MA
Operating System
macOS
On CISA KEVExploited in the wildRansomware-linked
3,583
CVEs
79
On KEV
10.0
Max CVSS
336
New 30D
Severity mix
Critical 229High 260Medium 11Low 0
Watch
Add macOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24247 | 9.8 | Mar 31 | A type confusion issue was addressed with improved checks Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24246 | 9.8 | Mar 31 | An injection issue was addressed with improved validation Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24245 | 9.8 | Mar 31 | This issue was addressed by adding a delay between verification code attempts Affected: before 15.4 |
| CVE-2025-24241 | 9.8 | Mar 31 | A configuration issue was addressed with additional restrictions Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24238 | 9.8 | Mar 31 | A logic issue was addressed with improved checks Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24237 | 9.8 | Mar 31 | A buffer overflow was addressed with improved bounds checking Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24233 | 9.8 | Mar 31 | A permissions issue was addressed with additional restrictions Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24232 | 9.8 | Mar 31 | This issue was addressed through improved state management Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24231 | 9.8 | Mar 31 | The issue was addressed with improved checks Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24230 | 9.8 | Mar 31 | An out-of-bounds read issue was addressed with improved input validation Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24211 | 9.8 | Mar 31 | This issue was addressed with improved memory handling Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24207 | 9.8 | Mar 31 | A permissions issue was addressed with additional restrictions Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24204 | 9.8 | Mar 31 | The issue was addressed with improved checks Affected: before 15.4 |
| CVE-2025-24195 | 9.8 | Mar 31 | An integer overflow was addressed with improved input validation Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24190 | 9.8 | Mar 31 | The issue was addressed with improved memory handling Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24181 | 9.8 | Mar 31 | A permissions issue was addressed with additional restrictions Affected: 13.0 before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24178 | 9.8 | Mar 31 | This issue was addressed through improved state management Affected: before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24172 | 9.8 | Mar 31 | A permissions issue was addressed with additional sandbox restrictions Affected: before 13.7.5; 14.0 before 14.7.5; 15.0 before 15.4 |
| CVE-2025-24146 | 9.8 | Jan 27 | This issue was addressed with improved redaction of sensitive information Affected: before 13.7.3; 14.0 before 14.7.3; 15.0 before 15.3 |
| CVE-2025-24102 | 9.8 | Jan 27 | The issue was addressed with improved checks Affected: 13.0 before 13.7.3; 14.0 before 14.7.3; 15.0 before 15.3 |
| CVE-2025-24093 | 9.8 | Jan 27 | A permissions issue was addressed with additional restrictions Affected: before 13.7.3; 14.0 before 14.7.3 |
| CVE-2024-54534 | 9.8 | Dec 12 | The issue was addressed with improved memory handling Affected: before 15.2 |
| CVE-2024-54506 | 9.8 | Dec 12 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 15.2 |
| CVE-2024-54465 | 9.8 | Dec 12 | A logic issue was addressed with improved state management Affected: before 15.2 |
| CVE-2023-40414 | 9.8 | Jan 10 | A use-after-free issue was addressed with improved memory management Affected: before 14.0 |
| CVE-2023-40400 | 9.8 | Sep 27 | This issue was addressed with improved checks Affected: before 14.0 |
| CVE-2023-40397 | 9.8 | Sep 6 | The issue was addressed with improved checks Affected: before 13.5 |
| CVE-2023-38604 | 9.8 | Jul 28 | An out-of-bounds write issue was addressed with improved input validation Affected: before 11.7.9; 12.0 before 12.6.8; 13.0 before 13.5 |
| CVE-2023-38598 | 9.8 | Jul 28 | A use-after-free issue was addressed with improved memory management Affected: before 11.7.9; 12.0 before 12.6.8; 13.0 before 13.5 |
| CVE-2023-37285 | 9.8 | Jul 28 | An out-of-bounds read was addressed with improved bounds checking Affected: before 11.7.9; 12.0 before 12.6.8; 13.0 before 13.5 |
| CVE-2023-36495 | 9.8 | Jul 28 | An integer overflow was addressed with improved input validation Affected: 12.0 before 12.6.8; 13.0 before 13.5 |
| CVE-2023-34425 | 9.8 | Jul 28 | The issue was addressed with improved memory handling Affected: before 11.7.9; 12.0 before 12.6.8; 13.0 before 13.5 |
| CVE-2023-32412 | 9.8 | Jun 23 | A use-after-free issue was addressed with improved memory management Affected: 11.0 before 11.7.7; 12.0 before 12.6.6; 13.0 before 13.4 |
| CVE-2023-32387 | 9.8 | Jun 23 | A use-after-free issue was addressed with improved memory management Affected: 11.0.0 before 11.7.7; 12.0.0 before 12.6.6; 13.0 before 13.4 |
| CVE-2022-22630 | 9.8 | Jun 23 | A use after free issue was addressed with improved memory management Affected: 11.0 before 11.6.6; 12.0 before 12.3 |
| CVE-2023-28201 | 9.8 | May 8 | This issue was addressed with improved state management Affected: 13.0 before 13.3 |
| CVE-2023-27953 | 9.8 | May 8 | The issue was addressed with improved memory handling Affected: 11.0 before 11.7.5; 12.0 before 12.6.4; 13.0 before 13.3 |
| CVE-2023-23526 | 9.8 | May 8 | This was addressed with additional checks by Gatekeeper on files downloaded from an iCloud shared-by-me folder Affected: before 13.3 |
| CVE-2023-23513 | 9.8 | Feb 27 | A buffer overflow issue was addressed with improved memory handling Affected: before 11.7.3; 12.0 before 12.6.3; 13.0 before 13.2 |
| CVE-2022-46723 | 9.8 | Feb 27 | This issue was addressed with improved checks Affected: 11.0 before 11.7.1; 12.0.0 before 12.6.1 |
| CVE-2022-42842 | 9.8 | Dec 15 | The issue was addressed with improved memory handling Affected: 11.0 before 11.7.2; 12.0.0 before 12.6.2; 13.0 |
| CVE-2022-42837 | 9.8 | Dec 15 | An issue existed in the parsing of URLs Affected: 13.0 |
| CVE-2022-32221 | 9.8 | Dec 5 | When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been… Affected: before 12.6.3 |
| CVE-2022-42813 | 9.8 | Nov 1 | A certificate validation issue existed in the handling of WKWebView Affected: before 13 |
| CVE-2022-32941 | 9.8 | Nov 1 | The issue was addressed with improved bounds checks Affected: before 13; before 11.7; before 16.1; before 12.6; before 15.7 |
| CVE-2022-42808 | 9.8 | Nov 1 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 13 |
| CVE-2022-32882 | 9.8 | Sep 20 | This issue was addressed with improved checks Affected: 11.0 before 11.6.6; 12.0.0 before 12.4 |
| CVE-2022-32863 | 9.8 | Sep 20 | A memory corruption issue was addressed with improved state management Affected: 12.0.0 before 12.5 |
| CVE-2022-32788 | 9.8 | Sep 20 | A buffer overflow was addressed with improved bounds checking Affected: 12.0.0 before 12.5 |
| CVE-2022-32839 | 9.8 | Aug 24 | The issue was addressed with improved bounds checks Affected: before 10.15.7; 11.0 before 11.6.8; 12.0 before 12.5; 10.15.7; 10.15.7 |
The 500 most important CVEs for this product (exploited first, then by severity)