MO
Product
Mac OS X
On CISA KEVExploited in the wildRansomware-linked
3,208
CVEs
24
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 140High 357Medium 3Low 0
Watch
Add Mac OS X to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-4354 | 8.6 | Apr 3 | A memory corruption issue was addressed with improved memory handling Affected: before 10.14 |
| CVE-2018-4341 | 8.6 | Apr 3 | A memory corruption issue was addressed with improved memory handling Affected: before 10.14 |
| CVE-2019-6214 | 8.6 | Mar 5 | A type confusion issue was addressed with improved memory handling Affected: before 10.14.3 |
| CVE-2019-6230 | 8.6 | Mar 5 | A memory initialization issue was addressed with improved memory handling Affected: before 10.14.3 |
| CVE-2017-6977 | 8.6 | May 22 | An issue was discovered in certain Apple products Affected: through 10.12.4 |
| CVE-2017-2534 | 8.6 | May 22 | An issue was discovered in certain Apple products Affected: through 10.12.4 |
| CVE-2019-8803 | 8.4 | Dec 18 | An authentication issue was addressed with improved state management Affected: before 10.15.1 |
| CVE-2015-7551 | 8.4 | Mar 24 | The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other… Affected: through 10.11.3 |
| CVE-2021-44224 | 8.2 | Dec 20 | A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy… Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +7 more |
| CVE-2018-4183 | 8.2 | Jan 11 | In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions Affected: before 10.13.5 |
| CVE-2018-4182 | 8.2 | Jan 11 | In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions on CUPS Affected: before 10.13.5 |
| CVE-2016-3142 | 8.2 | Mar 31 | The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to obtain sensitive information from process… Affected: through 10.11.4 |
| CVE-2017-13905 | 8.1 | Dec 23 | A race condition was addressed with additional validation Affected: 10.11 before 10.11.6; 10.12 before 10.12.6; 10.11.6; 10.11.6; 10.11.6; 10.11.6; +6 more |
| CVE-2021-30717 | 8.1 | Sep 8 | A memory corruption issue was addressed with improved state management Affected: 10.14 through 10.14.5; 10.15 through 10.15.6; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +23 more |
| CVE-2020-9794 | 8.1 | Jun 9 | An out-of-bounds read was addressed with improved bounds checking Affected: before 10.15.5 |
| CVE-2019-9506 | 8.1 | Aug 14 | The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length… Affected: 10.12.6; 10.13.6; 10.14.5 |
| CVE-2018-20506 | 8.1 | Apr 3 | SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after… Affected: before 10.14.3 |
| CVE-2017-13872 | 8.1 | Nov 29 | An issue was discovered in certain Apple products Affected: 10.13.0; 10.13.1 |
| CVE-2017-11103 | 8.1 | Jul 13 | Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5… Affected: before 10.13.1 |
| CVE-2016-7643 | 8.1 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.12.1 |
| CVE-2016-4725 | 8.1 | Sep 25 | IOAcceleratorFamily in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to obtain sensitive information from process memory or… Affected: before 10.12.0 |
| CVE-2016-1762 | 8.1 | Mar 24 | The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document Affected: before 10.11.4 |
| CVE-2016-0778 | 8.1 | Jan 14 | The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are… Affected: 10.9.0 through 10.9.5; 10.10.0 through 10.10.5; 10.11.0 through 10.11.3 |
| CVE-2008-3438 | 8.1 | Aug 1 | Apple Mac OS X does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated… Affected: 10.0.0 through 10.5.4 |
| CVE-2006-5051 | 8.1 | Sep 27 | Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is… Affected: before 10.3.9; 10.4 through 10.4.8 |
| CVE-2017-7054 | 8.0 | Jul 20 | An issue was discovered in certain Apple products Affected: through 10.12.5 |
| CVE-2017-7051 | 8.0 | Jul 20 | An issue was discovered in certain Apple products Affected: through 10.12.5 |
| CVE-2017-7050 | 8.0 | Jul 20 | An issue was discovered in certain Apple products Affected: through 10.12.5 |
| CVE-2022-46706 | 7.8 | Aug 14 | A type confusion issue was addressed with improved state handling Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +9 more |
| CVE-2023-27960 | 7.8 | May 8 | This issue was addressed by removing the vulnerable code Affected: 10.0 before 10.4.8 |
| CVE-2022-32794 | 7.8 | Nov 1 | A logic issue was addressed with improved state management Affected: 10.15 before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +13 more |
| CVE-2022-32842 | 7.8 | Sep 23 | An out-of-bounds read issue was addressed with improved input validation Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more |
| CVE-2022-32826 | 7.8 | Sep 23 | An authorization issue was addressed with improved state management Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more |
| CVE-2022-32820 | 7.8 | Sep 23 | An out-of-bounds write issue was addressed with improved input validation Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more |
| CVE-2022-32819 | 7.8 | Sep 23 | A logic issue was addressed with improved state management Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more |
| CVE-2022-32815 | 7.8 | Sep 23 | The issue was addressed with improved memory handling Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more |
| CVE-2022-32837 | 7.8 | Aug 24 | This issue was addressed with improved checks Affected: 10.15 before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +10 more |
| CVE-2022-32813 | 7.8 | Aug 24 | The issue was addressed with improved memory handling Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more |
| CVE-2022-32812 | 7.8 | Aug 24 | The issue was addressed with improved memory handling Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more |
| CVE-2022-32811 | 7.8 | Aug 24 | A memory corruption vulnerability was addressed with improved locking Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more |
| CVE-2022-26770 | 7.8 | May 26 | An out-of-bounds read issue was addressed with improved input validation Affected: after 10.15 before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +10 more |
| CVE-2022-26769 | 7.8 | May 26 | A memory corruption issue was addressed with improved input validation Affected: 10.15 before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +10 more |
| CVE-2022-26763 | 7.8 | May 26 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +8 more |
| CVE-2022-26761 | 7.8 | May 26 | A memory corruption issue was addressed with improved memory handling Affected: before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +8 more |
| CVE-2022-26757 | 7.8 | May 26 | A use after free issue was addressed with improved memory management Affected: before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +8 more |
| CVE-2022-26756 | 7.8 | May 26 | An out-of-bounds write issue was addressed with improved input validation Affected: before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +8 more |
| CVE-2022-26751 | 7.8 | May 26 | A memory corruption issue was addressed with improved input validation Affected: before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +8 more |
| CVE-2022-26722 | 7.8 | May 26 | A memory initialization issue was addressed Affected: before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +8 more |
| CVE-2022-26721 | 7.8 | May 26 | A memory initialization issue was addressed Affected: before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +8 more |
| CVE-2022-26720 | 7.8 | May 26 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +8 more |
The 500 most important CVEs for this product (exploited first, then by severity)