MA
Operating System
macOS
On CISA KEVExploited in the wildRansomware-linked
3,545
CVEs
79
On KEV
10.0
Max CVSS
337
New 30D
Severity mix
Critical 229High 260Medium 11Low 0
Watch
Add macOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24093 | 9.8 | Jan 27 | A permissions issue was addressed with additional restrictions Affected: before 13.7.3; 14.0 before 14.7.3 |
| CVE-2024-54534 | 9.8 | Dec 12 | The issue was addressed with improved memory handling Affected: before 15.2 |
| CVE-2024-54506 | 9.8 | Dec 12 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 15.2 |
| CVE-2024-54465 | 9.8 | Dec 12 | A logic issue was addressed with improved state management Affected: before 15.2 |
| CVE-2023-40414 | 9.8 | Jan 10 | A use-after-free issue was addressed with improved memory management Affected: before 14.0 |
| CVE-2023-40400 | 9.8 | Sep 27 | This issue was addressed with improved checks Affected: before 14.0 |
| CVE-2023-40397 | 9.8 | Sep 6 | The issue was addressed with improved checks Affected: before 13.5 |
| CVE-2023-38604 | 9.8 | Jul 28 | An out-of-bounds write issue was addressed with improved input validation Affected: before 11.7.9; 12.0 before 12.6.8; 13.0 before 13.5 |
| CVE-2023-38598 | 9.8 | Jul 28 | A use-after-free issue was addressed with improved memory management Affected: before 11.7.9; 12.0 before 12.6.8; 13.0 before 13.5 |
| CVE-2023-37285 | 9.8 | Jul 28 | An out-of-bounds read was addressed with improved bounds checking Affected: before 11.7.9; 12.0 before 12.6.8; 13.0 before 13.5 |
| CVE-2023-36495 | 9.8 | Jul 28 | An integer overflow was addressed with improved input validation Affected: 12.0 before 12.6.8; 13.0 before 13.5 |
| CVE-2023-34425 | 9.8 | Jul 28 | The issue was addressed with improved memory handling Affected: before 11.7.9; 12.0 before 12.6.8; 13.0 before 13.5 |
| CVE-2023-32412 | 9.8 | Jun 23 | A use-after-free issue was addressed with improved memory management Affected: 11.0 before 11.7.7; 12.0 before 12.6.6; 13.0 before 13.4 |
| CVE-2023-32387 | 9.8 | Jun 23 | A use-after-free issue was addressed with improved memory management Affected: 11.0.0 before 11.7.7; 12.0.0 before 12.6.6; 13.0 before 13.4 |
| CVE-2022-22630 | 9.8 | Jun 23 | A use after free issue was addressed with improved memory management Affected: 11.0 before 11.6.6; 12.0 before 12.3 |
| CVE-2023-28201 | 9.8 | May 8 | This issue was addressed with improved state management Affected: 13.0 before 13.3 |
| CVE-2023-27953 | 9.8 | May 8 | The issue was addressed with improved memory handling Affected: 11.0 before 11.7.5; 12.0 before 12.6.4; 13.0 before 13.3 |
| CVE-2023-23526 | 9.8 | May 8 | This was addressed with additional checks by Gatekeeper on files downloaded from an iCloud shared-by-me folder Affected: before 13.3 |
| CVE-2023-23513 | 9.8 | Feb 27 | A buffer overflow issue was addressed with improved memory handling Affected: before 11.7.3; 12.0 before 12.6.3; 13.0 before 13.2 |
| CVE-2022-46723 | 9.8 | Feb 27 | This issue was addressed with improved checks Affected: 11.0 before 11.7.1; 12.0.0 before 12.6.1 |
| CVE-2022-42842 | 9.8 | Dec 15 | The issue was addressed with improved memory handling Affected: 11.0 before 11.7.2; 12.0.0 before 12.6.2; 13.0 |
| CVE-2022-42837 | 9.8 | Dec 15 | An issue existed in the parsing of URLs Affected: 13.0 |
| CVE-2022-32221 | 9.8 | Dec 5 | When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been… Affected: before 12.6.3 |
| CVE-2022-42813 | 9.8 | Nov 1 | A certificate validation issue existed in the handling of WKWebView Affected: before 13 |
| CVE-2022-32941 | 9.8 | Nov 1 | The issue was addressed with improved bounds checks Affected: before 13; before 11.7; before 16.1; before 12.6; before 15.7 |
| CVE-2022-42808 | 9.8 | Nov 1 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 13 |
| CVE-2022-32882 | 9.8 | Sep 20 | This issue was addressed with improved checks Affected: 11.0 before 11.6.6; 12.0.0 before 12.4 |
| CVE-2022-32863 | 9.8 | Sep 20 | A memory corruption issue was addressed with improved state management Affected: 12.0.0 before 12.5 |
| CVE-2022-32788 | 9.8 | Sep 20 | A buffer overflow was addressed with improved bounds checking Affected: 12.0.0 before 12.5 |
| CVE-2022-32839 | 9.8 | Aug 24 | The issue was addressed with improved bounds checks Affected: before 10.15.7; 11.0 before 11.6.8; 12.0 before 12.5; 10.15.7; 10.15.7 |
| CVE-2022-37434 | 9.8 | Aug 5 | zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field Affected: 11.0 before 11.7.1; 12.0.0 before 12.6.1 |
| CVE-2022-32207 | 9.8 | Jul 7 | When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final… Affected: before 13.0 |
| CVE-2022-26776 | 9.8 | May 26 | This issue was addressed with improved checks Affected: 11.0 before 11.6.6; 12.0.0 before 12.4 |
| CVE-2022-26775 | 9.8 | May 26 | An integer overflow was addressed with improved input validation Affected: 12.0.0 before 12.4 |
| CVE-2022-26723 | 9.8 | May 26 | A memory corruption issue was addressed with improved input validation Affected: 11.0 before 11.6.6; 12.0 before 12.4 |
| CVE-2022-26711 | 9.8 | May 26 | An integer overflow issue was addressed with improved input validation Affected: 12.0.0 before 12.4 |
| CVE-2022-26708 | 9.8 | May 26 | This issue was addressed with improved checks Affected: 12.0.0 before 12.4 |
| CVE-2022-22641 | 9.8 | Mar 18 | A use after free issue was addressed with improved memory management Affected: 12.0 before 12.3 |
| CVE-2022-22632 | 9.8 | Mar 18 | A logic issue was addressed with improved state management Affected: 11.6 before 11.6.5; 12.0 before 12.3 |
| CVE-2022-22586 | 9.8 | Mar 18 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 12.2 |
| CVE-2022-22720 | 9.8 | Mar 14 | Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling Affected: before 10.15.7; 11.0 before 11.6.6; 12.0 through 12.4 |
| CVE-2022-0318 | 9.8 | Jan 21 | Heap-based Buffer Overflow in vim/vim prior to 8.2 Affected: before 13.0 |
| CVE-2021-44790 | 9.8 | Dec 20 | A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts) Affected: before 10.15.7; 11.0 before 11.6.6; 12.0 before 12.4 |
| CVE-2021-30678 | 9.8 | Sep 8 | A logic issue was addressed with improved state management Affected: 11.0 before 11.4 |
| CVE-2021-30655 | 9.8 | Sep 8 | An application may be able to execute arbitrary code with system privileges Affected: 11.0 before 11.3 |
| CVE-2021-1882 | 9.8 | Sep 8 | A memory corruption issue was addressed with improved validation Affected: 11.0 before 11.3 |
| CVE-2021-1834 | 9.8 | Sep 8 | An out-of-bounds write issue was addressed with improved bounds checking Affected: 11.0 before 11.3 |
| CVE-2021-1829 | 9.8 | Sep 8 | A type confusion issue was addressed with improved state handling Affected: 11.0 before 11.3 |
| CVE-2021-1770 | 9.8 | Sep 8 | A buffer overflow may result in arbitrary code execution Affected: 11.0 before 11.3 |
| CVE-2021-30805 | 9.8 | Sep 8 | A memory corruption issue was addressed with improved input validation Affected: 11.0 before 11.5 |
The 500 most important CVEs for this product (exploited first, then by severity)