Macos Security Vulnerabilities and Issues — Page 8 of Macos CVE List

Lucene search

AppleMacos

425 matches found

CVE•added 2023/09/27 3:19 p.m.•52 views

CVE-2023-40422

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14. An app may be able to cause a denial-of-service.

5.5CVSS5.3AI score0.00086EPSS

CVE•added 2023/02/27 8:15 p.m.•51 views

CVE-2022-42833

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.

7.8CVSS7AI score0.0004EPSS

CVE•added 2023/05/08 8:15 p.m.•51 views

CVE-2023-23538

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. An app may be able to modify protected parts of the file system.

5.5CVSS4.5AI score0.00033EPSS

CVE•added 2023/06/23 6:15 p.m.•51 views

CVE-2023-23539

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution.

7.8CVSS8.3AI score0.00068EPSS

CVE•added 2023/09/06 2:15 a.m.•51 views

CVE-2023-34352

A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An attacker may be able to leak user account emails.

5.3CVSS4.8AI score0.00208EPSS

CVE•added 2023/09/06 9:15 p.m.•51 views

CVE-2023-38605

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.5. An app may be able to determine a user’s current location.

3.3CVSS4AI score0.00105EPSS

CVE•added 2023/09/27 3:19 p.m.•51 views

CVE-2023-40409

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17. An app may be able to execute arbitrary code with kernel privileges.

7.8CVSS7AI score0.00047EPSS

CVE•added 2023/12/12 1:15 a.m.•51 views

CVE-2023-42907

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

7.8CVSS8AI score0.00034EPSS

CVE•added 2023/08/14 11:15 p.m.•50 views

CVE-2022-46722

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system.

5.5CVSS4.5AI score0.00047EPSS

CVE•added 2023/05/08 8:15 p.m.•50 views

CVE-2023-28189

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to view sensitive information.

5.5CVSS5.1AI score0.00131EPSS

CVE•added 2023/09/27 3:18 p.m.•50 views

CVE-2023-39233

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may disclose sensitive information.

6.5CVSS6AI score0.00279EPSS

CVE•added 2023/09/27 3:19 p.m.•50 views

CVE-2023-40426

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14. An app may be able to bypass certain Privacy preferences.

5.5CVSS5.4AI score0.00011EPSS

CVE•added 2023/09/27 3:19 p.m.•50 views

CVE-2023-41079

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14. An app may be able to bypass Privacy preferences.

5.5CVSS5.2AI score0.00011EPSS

CVE•added 2023/09/27 3:19 p.m.•50 views

CVE-2023-41996

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6. Apps that fail verification checks may still launch.

5.5CVSS5AI score0.0009EPSS

CVE•added 2023/12/12 1:15 a.m.•50 views

CVE-2023-42908

7.8CVSS8AI score0.00034EPSS

CVE•added 2023/12/12 1:15 a.m.•50 views

CVE-2023-42909

7.8CVSS8AI score0.00034EPSS

CVE•added 2023/12/12 1:15 a.m.•50 views

CVE-2023-42911

7.8CVSS8AI score0.00034EPSS

CVE•added 2023/09/27 3:18 p.m.•49 views

CVE-2023-32377

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.

7.8CVSS7.7AI score0.00145EPSS

CVE•added 2023/09/27 3:18 p.m.•49 views

CVE-2023-35984

The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An attacker in physical proximity can cause a limited out of bounds write.

4.3CVSS4AI score0.00069EPSS

CVE•added 2023/12/12 1:15 a.m.•49 views

CVE-2023-42882

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2. Processing an image may lead to arbitrary code execution.

7.8CVSS7.5AI score0.0005EPSS

CVE•added 2023/12/12 1:15 a.m.•49 views

CVE-2023-42891

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. An app may be able to monitor keystrokes without user permission.

5.5CVSS5.4AI score0.00024EPSS

CVE•added 2023/12/12 1:15 a.m.•49 views

CVE-2023-42894

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. An app may be able to access information about a user's contacts.

5.5CVSS5.1AI score0.00023EPSS

CVE•added 2023/08/14 11:15 p.m.•48 views

CVE-2020-36615

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1. Processing a maliciously crafted font may lead to arbitrary code execution.

7.8CVSS7.1AI score0.00064EPSS

CVE•added 2023/09/06 2:15 a.m.•48 views

CVE-2023-32438

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in tvOS 16.3, macOS Ventura 13.2, watchOS 9.3, iOS 16.3 and iPadOS 16.3. An app may be able to bypass Privacy preferences.

5.5CVSS5AI score0.00064EPSS

CVE•added 2023/09/06 9:15 p.m.•48 views

CVE-2023-38616

A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.

7CVSS6.9AI score0.00059EPSS

CVE•added 2023/09/27 3:19 p.m.•48 views

CVE-2023-41078

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. An app may be able to bypass certain Privacy preferences.

5.5CVSS5.2AI score0.00013EPSS

CVE•added 2023/09/27 3:18 p.m.•47 views

CVE-2023-37448

A lock screen issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. A user may be able to view restricted content from the lock screen.

3.3CVSS3.9AI score0.00111EPSS

CVE•added 2023/05/08 8:15 p.m.•46 views

CVE-2023-27966

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may be able to break out of its sandbox.

6.3CVSS5.7AI score0.0009EPSS

CVE•added 2023/06/23 6:15 p.m.•46 views

CVE-2023-32355

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to modify protected parts of the file system.

5.5CVSS5.9AI score0.00027EPSS

CVE•added 2023/06/23 6:15 p.m.•46 views

CVE-2023-32403

This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to read sensitive location informatio...

5.5CVSS5.5AI score0.00023EPSS

CVE•added 2023/09/06 2:15 a.m.•46 views

CVE-2023-32432

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to access user-sensitive data.

5.5CVSS4.9AI score0.00041EPSS

CVE•added 2023/10/25 7:15 p.m.•46 views

CVE-2023-40425

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14, macOS Monterey 12.7.1. An app with root privileges may be able to access private information.

4.4CVSS4.6AI score0.00064EPSS

CVE•added 2023/09/12 12:15 a.m.•46 views

CVE-2023-40440

This issue was addressed with improved state management of S/MIME encrypted emails. This issue is fixed in macOS Monterey 12.6.8. A S/MIME encrypted email may be inadvertently sent unencrypted.

7.5CVSS6.7AI score0.00147EPSS

CVE•added 2023/12/12 1:15 a.m.•46 views

CVE-2023-42903

7.8CVSS8AI score0.00034EPSS

CVE•added 2023/12/12 1:15 a.m.•46 views

CVE-2023-42926

7.8CVSS8AI score0.00073EPSS

CVE•added 2023/08/14 11:15 p.m.•45 views

CVE-2022-22646

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.2. A malicious application may be able to modify protected parts of the file system.

5.5CVSS4.8AI score0.00046EPSS

CVE•added 2023/09/06 2:15 a.m.•45 views

CVE-2023-28195

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3. An app may be able to read sensitive location information.

3.3CVSS3.9AI score0.00087EPSS

CVE•added 2023/06/23 6:15 p.m.•45 views

CVE-2023-32382

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. Processing a 3D model may result in disclosure of process memory.

5.5CVSS5.9AI score0.00032EPSS

CVE•added 2023/12/12 1:15 a.m.•45 views

CVE-2023-42905

7.8CVSS8AI score0.00034EPSS

CVE•added 2023/12/12 1:15 a.m.•45 views

CVE-2023-42912

7.8CVSS8AI score0.00034EPSS

CVE•added 2023/08/14 11:15 p.m.•44 views

CVE-2022-26699

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to cause a denial-of-service to Endpoint Security clients.

5.5CVSS4.5AI score0.00044EPSS

CVE•added 2023/08/14 11:15 p.m.•44 views

CVE-2022-42828

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.

8.8CVSS7.8AI score0.00185EPSS

CVE•added 2023/08/14 11:15 p.m.•44 views

CVE-2023-28179

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. Processing a maliciously crafted AppleScript binary may result in unexpected app termination or disclosure of process memory.

7.1CVSS6.3AI score0.0008EPSS

CVE•added 2023/06/23 6:15 p.m.•43 views

CVE-2022-42860

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Monterey 12.6.1, macOS Big Sur 11.7.1, macOS Ventura 13. An app may be able to modify protected parts of the file system

5.5CVSS5.2AI score0.00023EPSS

CVE•added 2023/09/06 2:15 a.m.•43 views

CVE-2023-27950

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processing an image may result in disclosure of process memory.

5.5CVSS5.3AI score0.0007EPSS

CVE•added 2023/06/23 6:15 p.m.•43 views

CVE-2023-32363

A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Ventura 13.4. An app may be able to bypass Privacy preferences.

5.5CVSS5.8AI score0.00007EPSS

CVE•added 2023/12/12 1:15 a.m.•43 views

CVE-2023-42902

7.8CVSS7.9AI score0.00034EPSS

CVE•added 2023/08/14 11:15 p.m.•42 views

CVE-2022-46706

A type confusion issue was addressed with improved state handling. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to execute arbitrary code with kernel privileges.

7.8CVSS7AI score0.00031EPSS

CVE•added 2023/09/06 2:15 a.m.•42 views

CVE-2023-28209

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.

7.8CVSS7.2AI score0.00083EPSS

CVE•added 2023/09/06 2:15 a.m.•42 views

CVE-2023-32379

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.4. An app may be able to execute arbitrary code with kernel privileges.

7.8CVSS7.7AI score0.00067EPSS

Total number of security vulnerabilities425