MA
Operating System
macOS
On CISA KEVExploited in the wildRansomware-linked
3,545
CVEs
79
On KEV
10.0
Max CVSS
337
New 30D
Severity mix
Critical 229High 260Medium 11Low 0
Watch
Add macOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1876 | 8.8 | Sep 8 | A use after free issue was addressed with improved memory management Affected: 11.0 before 11.3 |
| CVE-2021-1867 | 8.8 | Sep 8 | An out-of-bounds read was addressed with improved input validation Affected: 11.0 before 11.3 |
| CVE-2021-1851 | 8.8 | Sep 8 | A logic issue was addressed with improved state management Affected: 11.0 before 11.3 |
| CVE-2021-1817 | 8.8 | Sep 8 | A memory corruption issue was addressed with improved state management Affected: 11.0 before 11.3 |
| CVE-2021-30799 | 8.8 | Sep 8 | Multiple memory corruption issues were addressed with improved memory handling Affected: 11.0 before 11.5 |
| CVE-2021-30797 | 8.8 | Sep 8 | This issue was addressed with improved checks Affected: before 11.5 |
| CVE-2021-30795 | 8.8 | Sep 8 | A use after free issue was addressed with improved memory management Affected: 11.0 before 11.5 |
| CVE-2021-30758 | 8.8 | Sep 8 | A type confusion issue was addressed with improved state handling Affected: before 11.5 |
| CVE-2021-30749 | 8.8 | Sep 8 | Multiple memory corruption issues were addressed with improved memory handling Affected: 11.0 before 11.4 |
| CVE-2021-30737 | 8.8 | Sep 8 | A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code Affected: 11.0.1 before 11.4 |
| CVE-2021-30734 | 8.8 | Sep 8 | Multiple memory corruption issues were addressed with improved memory handling Affected: 11.0.1 before 11.4 |
| CVE-2021-31008 | 8.8 | Aug 24 | A type confusion issue was addressed with improved memory handling Affected: 12.0.0 |
| CVE-2021-30953 | 8.8 | Aug 24 | An out-of-bounds read was addressed with improved bounds checking Affected: 12.0.0 through 12.1 |
| CVE-2021-30951 | 8.8 | Aug 24 | A use after free issue was addressed with improved memory management Affected: 12.0.0 before 12.1 |
| CVE-2021-30936 | 8.8 | Aug 24 | A use after free issue was addressed with improved memory management Affected: 12.0 before 12.1 |
| CVE-2021-30935 | 8.8 | Aug 24 | A logic issue was addressed with improved validation Affected: 11.0 before 11.6.2; 12.0 before 12.1 |
| CVE-2021-30934 | 8.8 | Aug 24 | A buffer overflow issue was addressed with improved memory handling Affected: 12.0 before 12.1 |
| CVE-2021-30889 | 8.8 | Aug 24 | A buffer overflow issue was addressed with improved memory handling Affected: before 12.0.1 |
| CVE-2021-30852 | 8.8 | Aug 24 | A type confusion issue was addressed with improved memory handling Affected: before 12.0.1 |
| CVE-2021-30851 | 8.8 | Aug 24 | A memory corruption vulnerability was addressed with improved locking Affected: before 12.0.1; 12.0.1 |
| CVE-2021-1844 | 8.8 | Apr 2 | A memory corruption issue was addressed with improved validation Affected: before 11.2.3 |
| CVE-2021-1792 | 8.8 | Apr 2 | An out-of-bounds read was addressed with improved bounds checking Affected: 11.0 before 11.2 |
| CVE-2021-1788 | 8.8 | Apr 2 | A use after free issue was addressed with improved memory management Affected: 11.0 before 11.2 |
| CVE-2020-29633 | 8.8 | Apr 2 | An authentication issue was addressed with improved state management Affected: 11.0 before 11.2 |
| CVE-2020-27906 | 8.8 | Dec 8 | Multiple integer overflows were addressed with improved input validation Affected: before 11.0.1 |
| CVE-2020-15969 | 8.8 | Nov 3 | Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: before 11.1 |
| CVE-2019-6224 | 8.8 | Mar 5 | A buffer overflow issue was addressed with improved memory handling Affected: before macOS Mojave 10.14.3 |
| CVE-2019-6211 | 8.8 | Mar 5 | A memory corruption issue was addressed with improved state management Affected: before macOS Mojave 10.14.3 |
| CVE-2019-6200 | 8.8 | Mar 5 | An out-of-bounds read was addressed with improved input validation Affected: before macOS Mojave 10.14.3 |
| CVE-2018-4404 | 8.8 | Jan 11 | In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improved memory handling Affected: before 10.13.5 |
| CVE-2025-43257 | 8.7 | Apr 2 | This issue was addressed with improved handling of symlinks Affected: before 15.6 |
| CVE-2026-43760 | 8.6 | Jul 27 | An access issue was addressed with improved access restrictions Affected: before 14.8.8; before 26.6; before 26.7 |
| CVE-2026-28973 | 8.6 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 14.8.8; before 15.7.8; before 26.6 |
| CVE-2024-54514 | 8.6 | Dec 12 | The issue was addressed with improved checks Affected: 13.0 before 13.7.2; 14.0 before 14.7.2; 15.0 before 15.2 |
| CVE-2024-44256 | 8.6 | Oct 28 | The issue was addressed with improved input sanitization Affected: 13.0 before 13.7.1; 14.0 before 14.7.1 |
| CVE-2024-44270 | 8.6 | Oct 28 | A logic issue was addressed with improved validation Affected: before 13.7.1; 14.0 before 14.7.1 |
| CVE-2024-23299 | 8.6 | Jun 10 | The issue was addressed with improved checks Affected: before 12.7.4; 13.0 before 13.6.5; 14.0 before 14.4 |
| CVE-2024-27813 | 8.6 | May 14 | The issue was addressed with improved checks Affected: 14.0 before 14.5 |
| CVE-2023-42947 | 8.6 | Mar 28 | A path handling issue was addressed with improved validation Affected: 12.0 before 12.7.2; 13.0 before 13.6.3; 14.0 before 14.2 |
| CVE-2024-2398 | 8.6 | Mar 27 | HTTP/2 push headers memory-leak Affected: before 12.7.6; 13.0 before 13.6.8; 14.0 before 14.6 |
| CVE-2024-23278 | 8.6 | Mar 8 | The issue was addressed with improved checks Affected: 13.0 before 13.6.5; 14.0 before 14.4 |
| CVE-2024-23246 | 8.6 | Mar 8 | This issue was addressed by removing the vulnerable code Affected: 14.0 before 14.4 |
| CVE-2024-0258 | 8.6 | Mar 8 | The issue was addressed with improved memory handling Affected: 14.0 before 14.4 |
| CVE-2023-42838 | 8.6 | Feb 21 | An access issue was addressed with improvements to the sandbox Affected: 12.0 before 12.7.2; 13.0 before 13.6.3; 14.0 |
| CVE-2023-40448 | 8.6 | Sep 27 | The issue was addressed with improved handling of protocols Affected: before 14.0 |
| CVE-2023-32364 | 8.6 | Jul 27 | A logic issue was addressed with improved restrictions Affected: 11.0 before 11.7.9; 12.0.0 before 12.6.8; 13.0 before 13.5 |
| CVE-2023-32414 | 8.6 | Jun 23 | The issue was addressed with improved checks Affected: 13.0 before 13.4 |
| CVE-2023-27944 | 8.6 | May 8 | This issue was addressed with a new entitlement Affected: before 11.7.5; 12.0 before 12.6.4; 13.0 before 13.3 |
| CVE-2022-46720 | 8.6 | May 8 | An integer overflow was addressed with improved input validation Affected: before 13.1 |
| CVE-2023-23531 | 8.6 | Feb 27 | The issue was addressed with improved memory handling Affected: before 13.2 |
The 500 most important CVEs for this product (exploited first, then by severity)