p.m.•245 views

CVE-2023-42842

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1. An app may be able to access sensitive user data.

5.5CVSS5.5AI score0.00041EPSS

CVE•added 2023/10/25 7:15 p.m.•244 views

CVE-2023-40449

5.5CVSS5.1AI score0.00025EPSS

CVE•added 2023/10/25 7:15 p.m.•244 views

CVE-2023-41977

The issue was addressed with improved handling of caches. This issue is fixed in macOS Sonoma 14.1, iOS 16.7.2 and iPadOS 16.7.2. Visiting a malicious website may reveal browsing history.

4.3CVSS4.8AI score0.00169EPSS

CVE•added 2023/10/25 7:15 p.m.•244 views

CVE-2023-42850

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14.1. An app may be able to access sensitive user data.

5.5CVSS5AI score0.00041EPSS

CVE•added 2023/10/25 7:15 p.m.•242 views

CVE-2023-42438

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1. Visiting a malicious website may lead to user interface spoofing.

4.3CVSS4.3AI score0.001EPSS

CVE•added 2023/10/25 7:15 p.m.•241 views

CVE-2023-40405

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.1. An app may be able to read sensitive location information.

3.3CVSS3.8AI score0.00047EPSS

CVE•added 2023/10/25 7:15 p.m.•241 views

CVE-2023-41988

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data.

6.8CVSS6AI score0.00115EPSS

CVE•added 2023/10/25 7:15 p.m.•241 views

CVE-2023-42854

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to cause a denial-of-service to Endpoint Security clients.

5.5CVSS5.6AI score0.00022EPSS

CVE•added 2023/10/25 7:15 p.m.•236 views

CVE-2023-40444

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1. An app may be able to access user-sensitive data.

5.5CVSS5.2AI score0.00031EPSS

CVE•added 2023/05/26 9:15 p.m.•234 views

CVE-2023-28319

A use after free vulnerability exists in curl

7.5CVSS7.3AI score0.0032EPSS

CVE•added 2023/02/27 8:15 p.m.•232 views

CVE-2023-23520

A race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may be able to read arbitrary files as root.

5.9CVSS4.8AI score0.00105EPSS

CVE•added 2023/05/08 8:15 p.m.•212 views

CVE-2023-28201

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4. A remote user may be able to cause unexpected app termination or arbitrary code execution.

9.8CVSS8.6AI score0.03981EPSS

CVE•added 2023/02/27 8:15 p.m.•204 views

CVE-2023-23514

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, macOS Big Sur 11.7.5. An app may be able to execute arbitrary code with kernel privileges.

7.8CVSS7.1AI score0.00191EPSS

CVE•added 2023/07/28 5:15 a.m.•201 views

CVE-2023-34425

The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, macOS Big Sur 11.7.9, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.

9.8CVSS8.4AI score0.00487EPSS

CVE•added 2023/02/27 8:15 p.m.•197 views

CVE-2023-23530

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.

8.6CVSS8AI score0.00093EPSS

CVE•added 2023/07/28 5:15 a.m.•195 views

CVE-2023-38604

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in watchOS 9.6, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel...

9.8CVSS8.4AI score0.00345EPSS

CVE•added 2023/07/28 5:15 a.m.•192 views

CVE-2023-32445

This issue was addressed with improved checks. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. Processing a document may lead to a cross site scripting attack.

6.1CVSS5.4AI score0.00531EPSS

CVE•added 2023/07/28 5:15 a.m.•192 views

CVE-2023-36495

An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.

9.8CVSS8.4AI score0.00487EPSS

CVE•added 2023/09/04 2:15 p.m.•192 views

CVE-2023-4752

Use After Free in GitHub repository vim/vim prior to 9.0.1858.

7.8CVSS7.8AI score0.0004EPSS

CVE•added 2023/07/28 5:15 a.m.•190 views

CVE-2023-37285

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.

9.8CVSS8.3AI score0.00345EPSS

CVE•added 2023/07/28 5:15 a.m.•188 views

CVE-2023-32654

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.5. A user may be able to read information belonging to another user.

6.5CVSS5.7AI score0.00132EPSS

CVE•added 2023/07/28 5:15 a.m.•188 views

CVE-2023-38598

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.6, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel priv...

9.8CVSS8.4AI score0.00468EPSS

CVE•added 2023/07/28 5:15 a.m.•186 views

CVE-2023-38571

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to bypass Privacy preferences.

7.5CVSS6.8AI score0.08424EPSS

CVE•added 2023/05/08 8:15 p.m.•185 views

CVE-2022-32885

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution

8.8CVSS8.6AI score0.00139EPSS

CVE•added 2023/07/28 5:15 a.m.•185 views

CVE-2023-38590

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A remote user may be able to cause unexpected system terminati...

8.8CVSS7.7AI score0.02217EPSS

CVE•added 2023/07/28 5:15 a.m.•183 views

CVE-2023-38601

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to modify protected parts of the file system.

7.5CVSS7AI score0.00108EPSS

CVE•added 2023/07/28 5:15 a.m.•182 views

CVE-2023-38609

An injection issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.5. An app may be able to bypass certain Privacy preferences.

7.5CVSS6.7AI score0.00675EPSS

CVE•added 2023/02/27 8:15 p.m.•178 views

CVE-2023-23496

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2, watchOS 9.3, iOS 15.7.2 and iPadOS 15.7.2, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8CVSS8.2AI score0.00125EPSS

CVE•added 2023/05/08 8:15 p.m.•178 views

CVE-2023-27953

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

9.8CVSS8AI score0.01419EPSS

CVE•added 2023/07/28 5:15 a.m.•175 views

CVE-2023-32444

A logic issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. A sandboxed process may be able to circumvent sandbox restrictions.

7.5CVSS6.8AI score0.00108EPSS

CVE•added 2023/07/17 9:15 p.m.•173 views

CVE-2023-38403

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

7.5CVSS7.6AI score0.01253EPSS

CVE•added 2023/09/06 9:15 p.m.•165 views

CVE-2023-40397

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able to cause arbitrary javascript code execution.

9.8CVSS8.6AI score0.01195EPSS

Total number of security vulnerabilities425