MO
Product
Mac OS X
On CISA KEVExploited in the wildRansomware-linked
3,208
CVEs
24
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 140High 357Medium 3Low 0
Watch
Add Mac OS X to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-4353 | 9.8 | Apr 3 | A configuration issue was addressed with additional restrictions Affected: before 10.14 |
| CVE-2018-4332 | 9.8 | Apr 3 | A memory corruption issue was addressed with improved memory handling Affected: before 10.14 |
| CVE-2018-4331 | 9.8 | Apr 3 | A memory corruption issue was addressed with improved memory handling Affected: before 10.14 |
| CVE-2018-4295 | 9.8 | Apr 3 | An input validation issue was addressed with improved input validation Affected: before 10.14 |
| CVE-2018-4291 | 9.8 | Apr 3 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.13.6 |
| CVE-2018-4288 | 9.8 | Apr 3 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.13.6 |
| CVE-2018-4287 | 9.8 | Apr 3 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.13.6 |
| CVE-2018-4286 | 9.8 | Apr 3 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.13.6 |
| CVE-2018-4268 | 9.8 | Apr 3 | A memory corruption issue was addressed with improved memory handling Affected: before 10.13.6 |
| CVE-2018-4259 | 9.8 | Apr 3 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.13.6 |
| CVE-2018-4258 | 9.8 | Jan 11 | In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking Affected: before 10.13.5 |
| CVE-2018-4257 | 9.8 | Jan 11 | In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved size validation Affected: before 10.13.5 |
| CVE-2018-4254 | 9.8 | Jan 11 | In macOS High Sierra before 10.13.5, an input validation issue existed in the kernel Affected: before 10.13.5 |
| CVE-2018-4189 | 9.8 | Jan 11 | In iOS before 11.2.5, macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, watchOS before 4.2.2, and tvOS before 11.2.5, a… Affected: 10.13.0 before 10.13.3 |
| CVE-2018-4169 | 9.8 | Jan 11 | In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, an out-of-bounds read was addressed with improved input validation Affected: 10.13.0 before 10.13.3 |
| CVE-2017-13889 | 9.8 | Jan 11 | In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a logic error existed in the validation of credentials Affected: 10.13.0 before 10.13.3 |
| CVE-2018-4298 | 9.8 | Jan 11 | In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed in Remote Management Affected: 10.13.0 before 10.13.3 |
| CVE-2018-18311 | 9.8 | Dec 7 | Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations Affected: before 10.14.4 |
| CVE-2018-4124 | 9.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 10.13.3 |
| CVE-2018-4115 | 9.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 10.13.4 |
| CVE-2018-4108 | 9.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 10.13.4 |
| CVE-2018-4105 | 9.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 10.13.4 |
| CVE-2017-13846 | 9.8 | Nov 13 | An issue was discovered in certain Apple products Affected: through 10.13.0 |
| CVE-2017-13832 | 9.8 | Nov 13 | An issue was discovered in certain Apple products Affected: through 10.13.0 |
| CVE-2017-13815 | 9.8 | Nov 13 | An issue was discovered in certain Apple products Affected: through 10.13.0 |
| CVE-2017-7130 | 9.8 | Oct 23 | An issue was discovered in certain Apple products Affected: through 10.12.6 |
| CVE-2017-7129 | 9.8 | Oct 23 | An issue was discovered in certain Apple products Affected: through 10.12.6 |
| CVE-2017-7128 | 9.8 | Oct 23 | An issue was discovered in certain Apple products Affected: through 10.12.6 |
| CVE-2017-7126 | 9.8 | Oct 23 | An issue was discovered in certain Apple products Affected: through 10.12.6 |
| CVE-2017-7125 | 9.8 | Oct 23 | An issue was discovered in certain Apple products Affected: through 10.12.6 |
| CVE-2017-7124 | 9.8 | Oct 23 | An issue was discovered in certain Apple products Affected: through 10.12.6 |
| CVE-2017-7123 | 9.8 | Oct 23 | An issue was discovered in certain Apple products Affected: through 10.12.6 |
| CVE-2017-7122 | 9.8 | Oct 23 | An issue was discovered in certain Apple products Affected: through 10.12.6 |
| CVE-2017-7121 | 9.8 | Oct 23 | An issue was discovered in certain Apple products Affected: through 10.12.6 |
| CVE-2017-7062 | 9.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 10.12.5 |
| CVE-2017-3167 | 9.8 | Jun 20 | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to… Affected: before 10.13.1 |
| CVE-2016-9843 | 9.8 | May 23 | The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation Affected: 10.0.0 before 10.13.0 |
| CVE-2016-9841 | 9.8 | May 23 | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic Affected: 10.0.0 before 10.13.0 |
| CVE-2017-2527 | 9.8 | May 22 | An issue was discovered in certain Apple products Affected: through 10.12.4 |
| CVE-2017-2524 | 9.8 | May 22 | An issue was discovered in certain Apple products Affected: before 10.12.5 |
| CVE-2017-2523 | 9.8 | May 22 | An issue was discovered in certain Apple products Affected: before 10.12.5 |
| CVE-2017-2522 | 9.8 | May 22 | An issue was discovered in certain Apple products Affected: before 10.12.5 |
| CVE-2017-2520 | 9.8 | May 22 | An issue was discovered in certain Apple products Affected: before 10.12.5 |
| CVE-2017-2519 | 9.8 | May 22 | An issue was discovered in certain Apple products Affected: before 10.12.5 |
| CVE-2017-2518 | 9.8 | May 22 | An issue was discovered in certain Apple products Affected: before 10.12.5 |
| CVE-2017-2513 | 9.8 | May 22 | An issue was discovered in certain Apple products Affected: through 10.12.4 |
| CVE-2017-2477 | 9.8 | Apr 2 | An issue was discovered in certain Apple products Affected: through 10.12.3 |
| CVE-2017-2428 | 9.8 | Apr 2 | An issue was discovered in certain Apple products Affected: through 10.12.3 |
| CVE-2017-2423 | 9.8 | Apr 2 | An issue was discovered in certain Apple products Affected: through 10.12.3 |
| CVE-2017-2402 | 9.8 | Apr 2 | An issue was discovered in certain Apple products Affected: through 10.12.3 |
The 500 most important CVEs for this product (exploited first, then by severity)
