macOS

CVEs (3,325)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2025-24212	Apple Inc. macOS	Med	0.41	6.3	0.00	Mar 31, 2025	This issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to break out of its sandbox.
CVE-2025-24115	Apple Inc. macOS	Med	0.41	6.3	0.00	Jan 27, 2025	A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to read files outside of its sandbox.
CVE-2024-54523	Apple Inc. macOS	Med	0.41	6.3	0.00	Jan 27, 2025	The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2. An app may be able to corrupt coprocessor memory.
CVE-2023-42918	Apple Inc. macOS Sonoma	Med	0.41	6.3	0.00	Jul 29, 2024	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2024-27885	Apple Inc. macOS	Med	0.41	6.3	0.00	Jun 10, 2024	This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to modify protected parts of the file system.
CVE-2024-27840	Apple Inc. macOS	Med	0.41	6.3	0.00	Jun 10, 2024	The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.2, watchOS 10.5. An attacker that has already achieved kernel code execution…
CVE-2023-42887	Apple Inc. macOS	Med	0.41	6.3	0.00	Jan 23, 2024	An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.6.4, macOS Sonoma 14.2. An app may be able to read arbitrary files.
CVE-2023-42914	Apple Inc. macOS	Med	0.41	6.3	0.01	Dec 12, 2023	The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, macOS Ventura 13.6.3, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Monterey 12.7.2. An app may be able to break out of its sandbox.
CVE-2023-32371	Apple Inc. Ipados	Med	0.41	6.3	0.00	Jun 23, 2023	The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. An app may be able to break out of its sandbox.
CVE-2023-27940	Apple Inc. Ipados	Med	0.41	6.3	0.00	Jun 23, 2023	The issue was addressed with additional permissions checks. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6, macOS Ventura 13.4. A sandboxed app may be able to observe system-wide network connections.
CVE-2023-27966	Apple Inc. macOS Ventura	Med	0.41	6.3	0.00	May 8, 2023	The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may be able to break out of its sandbox.
CVE-2023-27945	Apple Inc. macOS	Med	0.41	6.3	0.00	May 8, 2023	This issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A sandboxed app may be able to collect system logs.
CVE-2022-26755	Apple Inc. macOS	Med	0.41	6.3	0.01	May 26, 2022	This issue was addressed with improved environment sanitization. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to break out of its sandbox.
CVE-2020-27935	Apple Inc. Ipados	Med	0.41	6.3	0.02	Apr 2, 2021	Multiple issues were addressed with improved logic. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1, watchOS 7.1, tvOS 14.2. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2020-27901	Apple Inc. macOS Big Sur	Med	0.41	6.3	0.01	Apr 2, 2021	A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2020-10014	Apple Inc. macOS Big Sur	Med	0.41	6.3	0.01	Dec 8, 2020	A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to break out of its sandbox.
CVE-2019-8855	Apple Inc. macOS Catalina	Med	0.41	6.3	0.01	Oct 27, 2020	An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to access restricted files.
CVE-2019-8608	Apple Inc. macOS	Med	0.41	6.3	0.01	Dec 18, 2019	Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary…
CVE-2025-43238	Apple Inc. macOS	Med	0.40	6.2	0.00	Apr 2, 2026	An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination.
CVE-2026-28833	Apple Inc. macOS	Med	0.40	6.2	0.00	Mar 25, 2026	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. An app may be able to enumerate a user's installed apps.

CVE-2025-24212MedMar 31, 2025
Apple Inc.
macOS
risk 0.41cvss 6.3epss 0.00
This issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to break out of its sandbox.
CVE-2025-24115MedJan 27, 2025
Apple Inc.
macOS
risk 0.41cvss 6.3epss 0.00
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to read files outside of its sandbox.
CVE-2024-54523MedJan 27, 2025
Apple Inc.
macOS
risk 0.41cvss 6.3epss 0.00
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2. An app may be able to corrupt coprocessor memory.
CVE-2023-42918MedJul 29, 2024
Apple Inc.
macOS Sonoma
risk 0.41cvss 6.3epss 0.00
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2024-27885MedJun 10, 2024
Apple Inc.
macOS
risk 0.41cvss 6.3epss 0.00
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to modify protected parts of the file system.
CVE-2024-27840MedJun 10, 2024
Apple Inc.
macOS
risk 0.41cvss 6.3epss 0.00
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.2, watchOS 10.5. An attacker that has already achieved kernel code execution…
CVE-2023-42887MedJan 23, 2024
Apple Inc.
macOS
risk 0.41cvss 6.3epss 0.00
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.6.4, macOS Sonoma 14.2. An app may be able to read arbitrary files.
CVE-2023-42914MedDec 12, 2023
Apple Inc.
macOS
risk 0.41cvss 6.3epss 0.01
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, macOS Ventura 13.6.3, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Monterey 12.7.2. An app may be able to break out of its sandbox.
CVE-2023-32371MedJun 23, 2023
Apple Inc.
Ipados
risk 0.41cvss 6.3epss 0.00
The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. An app may be able to break out of its sandbox.
CVE-2023-27940MedJun 23, 2023
Apple Inc.
Ipados
risk 0.41cvss 6.3epss 0.00
The issue was addressed with additional permissions checks. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6, macOS Ventura 13.4. A sandboxed app may be able to observe system-wide network connections.
CVE-2023-27966MedMay 8, 2023
Apple Inc.
macOS Ventura
risk 0.41cvss 6.3epss 0.00
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may be able to break out of its sandbox.
CVE-2023-27945MedMay 8, 2023
Apple Inc.
macOS
risk 0.41cvss 6.3epss 0.00
This issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A sandboxed app may be able to collect system logs.
CVE-2022-26755MedMay 26, 2022
Apple Inc.
macOS
risk 0.41cvss 6.3epss 0.01
This issue was addressed with improved environment sanitization. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to break out of its sandbox.
CVE-2020-27935MedApr 2, 2021
Apple Inc.
Ipados
risk 0.41cvss 6.3epss 0.02
Multiple issues were addressed with improved logic. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1, watchOS 7.1, tvOS 14.2. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2020-27901MedApr 2, 2021
Apple Inc.
macOS Big Sur
risk 0.41cvss 6.3epss 0.01
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2020-10014MedDec 8, 2020
Apple Inc.
macOS Big Sur
risk 0.41cvss 6.3epss 0.01
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to break out of its sandbox.
CVE-2019-8855MedOct 27, 2020
Apple Inc.
macOS Catalina
risk 0.41cvss 6.3epss 0.01
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to access restricted files.
CVE-2019-8608MedDec 18, 2019
Apple Inc.
macOS
risk 0.41cvss 6.3epss 0.01
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary…
CVE-2025-43238MedApr 2, 2026
Apple Inc.
macOS
risk 0.40cvss 6.2epss 0.00
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination.
CVE-2026-28833MedMar 25, 2026
Apple Inc.
macOS
risk 0.40cvss 6.2epss 0.00
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. An app may be able to enumerate a user's installed apps.

Page 93 of 167