MO
Product
Mac OS X
On CISA KEVExploited in the wildRansomware-linked
3,208
CVEs
24
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 140High 357Medium 3Low 0
Watch
Add Mac OS X to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1871 In wildKEV | 9.8 | Apr 2 | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability Affected: 10.15 before 10.15.7; 10.15.7; 10.15.7; 10.15.7 |
| CVE-2021-1870 In wildKEV | 9.8 | Apr 2 | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability Affected: 10.15 before 10.15.7; 10.15.7; 10.15.7; 10.15.7 |
| CVE-2012-1823 In wildKEV | 9.8 | May 11 | PHP-CGI Query String Parameter Vulnerability Affected: 10.6.8 before 10.7.5; 10.8.0 before 10.8.2 |
| CVE-2018-4310 | 10.0 | Apr 3 | An access issue was addressed with additional sandbox restrictions Affected: before 10.14 |
| CVE-2019-6235 | 10.0 | Mar 4 | A memory corruption issue was addressed with improved validation Affected: before 10.14.3 |
| CVE-2018-4229 | 10.0 | Jun 8 | An issue was discovered in certain Apple products Affected: before 10.13.5 |
| CVE-2018-4091 | 10.0 | Apr 3 | An issue was discovered in certain Apple products Affected: before 10.13.3 |
| CVE-2015-8659 | 10.0 | Jan 12 | The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug Affected: through 10.11.3 |
| CVE-2022-22630 | 9.8 | Jun 23 | A use after free issue was addressed with improved memory management Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +8 more |
| CVE-2022-32839 | 9.8 | Aug 24 | The issue was addressed with improved bounds checks Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more |
| CVE-2022-26775 | 9.8 | May 26 | An integer overflow was addressed with improved input validation Affected: 10.15 before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +10 more |
| CVE-2022-22720 | 9.8 | Mar 14 | Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more |
| CVE-2019-8703 | 9.8 | Dec 23 | This issue was addressed with improved entitlements Affected: before 10.15 |
| CVE-2019-8643 | 9.8 | Dec 23 | CVE-2019-8643: Arun Sharma of VMWare This issue is fixed in macOS Mojave 10.14 Affected: before 10.14 |
| CVE-2021-44790 | 9.8 | Dec 20 | A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts) Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more |
| CVE-2021-30690 | 9.8 | Sep 8 | Multiple issues in apache were addressed by updating apache to version 2.4.46 Affected: 10.14 through 10.14.5; 10.14.6; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +14 more |
| CVE-2021-30678 | 9.8 | Sep 8 | A logic issue was addressed with improved state management Affected: 10.14 through 10.14.5; 10.15 through 10.15.6; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +23 more |
| CVE-2021-30655 | 9.8 | Sep 8 | An application may be able to execute arbitrary code with system privileges Affected: 10.15 through 10.15.5; 10.15.6; 10.15.6; 10.15.7; 10.15.7; 10.15.7; +4 more |
| CVE-2021-1882 | 9.8 | Sep 8 | A memory corruption issue was addressed with improved validation Affected: 10.15 through 10.15.5; 10.15.6; 10.15.6; 10.15.7; 10.15.7; 10.15.7; +4 more |
| CVE-2021-1834 | 9.8 | Sep 8 | An out-of-bounds write issue was addressed with improved bounds checking Affected: 10.14; 10.14.0; 10.14.1; 10.14.2; 10.14.3; 10.14.4; +34 more |
| CVE-2021-30805 | 9.8 | Sep 8 | A memory corruption issue was addressed with improved input validation Affected: 10.14 through 10.14.6; 10.15 through 10.15.7; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +24 more |
| CVE-2021-30793 | 9.8 | Sep 8 | A logic issue was addressed with improved state management Affected: 10.14; 10.14.0; 10.14.1; 10.14.2; 10.14.3; 10.14.4; +34 more |
| CVE-2021-1818 | 9.8 | Apr 2 | A logic issue was addressed with improved state management Affected: 10.14 before 10.14.6; 10.15 before 10.15.7; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +11 more |
| CVE-2020-9866 | 9.8 | Oct 27 | A buffer overflow was addressed with improved bounds checking Affected: before 10.15.6 |
| CVE-2019-8531 | 9.8 | Oct 27 | A validation issue existed in Trust Anchor Management Affected: before 10.14.4 |
| CVE-2019-8767 | 9.8 | Oct 27 | A memory consumption issue was addressed with improved memory handling Affected: before 10.15 |
| CVE-2019-8756 | 9.8 | Oct 27 | Multiple memory corruption issues were addressed with improved input validation Affected: before 10.15 |
| CVE-2019-8746 | 9.8 | Oct 27 | An out-of-bounds read was addressed with improved input validation Affected: before 10.15 |
| CVE-2019-8716 | 9.8 | Oct 27 | A memory corruption issue was addressed with improved memory handling Affected: before 10.15.1 |
| CVE-2019-8547 | 9.8 | Oct 27 | An out-of-bounds read issue existed that led to the disclosure of kernel memory Affected: 10.12.6 before 10.14.5; 10.14.3 before 10.14.4 |
| CVE-2019-7288 | 9.8 | Oct 27 | The issue was addressed with improved validation on the FaceTime server Affected: before 10.14.3 |
| CVE-2018-4296 | 9.8 | Oct 27 | This issue is fixed in macOS Mojave 10.14 Affected: 10.14 |
| CVE-2020-9898 | 9.8 | Oct 22 | This issue was addressed with improved entitlements Affected: 10.13.6 before 10.15.6 |
| CVE-2020-9918 | 9.8 | Oct 16 | An out-of-bounds read was addressed with improved input validation Affected: before 10.15.6 |
| CVE-2020-9864 | 9.8 | Oct 16 | A logic issue was addressed with improved restrictions Affected: before 10.15.6 |
| CVE-2019-6203 | 9.8 | Apr 17 | A logic issue was addressed with improved state management Affected: before 10.14.4 |
| CVE-2020-3850 | 9.8 | Apr 1 | A memory corruption issue was addressed with improved input validation Affected: before 10.15.3 |
| CVE-2020-3849 | 9.8 | Apr 1 | A memory corruption issue was addressed with improved input validation Affected: before 10.15.3 |
| CVE-2020-3848 | 9.8 | Apr 1 | A memory corruption issue was addressed with improved input validation Affected: before 10.15.3 |
| CVE-2020-3847 | 9.8 | Apr 1 | An out-of-bounds read was addressed with improved input validation Affected: before 10.15.3 |
| CVE-2020-9769 | 9.8 | Apr 1 | Multiple issues were addressed by updating to version 8.1.1850 Affected: before 10.15.4 |
| CVE-2020-3911 | 9.8 | Apr 1 | A buffer overflow was addressed with improved bounds checking Affected: before 10.15.4 |
| CVE-2020-3910 | 9.8 | Apr 1 | A buffer overflow was addressed with improved size validation Affected: before 10.15.4 |
| CVE-2020-3909 | 9.8 | Apr 1 | A buffer overflow was addressed with improved bounds checking Affected: before 10.15.4 |
| CVE-2019-8662 | 9.8 | Dec 18 | This issue was addressed with improved checks Affected: before 10.14.6 |
| CVE-2019-8661 | 9.8 | Dec 18 | A use after free issue was addressed with improved memory management Affected: before 10.14.6 |
| CVE-2019-8660 | 9.8 | Dec 18 | A memory corruption issue was addressed with improved input validation Affected: before 10.14.6 |
| CVE-2019-8648 | 9.8 | Dec 18 | A memory corruption issue was addressed with improved input validation Affected: before 10.14.6 |
| CVE-2019-8641 | 9.8 | Dec 18 | An out-of-bounds read was addressed with improved input validation Affected: before 10.14.6 |
| CVE-2019-8600 | 9.8 | Dec 18 | A memory corruption issue was addressed with improved input validation Affected: before 10.14.5 |
The 500 most important CVEs for this product (exploited first, then by severity)