Login Request a demo
MO
Product
Mac OS X
by Apple · last CVE Aug 14, 2023
On CISA KEVExploited in the wildRansomware-linked
3,208
CVEs
24
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities3,208In the news1Timeline
Severity mix
Critical 140High 357Medium 3Low 0
Severity
All severities500Critical140High357Medium3Low0
Exploitation
On CISA KEV24Exploited in the wild24
Watch

Add Mac OS X to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-1871
In wildKEV
9.8
7%
Apr 2
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
Affected: 10.15 before 10.15.7; 10.15.7; 10.15.7; 10.15.7
CVE-2021-1870
In wildKEV
9.8
8%
Apr 2
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
Affected: 10.15 before 10.15.7; 10.15.7; 10.15.7; 10.15.7
CVE-2012-1823
In wildKEV
9.8
100%
May 11
PHP-CGI Query String Parameter Vulnerability
Affected: 10.6.8 before 10.7.5; 10.8.0 before 10.8.2
CVE-2022-2294
RansomwareIn wildKEV
8.8
71%
Jul 28
WebRTC Heap Buffer Overflow Vulnerability
Affected: before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +12 more
CVE-2021-1789
In wildKEV
8.8
14%
Apr 2
Apple Multiple Products Type Confusion Vulnerability
Affected: 10.14 before 10.14.6; 10.15 before 10.15.7; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +12 more
CVE-2021-30713
In wildKEV
7.8
7%
Sep 8
Apple macOS Unspecified Vulnerability
Affected: 10.15 through 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +4 more
CVE-2021-30869
In wildKEV
7.8
4%
Aug 24
Apple iOS, iPadOS, and macOS Type Confusion Vulnerability
Affected: 10.14 through 10.14.6; 10.15 through 10.15.6; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +19 more
CVE-2021-30860
In wildKEV
7.8
76%
Aug 24
Apple Multiple Products Integer Overflow Vulnerability
Affected: 10.15 before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +2 more
CVE-2020-27930
In wildKEV
7.8
22%
Dec 8
Apple Multiple Products Memory Corruption Vulnerability
Affected: before 10.15.7
CVE-2020-27932
In wildKEV
7.8
10%
Dec 8
Apple Multiple Products Type Confusion Vulnerability
Affected: before 10.15.7
CVE-2020-9859
In wildKEV
7.8
1%
Jun 5
Apple Multiple Products Code Execution Vulnerability
Affected: before 10.15.5
CVE-2020-3837
In wildKEV
7.8
15%
Feb 27
Apple Multiple Products Memory Corruption Vulnerability
Affected: before 10.15.3
CVE-2019-8605
In wildKEV
7.8
18%
Dec 18
Apple Multiple Products Use-After-Free Vulnerability
Affected: before 10.14.5
CVE-2019-8526
In wildKEV
7.8
1%
Dec 18
Apple macOS Use-After-Free Vulnerability
Affected: before 10.14.4
CVE-2019-7286
In wildKEV
7.8
16%
Dec 18
Apple Multiple Products Memory Corruption Vulnerability
Affected: before 10.14.3
CVE-2018-4344
In wildKEV
7.8
2%
Apr 3
Apple Multiple Products Memory Corruption Vulnerability
Affected: before 10.14
CVE-2015-1130
In wildKEV
7.8
10%
Apr 10
Apple OS X Authentication Bypass Vulnerability
Affected: before 10.10.3
CVE-2014-4404
In wildKEV
7.8
49%
Sep 18
Apple OS X Heap-Based Buffer Overflow Vulnerability
Affected: before 10.10.0; 10.10.1 before 10.10.3
CVE-2021-31010
In wildKEV
7.5
4%
Aug 24
Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability
Affected: 10.15 before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +11 more
CVE-2019-6223
In wildKEV
7.5
3%
Mar 5
Apple iOS and macOS Group Facetime Vulnerability
Affected: before 10.14.3
CVE-2021-1782
In wildKEV
7.0
2%
Apr 2
Apple Multiple Products Race Condition Vulnerability
Affected: 10.14 before 10.14.6; 10.15 before 10.15.7; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +12 more
CVE-2022-22674
In wildKEV
5.5
1%
May 26
Apple macOS Out-of-Bounds Read Vulnerability
Affected: 10.15 before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +10 more
CVE-2021-30657
In wildKEV
5.5
69%
Sep 8
Apple macOS Unspecified Vulnerability
Affected: 10.15 through 10.15.5; 10.15.6; 10.15.6; 10.15.7; 10.15.7; 10.15.7; +3 more
CVE-2020-9934
In wildKEV
5.5
3%
Oct 16
Apple iOS, iPadOS, and macOS Input Validation Vulnerability
Affected: before 10.15.6
CVE-2018-4310
10.0
2%
Apr 3
An access issue was addressed with additional sandbox restrictions
Affected: before 10.14
CVE-2019-6235
10.0
2%
Mar 4
A memory corruption issue was addressed with improved validation
Affected: before 10.14.3
CVE-2018-4229
10.0
2%
Jun 8
An issue was discovered in certain Apple products
Affected: before 10.13.5
CVE-2018-4091
10.0
2%
Apr 3
An issue was discovered in certain Apple products
Affected: before 10.13.3
CVE-2015-8659
10.0
4%
Jan 12
The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug
Affected: through 10.11.3
CVE-2022-22630
9.8
1%
Jun 23
A use after free issue was addressed with improved memory management
Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +8 more
CVE-2022-32839
9.8
4%
Aug 24
The issue was addressed with improved bounds checks
Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more
CVE-2022-26775
9.8
2%
May 26
An integer overflow was addressed with improved input validation
Affected: 10.15 before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +10 more
CVE-2022-22720
9.8
28%
Mar 14
Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling
Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more
CVE-2019-8703
9.8
1%
Dec 23
This issue was addressed with improved entitlements
Affected: before 10.15
CVE-2019-8643
9.8
1%
Dec 23
CVE-2019-8643: Arun Sharma of VMWare This issue is fixed in macOS Mojave 10.14
Affected: before 10.14
CVE-2021-44790
9.8
97%
Dec 20
A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts)
Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more
CVE-2021-30690
9.8
1%
Sep 8
Multiple issues in apache were addressed by updating apache to version 2.4.46
Affected: 10.14 through 10.14.5; 10.14.6; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +14 more
CVE-2021-30678
9.8
3%
Sep 8
A logic issue was addressed with improved state management
Affected: 10.14 through 10.14.5; 10.15 through 10.15.6; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +23 more
CVE-2021-30655
9.8
2%
Sep 8
An application may be able to execute arbitrary code with system privileges
Affected: 10.15 through 10.15.5; 10.15.6; 10.15.6; 10.15.7; 10.15.7; 10.15.7; +4 more
CVE-2021-1882
9.8
2%
Sep 8
A memory corruption issue was addressed with improved validation
Affected: 10.15 through 10.15.5; 10.15.6; 10.15.6; 10.15.7; 10.15.7; 10.15.7; +4 more
CVE-2021-1834
9.8
3%
Sep 8
An out-of-bounds write issue was addressed with improved bounds checking
Affected: 10.14; 10.14.0; 10.14.1; 10.14.2; 10.14.3; 10.14.4; +34 more
CVE-2021-30805
9.8
3%
Sep 8
A memory corruption issue was addressed with improved input validation
Affected: 10.14 through 10.14.6; 10.15 through 10.15.7; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +24 more
CVE-2021-30793
9.8
3%
Sep 8
A logic issue was addressed with improved state management
Affected: 10.14; 10.14.0; 10.14.1; 10.14.2; 10.14.3; 10.14.4; +34 more
CVE-2021-1818
9.8
3%
Apr 2
A logic issue was addressed with improved state management
Affected: 10.14 before 10.14.6; 10.15 before 10.15.7; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +11 more
CVE-2020-9866
9.8
2%
Oct 27
A buffer overflow was addressed with improved bounds checking
Affected: before 10.15.6
CVE-2019-8531
9.8
1%
Oct 27
A validation issue existed in Trust Anchor Management
Affected: before 10.14.4
CVE-2019-8767
9.8
1%
Oct 27
A memory consumption issue was addressed with improved memory handling
Affected: before 10.15
CVE-2019-8756
9.8
1%
Oct 27
Multiple memory corruption issues were addressed with improved input validation
Affected: before 10.15
CVE-2019-8746
9.8
3%
Oct 27
An out-of-bounds read was addressed with improved input validation
Affected: before 10.15
CVE-2019-8716
9.8
2%
Oct 27
A memory corruption issue was addressed with improved memory handling
Affected: before 10.15.1
Page 1 of 10 · 500 total
12…10
The 500 most important CVEs for this product (exploited first, then by severity)