Mac OS X vulnerabilities

77 known vulnerabilities in Mac OS X from Apple. 74 are rated high or critical, and 24 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  macOS: Access of Resource Using Incompatible Type

  CVE-2022-46706Aug 14, 2023Apple

  A type confusion issue was addressed with improved state handling. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to execute arbitrary code with kernel privileges.

• 9.8 Critical severity

  macOS: Use After Free

  CVE-2022-22630Jun 23, 2023AppleEPSS 1.39%

  A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.6, macOS Monterey 12.3, Security Update 2022-004 Catalina. A remote user may cause an unexpected app termination or arbitrary code execution

• 7.5 High severity

  macOS: Protection Mechanism Failure

  CVE-2022-32910Nov 1, 2022AppleEPSS 1.21%

  A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5, Security Update 2022-005 Catalina. An archive may be able to bypass Gatekeeper.

• 7.8 High severity

  macOS: Improper Privilege Management

  CVE-2022-32794Nov 1, 2022Apple

  A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to gain elevated privileges.

• 7.1 High severity

  macOS: Out-of-bounds Read

  CVE-2022-32853Sep 23, 2022Apple

  An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected terminat

• 7.1 High severity

  macOS: Out-of-bounds Read

  CVE-2022-32851Sep 23, 2022Apple

  An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected terminat

• 9.1 Critical severity

  macOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-32847Sep 23, 2022AppleEPSS 3.21%

  This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. A remote user may be able to cause unexpected system terminati

• 7.1 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32843Sep 23, 2022Apple

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted Postscript file may result in unexpected app termina

• 7.8 High severity

  macOS: Out-of-bounds Read

  CVE-2022-32842Sep 23, 2022Apple

  An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Monterey 12.5. An app may be able to gain elevated privileges.

• 7.1 High severity

  macOS: Out-of-bounds Read

  CVE-2022-32831Sep 23, 2022Apple

  An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or

• 7.8 High severity

  macOS: Improper Privilege Management

  CVE-2022-32826Sep 23, 2022Apple

  An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileg

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32820Sep 23, 2022Apple

  An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to execute arbi

• 7.8 High severity

  macOS: Improper Privilege Management

  CVE-2022-32819Sep 23, 2022Apple

  A logic issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileges.

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32815Sep 23, 2022Apple

  The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app with root privileges may be able to execute arb

• 7.1 High severity

  This issue was addressed with improved checks.

  CVE-2022-32797Sep 23, 2022AppleEPSS 1.06%

  This issue was addressed with improved checks. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of proces

• 7.5 High severity

  macOS: Uncontrolled Resource Consumption

  CVE-2022-32790Sep 23, 2022AppleEPSS 2.07%

  This issue was addressed with improved checks. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, macOS Big Sur 11.6.6, Security Update 2022-004 Catalina. A remote user may be able to cause a denial-of-service.

• 8.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32787Sep 23, 2022AppleEPSS 1.63%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. Processing maliciously crafted web

• 9.8 Critical severity

  macOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-32839Aug 24, 2022AppleEPSS 4.13%

  The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. A remote user may cause an unexpected app termination or

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32837Aug 24, 2022Apple

  This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to cause unexpected system termination or write kernel memory.

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32813Aug 24, 2022Apple

  The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. An app with root privileges may be able to execute arb

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32812Aug 24, 2022Apple

  The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Improper Locking

  CVE-2022-32811Aug 24, 2022Apple

  A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privileges.

• 8.8 High severity

  WebRTC Heap Buffer Overflow Exploited

  CVE-2022-2294Jul 28, 2022GoogleEPSS 70.8%

  Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

• 9.8 Critical severity

  Security Update - Catalina: Integer Overflow or Wraparound

  CVE-2022-26775May 26, 2022AppleEPSS 2.13%

  An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. An attacker may be able to cause unexpected application termination or arbitrary code execution.

• 7.8 High severity

  Security Update - Catalina: Out-of-bounds Read

  CVE-2022-26770May 26, 2022AppleEPSS 1.11%

  An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  Security Update - Catalina: Out-of-bounds Write

  CVE-2022-26769May 26, 2022AppleEPSS 1.08%

  A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  watchOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-26763May 26, 2022AppleEPSS 3.92%

  An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious application may be abl

• 7.8 High severity

  Security Update - Catalina: Out-of-bounds Write

  CVE-2022-26761May 26, 2022Apple

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  watchOS: Use After Free

  CVE-2022-26757May 26, 2022AppleEPSS 3.12%

  A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute a

• 7.8 High severity

  Security Update - Catalina: Out-of-bounds Write

  CVE-2022-26756May 26, 2022AppleEPSS 1.06%

  An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  Security Update - Catalina: Out-of-bounds Write

  CVE-2022-26751May 26, 2022AppleEPSS 1.84%

  A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a maliciously crafted

• 8.8 High severity

  Security Update - Catalina: Out-of-bounds Write

  CVE-2022-26748May 26, 2022AppleEPSS 1.54%

  An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing maliciously crafted web content may lead to arbitrary code execution.

• 7.8 High severity

  Security Update - Catalina: Improper Initialization

  CVE-2022-26722May 26, 2022Apple

  A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to gain root privileges.

• 7.8 High severity

  Security Update - Catalina: Improper Initialization

  CVE-2022-26721May 26, 2022Apple

  A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to gain root privileges.

• 7.8 High severity

  Security Update - Catalina: Out-of-bounds Write

  CVE-2022-26720May 26, 2022AppleEPSS 1.23%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  Security Update - Catalina: Out-of-bounds Write

  CVE-2022-26715May 26, 2022Apple

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An application may be able to gain elevated privileges.

• 7.8 High severity

  watchOS: Out-of-bounds Write

  CVE-2022-26714May 26, 2022AppleEPSS 1.21%

  A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute arbit

• 7.8 High severity

  macOS: Improper Link Resolution Before File Access

  CVE-2022-26704May 26, 2022AppleEPSS 1.04%

  A validation issue existed in the handling of symlinks and was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.4. An app may be able to gain elevated privileges.

• 7.1 High severity

  Security Update - Catalina: Out-of-bounds Read

  CVE-2022-26698May 26, 2022Apple

  An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpected applicati

• 7.1 High severity

  Security Update - Catalina: Out-of-bounds Read

  CVE-2022-26697May 26, 2022AppleEPSS 1.08%

  An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpected applicat