MA
Operating System
macOS
On CISA KEVExploited in the wildRansomware-linked
3,582
CVEs
79
On KEV
10.0
Max CVSS
337
New 30D
Severity mix
Critical 229High 260Medium 11Low 0
Watch
Add macOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22628 | 8.8 | Sep 23 | A use after free issue was addressed with improved memory management Affected: 12.0 before 12.3 |
| CVE-2022-22624 | 8.8 | Sep 23 | A use after free issue was addressed with improved memory management Affected: 12.0 before 12.3 |
| CVE-2022-22610 | 8.8 | Sep 23 | A memory corruption issue was addressed with improved state management Affected: 12.0 before 12.3 |
| CVE-2022-26696 | 8.8 | Sep 20 | This issue was addressed with improved environment sanitization Affected: 12.0.0 before 12.4 |
| CVE-2022-26748 | 8.8 | May 26 | An out-of-bounds write issue was addressed with improved input validation Affected: 11.0 before 11.6.6; 12.0 before 12.4 |
| CVE-2022-22590 | 8.8 | Mar 18 | A use after free issue was addressed with improved memory management Affected: 12.0.0 before 12.2 |
| CVE-2022-0729 | 8.8 | Feb 23 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440 Affected: before 13.0 |
| CVE-2021-30818 | 8.8 | Oct 28 | A type confusion issue was addressed with improved state handling Affected: before 12.0.1 |
| CVE-2021-30809 | 8.8 | Oct 28 | A use after free issue was addressed with improved memory management Affected: before 12.0.1 |
| CVE-2021-39537 | 8.8 | Sep 20 | An issue was discovered in ncurses through v6.2-1 Affected: 11.7; 13.0 |
| CVE-2021-30707 | 8.8 | Sep 8 | This issue was addressed with improved checks Affected: 11.0 before 11.4 |
| CVE-2021-30688 | 8.8 | Sep 8 | A malicious application may be able to break out of its sandbox Affected: 11.0 before 11.4 |
| CVE-2021-30677 | 8.8 | Sep 8 | This issue was addressed with improved environment sanitization Affected: 11.0 before 11.4 |
| CVE-2021-1876 | 8.8 | Sep 8 | A use after free issue was addressed with improved memory management Affected: 11.0 before 11.3 |
| CVE-2021-1867 | 8.8 | Sep 8 | An out-of-bounds read was addressed with improved input validation Affected: 11.0 before 11.3 |
| CVE-2021-1851 | 8.8 | Sep 8 | A logic issue was addressed with improved state management Affected: 11.0 before 11.3 |
| CVE-2021-1817 | 8.8 | Sep 8 | A memory corruption issue was addressed with improved state management Affected: 11.0 before 11.3 |
| CVE-2021-30799 | 8.8 | Sep 8 | Multiple memory corruption issues were addressed with improved memory handling Affected: 11.0 before 11.5 |
| CVE-2021-30797 | 8.8 | Sep 8 | This issue was addressed with improved checks Affected: before 11.5 |
| CVE-2021-30795 | 8.8 | Sep 8 | A use after free issue was addressed with improved memory management Affected: 11.0 before 11.5 |
| CVE-2021-30758 | 8.8 | Sep 8 | A type confusion issue was addressed with improved state handling Affected: before 11.5 |
| CVE-2021-30749 | 8.8 | Sep 8 | Multiple memory corruption issues were addressed with improved memory handling Affected: 11.0 before 11.4 |
| CVE-2021-30737 | 8.8 | Sep 8 | A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code Affected: 11.0.1 before 11.4 |
| CVE-2021-30734 | 8.8 | Sep 8 | Multiple memory corruption issues were addressed with improved memory handling Affected: 11.0.1 before 11.4 |
| CVE-2021-31008 | 8.8 | Aug 24 | A type confusion issue was addressed with improved memory handling Affected: 12.0.0 |
| CVE-2021-30953 | 8.8 | Aug 24 | An out-of-bounds read was addressed with improved bounds checking Affected: 12.0.0 through 12.1 |
| CVE-2021-30951 | 8.8 | Aug 24 | A use after free issue was addressed with improved memory management Affected: 12.0.0 before 12.1 |
| CVE-2021-30936 | 8.8 | Aug 24 | A use after free issue was addressed with improved memory management Affected: 12.0 before 12.1 |
| CVE-2021-30935 | 8.8 | Aug 24 | A logic issue was addressed with improved validation Affected: 11.0 before 11.6.2; 12.0 before 12.1 |
| CVE-2021-30934 | 8.8 | Aug 24 | A buffer overflow issue was addressed with improved memory handling Affected: 12.0 before 12.1 |
| CVE-2021-30889 | 8.8 | Aug 24 | A buffer overflow issue was addressed with improved memory handling Affected: before 12.0.1 |
| CVE-2021-30852 | 8.8 | Aug 24 | A type confusion issue was addressed with improved memory handling Affected: before 12.0.1 |
| CVE-2021-30851 | 8.8 | Aug 24 | A memory corruption vulnerability was addressed with improved locking Affected: before 12.0.1; 12.0.1 |
| CVE-2021-1844 | 8.8 | Apr 2 | A memory corruption issue was addressed with improved validation Affected: before 11.2.3 |
| CVE-2021-1792 | 8.8 | Apr 2 | An out-of-bounds read was addressed with improved bounds checking Affected: 11.0 before 11.2 |
| CVE-2021-1788 | 8.8 | Apr 2 | A use after free issue was addressed with improved memory management Affected: 11.0 before 11.2 |
| CVE-2020-29633 | 8.8 | Apr 2 | An authentication issue was addressed with improved state management Affected: 11.0 before 11.2 |
| CVE-2020-27906 | 8.8 | Dec 8 | Multiple integer overflows were addressed with improved input validation Affected: before 11.0.1 |
| CVE-2020-15969 | 8.8 | Nov 3 | Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: before 11.1 |
| CVE-2019-6224 | 8.8 | Mar 5 | A buffer overflow issue was addressed with improved memory handling Affected: before macOS Mojave 10.14.3 |
| CVE-2019-6211 | 8.8 | Mar 5 | A memory corruption issue was addressed with improved state management Affected: before macOS Mojave 10.14.3 |
| CVE-2019-6200 | 8.8 | Mar 5 | An out-of-bounds read was addressed with improved input validation Affected: before macOS Mojave 10.14.3 |
| CVE-2018-4404 | 8.8 | Jan 11 | In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improved memory handling Affected: before 10.13.5 |
| CVE-2025-43257 | 8.7 | Apr 2 | This issue was addressed with improved handling of symlinks Affected: before 15.6 |
| CVE-2026-43760 | 8.6 | Jul 27 | An access issue was addressed with improved access restrictions Affected: before 14.8.8; before 26.6; before 26.7 |
| CVE-2026-28973 | 8.6 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 14.8.8; before 15.7.8; before 26.6 |
| CVE-2024-54514 | 8.6 | Dec 12 | The issue was addressed with improved checks Affected: 13.0 before 13.7.2; 14.0 before 14.7.2; 15.0 before 15.2 |
| CVE-2024-44256 | 8.6 | Oct 28 | The issue was addressed with improved input sanitization Affected: 13.0 before 13.7.1; 14.0 before 14.7.1 |
| CVE-2024-44270 | 8.6 | Oct 28 | A logic issue was addressed with improved validation Affected: before 13.7.1; 14.0 before 14.7.1 |
| CVE-2024-23299 | 8.6 | Jun 10 | The issue was addressed with improved checks Affected: before 12.7.4; 13.0 before 13.6.5; 14.0 before 14.4 |
The 500 most important CVEs for this product (exploited first, then by severity)