MA
Operating System
macOS
On CISA KEVExploited in the wildRansomware-linked
3,544
CVEs
79
On KEV
10.0
Max CVSS
337
New 30D
Severity mix
Critical 229High 260Medium 11Low 0
Watch
Add macOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-30952 In wildKEV | 7.8 | Aug 24 | Apple Multiple Products Integer Overflow or Wraparound Vulnerability Affected: before 12.1; before 15.2; before 15.2 |
| CVE-2021-30900 In wildKEV | 7.8 | Aug 24 | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability Affected: before 11.6.1 |
| CVE-2021-30883 In wildKEV | 7.8 | Aug 24 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 12.0; before 11.6; before 8.1; before 15.1 |
| CVE-2021-30869 In wildKEV | 7.8 | Aug 24 | Apple iOS, iPadOS, and macOS Type Confusion Vulnerability Affected: before 11.2; before 12.5; before 2021 |
| CVE-2021-30860 In wildKEV | 7.8 | Aug 24 | Apple Multiple Products Integer Overflow Vulnerability Affected: before 11.6; before 2021-005 |
| CVE-2020-27930 In wildKEV | 7.8 | Dec 8 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 11.0; before 12.4; before 6.2; before 5.3; before 2020; before 10.15 |
| CVE-2020-27932 In wildKEV | 7.8 | Dec 8 | Apple Multiple Products Type Confusion Vulnerability Affected: before 11.0; before 12.4; before 6.2; before 5.3; before 2020; before 10.15 |
| CVE-2020-9859 In wildKEV | 7.8 | Jun 5 | Apple Multiple Products Code Execution Vulnerability Affected: before macOS Catalina 10.15.5 Supplemental Update |
| CVE-2020-3837 In wildKEV | 7.8 | Feb 27 | Apple Multiple Products Memory Corruption Vulnerability Affected: before macOS Catalina 10.15.3 |
| CVE-2019-8605 In wildKEV | 7.8 | Dec 18 | Apple Multiple Products Use-After-Free Vulnerability Affected: before macOS Mojave 10.14.5 |
| CVE-2019-7286 In wildKEV | 7.8 | Dec 18 | Apple Multiple Products Memory Corruption Vulnerability Affected: before macOS Mojave 10.14.3 Supplemental Update |
| CVE-2019-8526 In wildKEV | 7.8 | Dec 18 | Apple macOS Use-After-Free Vulnerability Affected: before macOS Mojave 10.14.4 |
| CVE-2015-1130 In wildKEV | 7.8 | Apr 10 | Apple OS X Authentication Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2014-4404 In wildKEV | 7.8 | Sep 18 | Apple OS X Heap-Based Buffer Overflow Vulnerability Affected: All versions, or not specified |
| CVE-2021-31010 In wildKEV | 7.5 | Aug 24 | Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability Affected: before 11.6; before 2021 |
| CVE-2019-6223 In wildKEV | 7.5 | Mar 5 | Apple iOS and macOS Group Facetime Vulnerability Affected: before macOS Mojave 10.14.3 |
| CVE-2022-48618 In wildKEV | 7.0 | Jan 9 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 13.1 |
| CVE-2021-1782 In wildKEV | 7.0 | Apr 2 | Apple Multiple Products Race Condition Vulnerability Affected: before 11.2; before 7.3; before 14.4 |
| CVE-2023-42916 In wildKEV | 6.5 | Nov 30 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Affected: before 14.1 |
| CVE-2023-28204 In wildKEV | 6.5 | Jun 23 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Affected: before 13.4 |
| CVE-2024-44309 In wildKEV | 6.3 | Nov 19 | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability Affected: before 15.1.1 |
| CVE-2025-43520 In wildKEV | 5.5 | Dec 12 | Apple Multiple Products Classic Buffer Overflow Vulnerability Affected: before 14.8.2; before 15.7.2; before 26.1 |
| CVE-2023-41991 In wildKEV | 5.5 | Sep 21 | Apple Multiple Products Improper Certificate Validation Vulnerability Affected: before 13.6 |
| CVE-2023-38606 In wildKEV | 5.5 | Jul 26 | Apple Multiple Products Kernel Unspecified Vulnerability Affected: before 13.5; before 11.7; before 12.6 |
| CVE-2022-22674 In wildKEV | 5.5 | May 26 | Apple macOS Out-of-Bounds Read Vulnerability Affected: before 12.3; before 2022; before 11.6 |
| CVE-2021-30657 In wildKEV | 5.5 | Sep 8 | Apple macOS Unspecified Vulnerability Affected: before 11.3; before 2021 |
| CVE-2020-27950 In wildKEV | 5.5 | Dec 8 | Apple Multiple Products Memory Initialization Vulnerability Affected: before 11.0; before 12.4; before 6.2; before 5.3; before 2020; before 10.15 |
| CVE-2020-9934 In wildKEV | 5.5 | Oct 16 | Apple iOS, iPadOS, and macOS Input Validation Vulnerability Affected: before macOS Catalina 10.15.6 |
| CVE-2025-43200 In wildKEV | 4.2 | Jun 16 | Apple Multiple Products Unspecified Vulnerability Affected: before 13.7.4; before 14.7.4; before 15.3.1 |
| CVE-2026-65381 | 10.0 | Sep 14 | A validation issue existed in the entitlement verification Affected: before 15.8; before 26.7; before 27 |
| CVE-2024-44148 | 10.0 | Sep 17 | This issue was addressed with improved validation of file attributes Affected: before 15.0 |
| CVE-2024-44146 | 10.0 | Sep 17 | A logic issue was addressed with improved file handling Affected: before 15.0 |
| CVE-2023-40455 | 10.0 | Sep 27 | A permissions issue was addressed with additional restrictions Affected: before 14.0 |
| CVE-2023-38586 | 10.0 | Sep 27 | An access issue was addressed with additional sandbox restrictions Affected: before 14.0 |
| CVE-2022-32845 | 10.0 | Sep 23 | This issue was addressed with improved checks Affected: 12.0 before 12.5 |
| CVE-2019-6235 | 10.0 | Mar 4 | A memory corruption issue was addressed with improved validation Affected: before macOS Mojave 10.14.3 |
| CVE-2026-65414 | 9.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 15.8; before 26.7; before 27 |
| CVE-2026-84609 | 9.8 | Sep 14 | A permissions issue was addressed with improved path validation Affected: before 15.8; before 26.7; before 27 |
| CVE-2026-84520 | 9.8 | Sep 14 | A buffer overflow was addressed with improved size validation Affected: before 27 |
| CVE-2026-84561 | 9.8 | Sep 14 | A double free issue was addressed with improved memory management Affected: before 15.8; before 26.7; before 27 |
| CVE-2026-43757 | 9.8 | Jul 27 | An out-of-bounds read was addressed with improved bounds checking Affected: before 14.8.8; before 15.7.8; before 26.6 |
| CVE-2026-43805 | 9.8 | Jul 27 | A race condition was addressed with improved state handling Affected: before 14.8.8; before 15.7.8; before 26.6 |
| CVE-2026-39873 | 9.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 14.8.8; before 15.7.8; before 26.6 |
| CVE-2026-64691 | 9.8 | Jul 27 | A buffer overflow was addressed with improved size validation Affected: before 26.6 |
| CVE-2026-43809 | 9.8 | Jul 27 | An out-of-bounds read was addressed with improved bounds checking Affected: before 14.8.8; before 15.7.8; before 26.6 |
| CVE-2026-43799 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 14.8.8; before 15.7.8; before 26.6 |
| CVE-2026-28982 | 9.8 | Jul 27 | A race condition was addressed with improved locking Affected: before 14.8.8; before 15.7.8; before 26.6 |
| CVE-2026-64700 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 14.8.8; before 15.7.8; before 26.6 |
| CVE-2026-64720 | 9.8 | Jul 27 | A race condition was addressed with improved state handling Affected: before 26.6 |
| CVE-2026-43812 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 15.7.8; before 26.6 |
The 500 most important CVEs for this product (exploited first, then by severity)
