MA
Operating System
macOS
On CISA KEVExploited in the wildRansomware-linked
3,583
CVEs
79
On KEV
10.0
Max CVSS
336
New 30D
Severity mix
Critical 229High 260Medium 11Low 0
Watch
Add macOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-43347 | 9.8 | Sep 15 | This issue was addressed by removing the vulnerable code Affected: before 26 |
| CVE-2025-43237 | 9.8 | Jul 29 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 15.6 |
| CVE-2025-43233 | 9.8 | Jul 29 | This issue was addressed with improved access restrictions Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43186 | 9.8 | Jul 29 | The issue was addressed with improved memory handling Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43245 | 9.8 | Jul 29 | A downgrade issue was addressed with additional code-signing restrictions Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43253 | 9.8 | Jul 29 | This issue was addressed with improved input validation Affected: before 14.7.7; before 15.6 |
| CVE-2025-43199 | 9.8 | Jul 29 | A permissions issue was addressed by removing the vulnerable code Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43232 | 9.8 | Jul 29 | A permissions issue was addressed with additional restrictions Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43198 | 9.8 | Jul 29 | This issue was addressed by removing the vulnerable code Affected: before 14.7.7; before 15.6 |
| CVE-2025-43209 | 9.8 | Jul 29 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43194 | 9.8 | Jul 29 | The issue was addressed with improved checks Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43244 | 9.8 | Jul 29 | A race condition was addressed with improved state handling Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43275 | 9.8 | Jul 29 | A race condition was addressed with additional validation Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43234 | 9.8 | Jul 29 | Multiple memory corruption issues were addressed with improved input validation Affected: before 15.6 |
| CVE-2025-43261 | 9.8 | Jul 29 | A logic issue was addressed with improved checks Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43220 | 9.8 | Jul 29 | This issue was addressed with improved validation of symlinks Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43189 | 9.8 | Jul 29 | This issue was addressed with improved memory handling Affected: before 14.7.7; before 15.6 |
| CVE-2025-43222 | 9.8 | Jul 29 | A use-after-free issue was addressed by removing the vulnerable code Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43243 | 9.8 | Jul 29 | A permissions issue was addressed with additional restrictions Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43193 | 9.8 | Jul 29 | The issue was addressed with improved memory handling Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-31279 | 9.8 | Jul 29 | A permissions issue was addressed with additional restrictions Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43192 | 9.8 | Jul 29 | A configuration issue was addressed with additional restrictions Affected: before 14.7.7; before 15.6 |
| CVE-2025-43184 | 9.8 | Jul 29 | This issue was addressed by adding an additional prompt for user consent Affected: before 13.7.7; before 14.7.7; before 15.4 |
| CVE-2025-30466 | 9.8 | May 29 | This issue was addressed through improved state management Affected: before 15.4 |
| CVE-2025-31194 | 9.8 | Mar 31 | An authentication issue was addressed with improved state management Affected: before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-31183 | 9.8 | Mar 31 | The issue was addressed with improved restriction of data container access Affected: before 14.7.5; 15.0 before 15.4 |
| CVE-2025-31182 | 9.8 | Mar 31 | This issue was addressed with improved handling of symlinks Affected: before 13.7.5; 14.0 before 14.7.5 |
| CVE-2025-30465 | 9.8 | Mar 31 | A permissions issue was addressed with improved validation Affected: before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-30462 | 9.8 | Mar 31 | A library injection issue was addressed with additional restrictions Affected: before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-30461 | 9.8 | Mar 31 | An access issue was addressed with additional sandbox restrictions on the system pasteboards Affected: before 15.4 |
| CVE-2025-30458 | 9.8 | Mar 31 | A permissions issue was addressed with additional restrictions Affected: before 15.4 |
| CVE-2025-30457 | 9.8 | Mar 31 | This issue was addressed with improved validation of symlinks Affected: before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-30452 | 9.8 | Mar 31 | The issue was addressed with improved checks Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-30444 | 9.8 | Mar 31 | A race condition was addressed with improved locking Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-30433 | 9.8 | Mar 31 | This issue was addressed with improved access restrictions Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-30430 | 9.8 | Mar 31 | This issue was addressed through improved state management Affected: 15.0 before 15.4 |
| CVE-2025-30426 | 9.8 | Mar 31 | This issue was addressed with additional entitlement checks Affected: 15.0 before 15.4 |
| CVE-2025-30424 | 9.8 | Mar 31 | A logging issue was addressed with improved data redaction Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24273 | 9.8 | Mar 31 | An out-of-bounds write issue was addressed with improved bounds checking Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24269 | 9.8 | Mar 31 | The issue was addressed with improved memory handling Affected: before 15.4 |
| CVE-2025-24266 | 9.8 | Mar 31 | A buffer overflow was addressed with improved bounds checking Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24265 | 9.8 | Mar 31 | An out-of-bounds read was addressed with improved bounds checking Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24264 | 9.8 | Mar 31 | The issue was addressed with improved memory handling Affected: 15.0 before 15.4 |
| CVE-2025-24263 | 9.8 | Mar 31 | A privacy issue was addressed by moving sensitive data to a protected location Affected: before 15.4 |
| CVE-2025-24260 | 9.8 | Mar 31 | The issue was addressed with improved memory handling Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24259 | 9.8 | Mar 31 | This issue was addressed with additional entitlement checks Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24256 | 9.8 | Mar 31 | The issue was addressed with improved bounds checks Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24253 | 9.8 | Mar 31 | This issue was addressed with improved handling of symlinks Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24250 | 9.8 | Mar 31 | This issue was addressed with improved access restrictions Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24249 | 9.8 | Mar 31 | A permissions issue was addressed with additional sandbox restrictions Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
The 500 most important CVEs for this product (exploited first, then by severity)