Macos Security Vulnerabilities and Issues — Macos CVE List

Lucene search

AppleMacos

91 matches found

CVE•added 2025/01/27 10:15 p.m.•768 views

CVE-2025-24146

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. Deleting a conversation in Messages may expose user contact information in system logging.

9.8CVSS5.7AI score0.0009EPSS

CVE•added 2025/01/27 10:15 p.m.•657 views

CVE-2025-24102

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to determine a user’s current location.

9.8CVSS5.8AI score0.00122EPSS

CVE•added 2025/01/27 10:15 p.m.•493 views

CVE-2025-24092

This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to read sensitive location information.

5.5CVSS5.7AI score0.00013EPSS

CVE•added 2025/01/27 10:15 p.m.•435 views

CVE-2025-24159

A validation issue was addressed with improved logic. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. An app may be able to execute arbitrary code with kernel privileges.

7.8CVSS6.9AI score0.00044EPSS

CVE•added 2025/01/27 10:15 p.m.•413 views

CVE-2025-24158

The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Processing web content may lead to a denial-of-service.

6.5CVSS5.7AI score0.00141EPSS

CVE•added 2025/01/27 10:15 p.m.•390 views

CVE-2025-24154

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. An attacker may be able to cause unexpected system termination or corrupt kernel memory.

9.1CVSS5.9AI score0.00117EPSS

CVE•added 2025/01/27 10:15 p.m.•386 views

CVE-2025-24174

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to bypass Privacy preferences.

7.7CVSS6AI score0.0002EPSS

CVE•added 2025/01/27 10:15 p.m.•383 views

CVE-2025-24149

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iPadOS 17.7.4, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a file may lead to disclosure of user information.

5.5CVSS5.6AI score0.00019EPSS

CVE•added 2025/01/27 10:15 p.m.•376 views

CVE-2025-24151

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or corrupt kernel memory.

5.5CVSS6AI score0.00017EPSS

CVE•added 2025/01/27 10:15 p.m.•373 views

CVE-2025-24123

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a file may lead to an unexpected app termination.

6.5CVSS5.7AI score0.00045EPSS

CVE•added 2025/01/27 10:15 p.m.•357 views

CVE-2025-24109

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to access sensitive user data.

9.8CVSS5.9AI score0.00039EPSS

CVE•added 2025/01/27 10:15 p.m.•328 views

CVE-2025-24115

A path handling issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to read files outside of its sandbox.

6.3CVSS5.8AI score0.00015EPSS

CVE•added 2025/01/27 10:15 p.m.•327 views

CVE-2024-54478

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iPadOS 17.7.4, visionOS 2.2, tvOS 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sonoma 14.7.2, macOS Sequoia 15.2. Processing maliciously crafted web content may lead to an unexpected process cra...

6.5CVSS5.9AI score0.00104EPSS

CVE•added 2025/01/27 10:15 p.m.•325 views

CVE-2025-24085

A use after free issue was addressed with improved memory management. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been activ...

7.8CVSS5.8AI score0.0986EPSS

CVE•added 2025/01/27 10:15 p.m.•290 views

CVE-2025-24124

5.5CVSS5.7AI score0.00022EPSS

CVE•added 2025/01/27 10:15 p.m.•279 views

CVE-2025-24130

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to modify protected parts of the file system.

9.8CVSS5.9AI score0.00033EPSS

CVE•added 2025/01/27 10:15 p.m.•278 views

CVE-2025-24122

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to modify protected parts of the file system.

5.5CVSS6AI score0.00015EPSS

CVE•added 2025/01/27 10:15 p.m.•277 views

CVE-2025-24139

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. Parsing a maliciously crafted file may lead to an unexpected app termination.

7.8CVSS6AI score0.00017EPSS

CVE•added 2025/01/27 10:15 p.m.•269 views

CVE-2025-24106

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. Parsing a file may lead to an unexpected app termination.

6.5CVSS6AI score0.00036EPSS

CVE•added 2025/01/27 10:15 p.m.•260 views

CVE-2025-24093

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3. An app may be able to access removable volumes without user consent.

9.8CVSS6AI score0.00084EPSS

CVE•added 2025/01/27 10:15 p.m.•249 views

CVE-2025-24103

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to access protected user data.

9.8CVSS5.9AI score0.00055EPSS

CVE•added 2025/01/27 10:15 p.m.•240 views

CVE-2025-24138

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. A malicious application may be able to leak sensitive user information.

5.5CVSS5.9AI score0.00015EPSS

CVE•added 2025/01/27 10:15 p.m.•212 views

CVE-2025-24126

An input validation issue was addressed. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. An attacker on the local network may be able to cause unexpected system termination or corrupt process memory.

9.8CVSS6AI score0.00105EPSS

CVE•added 2025/01/27 10:15 p.m.•148 views

CVE-2025-24150

A privacy issue was addressed with improved handling of files. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3. Copying a URL from Web Inspector may lead to command injection.

8.8CVSS6.1AI score0.00155EPSS

CVE•added 2025/01/27 10:15 p.m.•135 views

CVE-2025-24162

This issue was addressed through improved state management. This issue is fixed in visionOS 2.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Processing maliciously crafted web content may lead to an unexpected process crash.

6.5CVSS6AI score0.00179EPSS

CVE•added 2025/01/27 10:15 p.m.•131 views

CVE-2025-24118

The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or write kernel memory.

9.8CVSS6AI score0.06447EPSS

CVE•added 2025/01/27 10:15 p.m.•129 views

CVE-2025-24163

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a file may lead to an unexpected app termination.

5.5CVSS5.7AI score0.00022EPSS

CVE•added 2025/01/27 10:15 p.m.•106 views

CVE-2024-54543

The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.2, tvOS 18.2, Safari 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. Processing maliciously crafted web content may lead to memory corruption.

8.8CVSS5.9AI score0.00135EPSS

CVE•added 2025/01/27 10:15 p.m.•106 views

CVE-2025-24137

A type confusion issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A remote attacker may cause an unexpected application termination or arbitrary code execution.

8CVSS7.2AI score0.00127EPSS

CVE•added 2025/01/27 10:15 p.m.•100 views

CVE-2025-24135

This issue was addressed with improved message validation. This issue is fixed in macOS Sequoia 15.3. An app may be able to gain elevated privileges.

7.8CVSS6.2AI score0.00021EPSS

CVE•added 2025/01/27 10:15 p.m.•95 views

CVE-2025-24143

The issue was addressed with improved access restrictions to the file system. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. A maliciously crafted webpage may be able to fingerprint the user.

6.5CVSS5.5AI score0.00064EPSS

CVE•added 2025/01/27 10:15 p.m.•94 views

CVE-2025-24134

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.3. An app may be able to access user-sensitive data.

5.5CVSS5.5AI score0.00021EPSS

CVE•added 2025/01/15 8:15 p.m.•92 views

CVE-2024-27856

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, iOS 16.7.8 and iPadOS 16.7.8, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, tvOS 17.5, visionOS 1.2. Processing a file may lead to unexpected app termination or arbitrary code execution.

7.8CVSS6.6AI score0.00045EPSS

CVE•added 2025/01/27 10:15 p.m.•92 views

CVE-2024-54468

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sonoma 14.7.2, macOS Sequoia 15.2. An app may be able to break out of its sandbox.

8.2CVSS5.7AI score0.00019EPSS

CVE•added 2025/01/27 10:15 p.m.•85 views

CVE-2024-54542

An authentication issue was addressed with improved state management. This issue is fixed in Safari 18.2, macOS Sequoia 15.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2. Private Browsing tabs may be accessed without authentication.

9.1CVSS5.9AI score0.00319EPSS

CVE•added 2025/01/27 10:15 p.m.•82 views

CVE-2025-24113

The issue was addressed with improved UI. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. Visiting a malicious website may lead to user interface spoofing.

4.3CVSS5.6AI score0.0005EPSS

CVE•added 2025/01/27 10:15 p.m.•82 views

CVE-2025-24161

5.5CVSS5.7AI score0.00027EPSS

CVE•added 2025/01/27 10:15 p.m.•80 views

CVE-2025-24160

4.3CVSS5.7AI score0.00114EPSS

CVE•added 2025/01/27 10:15 p.m.•75 views

CVE-2024-54520

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2, macOS Ventura 13.7.2. An app may be able to overwrite arbitrary files.

5.5CVSS6.2AI score0.00032EPSS

CVE•added 2025/01/27 10:15 p.m.•73 views

CVE-2024-54539

This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2, macOS Ventura 13.7.2. An app may be able to capture keyboard events from the lock screen.

5.5CVSS6.2AI score0.00015EPSS

CVE•added 2025/01/27 10:15 p.m.•72 views

CVE-2025-24176

A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. A local attacker may be able to elevate their privileges.

7.1CVSS5.8AI score0.00013EPSS

CVE•added 2025/01/27 10:15 p.m.•71 views

CVE-2024-44172

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3, macOS Sequoia 15. An app may be able to access contacts.

3.3CVSS5.9AI score0.00027EPSS

CVE•added 2025/01/27 10:15 p.m.•71 views

CVE-2024-54523

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2 and iPadOS 18.2. An app may be able to corrupt coprocessor memory.

9.1CVSS5.7AI score0.00042EPSS

CVE•added 2025/01/27 10:15 p.m.•71 views

CVE-2025-24108

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data.

5.5CVSS6.1AI score0.00022EPSS

CVE•added 2025/01/27 10:15 p.m.•71 views

CVE-2025-24177

A null pointer dereference was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.3, iOS 18.3 and iPadOS 18.3. A remote attacker may be able to cause a denial-of-service.

7.5CVSS5.9AI score0.00116EPSS

CVE•added 2025/01/27 10:15 p.m.•70 views

CVE-2024-54550

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2. An app may be able to view autocompleted contact information from Messages and Mail in system logs.

4CVSS5.3AI score0.00016EPSS

CVE•added 2025/01/27 10:15 p.m.•68 views

CVE-2024-54519

The issue was resolved by sanitizing logging. This issue is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2. An app may be able to read sensitive location information.

5.5CVSS6.2AI score0.00013EPSS

CVE•added 2025/01/27 10:15 p.m.•67 views

CVE-2024-54475

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2, macOS Ventura 13.7.2. An app may be able to determine a user’s current location.

3.3CVSS6AI score0.00015EPSS

CVE•added 2025/01/27 10:15 p.m.•67 views

CVE-2025-24156

An integer overflow was addressed through improved input validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to elevate privileges.

8.8CVSS6.5AI score0.00042EPSS

CVE•added 2025/01/27 10:15 p.m.•66 views

CVE-2024-54507

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2. An attacker with user privileges may be able to read kernel memory.

9.1CVSS5.5AI score0.00085EPSS

Total number of security vulnerabilities91