macOS

CVEs (3,816)

• CVE-2024-40794MedJul 29, 2024
  Apple Inc.

  macOS
  risk 0.35cvss 5.3epss 0.01

  This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Private Browsing tabs may be accessed without authentication.

• CVE-2024-27881MedJul 29, 2024
  Apple Inc.

  macOS
  risk 0.35cvss 5.3epss 0.01

  A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app may be able to access information about a user’s contacts.

• CVE-2024-2466MedMar 27, 2024
  Curl

  Curl
  risk 0.35cvss 6.5epss 0.01

  libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hostname function when the specified hostname was given as an IP address, therefore completely…

• CVE-2023-42845MedOct 25, 2023
  Apple Inc.

  macOS
  risk 0.35cvss 5.3epss 0.01

  An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. Photos in the Hidden Photos Album may be viewed without authentication.

• CVE-2023-40408MedOct 25, 2023
  Apple Inc.

  macOS
  risk 0.35cvss 5.3epss 0.01

  An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Hide My Email may be deactivated unexpectedly.

• CVE-2023-44216MedSep 27, 2023
  Imagination Technologies

  PVRIC
  risk 0.35cvss 5.3epss 0.02

  PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can…

• CVE-2023-40417MedSep 27, 2023
  Apple Inc.

  macOS
  risk 0.35cvss 5.4epss 0.01

  A window management issue was addressed with improved state management. This issue is fixed in Safari 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Visiting a website that frames malicious content may lead to UI spoofing.

• CVE-2023-32370MedSep 6, 2023
  Apple Inc.

  macOS
  risk 0.35cvss 5.3epss 0.01

  A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Policy to block domains with wildcards may fail.

• CVE-2022-32943MedDec 15, 2022
  Apple Inc.

  macOS
  risk 0.35cvss 5.3epss 0.01

  The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Shake-to-undo may allow a deleted photo to be re-surfaced without authentication.

• CVE-2022-32938MedNov 1, 2022
  Apple Inc.

  macOS
  risk 0.35cvss 5.3epss 0.01

  A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. A shortcut may be able to check the existence of an arbitrary path on the file system.

• CVE-2022-32928MedNov 1, 2022
  Apple Inc.

  macOS
  risk 0.35cvss 5.3epss 0.01

  A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. A user in a privileged network position may be able to intercept mail credentials.

• CVE-2022-26725MedMay 26, 2022
  Apple Inc.

  macOS
  risk 0.35cvss 5.3epss 0.01

  A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. Photo location information may persist after it is removed with Preview Inspector.

• CVE-2022-29046MedApr 12, 2022
  Jenkins Project

  Subversion
  risk 0.35cvss 5.4epss 0.02

  Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure…

• CVE-2021-30720MedSep 8, 2021
  Apple Inc.

  macOS
  risk 0.35cvss 5.4epss 0.01

  A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious website may be able to access restricted ports on arbitrary servers.

• CVE-2021-30930MedAug 24, 2021
  Apple Inc.

  macOS
  risk 0.35cvss 5.3epss 0.01

  A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. An attacker may be able to track users through their IP address.

• CVE-2021-30904MedAug 24, 2021
  Apple Inc.

  macOS
  risk 0.35cvss 5.3epss 0.01

  A sync issue was addressed with improved state validation. This issue is fixed in macOS Monterey 12.0.1. A user's messages may continue to sync after the user has signed out of iMessage.

• CVE-2019-8858MedOct 27, 2020
  Apple Inc.

  macOS Catalina
  risk 0.35cvss 5.3epss 0.01

  A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006. A user who shares their screen may not be able to end screen sharing.

• CVE-2019-8796MedOct 27, 2020
  Apple Inc.

  Ipados
  risk 0.35cvss 5.3epss 0.01

  A logic issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, iOS 12.4.3, watchOS 6.1, iOS 13.2 and iPadOS 13.2. AirDrop transfers may be unexpectedly accepted while in Everyone mode.

• CVE-2020-9787MedOct 22, 2020
  Apple Inc.

  tvOS
  risk 0.35cvss 5.3epss 0.01

  A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. Some websites may not have appeared in Safari Preferences.

• CVE-2020-14155MedJun 15, 2020
  Pcre

  Pcre
  risk 0.35cvss 5.3epss 0.04

  libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.