macOS

CVEs (3,816)

• CVE-2023-32434HigKEVJun 23, 2023
  Apple Inc.

  macOS
  risk 0.67cvss 7.8epss 0.52

  An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute…

• CVE-2020-3837HigKEVFeb 27, 2020
  Apple Inc.

  tvOS
  risk 0.67cvss 7.8epss 0.14

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.

• CVE-2019-8662CriDec 18, 2019
  Apple Inc.

  tvOS
  risk 0.67cvss 9.8epss 0.10

  This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary.

• CVE-2019-8661CriDec 18, 2019
  Apple Inc.

  macOS
  risk 0.67cvss 9.8epss 0.10

  A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.6. A remote attacker may be able to cause arbitrary code execution.

• CVE-2019-8605HigKEVDec 18, 2019
  Apple Inc.

  tvOS
  risk 0.67cvss 7.8epss 0.17

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

• CVE-2019-7286HigKEVDec 18, 2019
  Apple Inc.

  iOS
  risk 0.67cvss 7.8epss 0.16

  A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.

• CVE-2022-22720CriMar 14, 2022
  Apache

  HTTP Server
  risk 0.66cvss 9.8epss 0.28

  Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

• CVE-2024-44148CriSep 17, 2024
  Apple Inc.

  macOS
  risk 0.65cvss 10.0epss 0.01

  This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Sequoia 15. An app may be able to break out of its sandbox.

• CVE-2024-44146CriSep 17, 2024
  Apple Inc.

  macOS
  risk 0.65cvss 10.0epss 0.01

  A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15. An app may be able to break out of its sandbox.

• CVE-2023-40455CriSep 27, 2023
  Apple Inc.

  macOS
  risk 0.65cvss 10.0epss 0.01

  A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14. A sandboxed process may be able to circumvent sandbox restrictions.

• CVE-2023-38586CriSep 27, 2023
  Apple Inc.

  macOS
  risk 0.65cvss 10.0epss 0.01

  An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sonoma 14. A sandboxed process may be able to circumvent sandbox restrictions.

• CVE-2022-32845CriSep 23, 2022
  Apple Inc.

  macOS
  risk 0.65cvss 10.0epss 0.05

  This issue was addressed with improved checks. This issue is fixed in watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to break out of its sandbox.

• CVE-2022-37434CriAug 5, 2022
  Zlib

  Zlib
  risk 0.65cvss 9.8epss 0.18

  zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable…

• CVE-2021-30807HigKEVOct 19, 2021
  Apple Inc.

  macOS
  risk 0.65cvss 7.8epss 0.29

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this…

• CVE-2019-8600CriDec 18, 2019
  Apple Inc.

  iTunes
  risk 0.65cvss 9.8epss 0.20

  A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A maliciously crafted SQL query may lead to arbitrary code execution.

• CVE-2018-4310CriApr 3, 2019
  Apple Inc.

  macOS
  risk 0.65cvss 10.0epss 0.02

  An access issue was addressed with additional sandbox restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14.

• CVE-2019-6235CriMar 4, 2019
  Apple Inc.

  iTunes
  risk 0.65cvss 10.0epss 0.02

  A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions.

• CVE-2018-4229CriJun 8, 2018
  Apple Inc.

  macOS
  risk 0.65cvss 10.0epss 0.02

  An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Grand Central Dispatch" component. It allows attackers to bypass a sandbox protection mechanism by leveraging the misparsing of entitlement plists.

• CVE-2018-4091CriApr 3, 2018
  Apple Inc.

  macOS
  risk 0.65cvss 10.0epss 0.02

  An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Sandbox" component. It allows bypass of a sandbox protection mechanism.

• CVE-2026-64774CriJul 27, 2026
  Apple Inc.

  macOS
  risk 0.64cvss 9.8epss 0.00

  An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause…