macOS vulnerabilities

1,185 known vulnerabilities in macOS from Apple. 1,173 are rated high or critical, and 78 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  macOS: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2022-42803Nov 1, 2022Apple

  A race condition was addressed with improved locking. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privile

• 7.8 High severity

  macOS: Protection Mechanism Failure

  CVE-2022-42801Nov 1, 2022Apple

  A logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  This issue was addressed with improved checks.

  CVE-2022-42800Nov 1, 2022Apple

  This issue was addressed with improved checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A user may be able to cause unexpected app termination or ar

• 7.8 High severity

  macOS: Improper Privilege Management

  CVE-2022-42796Nov 1, 2022Apple

  This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.7 and iPadOS 15.7, macOS Ventura 13. An app may be able to gain elevated privileges.

• 8.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-42795Nov 1, 2022AppleEPSS 1.64%

  A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS Ventura 13, watchOS 9. Processing a maliciously crafted image may lead to arbitrary code execution.

• 7.0 High severity

  macOS: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2022-42791Nov 1, 2022Apple

  A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32947Nov 1, 2022Apple

  The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32944Nov 1, 2022Apple

  A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to ex

• 9.8 Critical severity

  macOS: Buffer Copy without Checking Size of Input

  CVE-2022-32941Nov 1, 2022AppleEPSS 1.88%

  The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A buffer overflow may result in arbitrary code execution.

• 7.8 High severity

  macOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-32940Nov 1, 2022Apple

  The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges.

• 8.8 High severity

  macOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-32934Nov 1, 2022AppleEPSS 2.14%

  The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. A remote user may be able to cause kernel code execution.

• 7.8 High severity

  macOS: Improper Control of Generation of Code

  CVE-2022-32924Nov 1, 2022Apple

  The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Big Sur 11.7, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6. An app may be able to execute arbitrary code with kernel privileges.

• 8.8 High severity

  macOS: Use After Free

  CVE-2022-32922Nov 1, 2022Apple

  A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13. Processing maliciously crafted web content may lead to arbitrary code execution.

• 7.8 High severity

  macOS: Access of Resource Using Incompatible Type

  CVE-2022-32915Nov 1, 2022Apple

  A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Use After Free

  CVE-2022-32914Nov 1, 2022Apple

  A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6, tvOS 16. An app may be able to execute arbitrary code with kernel privileges.

• 7.5 High severity

  macOS: Protection Mechanism Failure

  CVE-2022-32910Nov 1, 2022AppleEPSS 1.21%

  A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5, Security Update 2022-005 Catalina. An archive may be able to bypass Gatekeeper.

• 7.8 High severity

  macOS: Improper Link Resolution Before File Access

  CVE-2022-32905Nov 1, 2022Apple

  This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted DMG file may lead to arbitrary code execution with system privileges.

• 8.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32888Nov 1, 2022AppleEPSS 1.54%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, watchOS 9, macOS Monterey 12.6, tvOS 16. Processing maliciously crafted web content may lea

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32866Nov 1, 2022Apple

  The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, watchOS 9, macOS Monterey 12.6, tvOS 16. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32865Nov 1, 2022Apple

  The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Improper Privilege Management

  CVE-2022-32794Nov 1, 2022Apple

  A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to gain elevated privileges.

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-26762Nov 1, 2022Apple

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious application may be able to execute arbitrary code with system privileges.

• 8.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-26730Nov 1, 2022AppleEPSS 1.32%

  A memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted image may lead to arbitrary code execution.

• 8.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-26719Nov 1, 2022AppleEPSS 1.24%

  A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution.

• 8.8 High severity

  macOS: Use After Free

  CVE-2022-26717Nov 1, 2022AppleEPSS 2.04%

  A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTunes 12.12.4 for Windows. Processing maliciously crafted web content may lead to

• 8.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-26716Nov 1, 2022AppleEPSS 1.14%

  A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution.

• 8.8 High severity

  macOS: Use After Free

  CVE-2022-26710Nov 1, 2022AppleEPSS 1.11%

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing maliciously crafted web content may lead to arbitrary code execution.

• 8.8 High severity

  macOS: Use After Free

  CVE-2022-26709Nov 1, 2022AppleEPSS 1.11%

  A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution.

• 8.1 High severity

  SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Double Free

  CVE-2022-42915Oct 29, 2022SiemensEPSS 3.65%

  curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection to the remote server by issuing a CONNECT request to the proxy, and then tunnels the rest of the protocol through. An HT

• 7.5 High severity

  SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Cleartext Transmission of Sensitive Information

  CVE-2022-42916Oct 29, 2022SiemensEPSS 2.51%

  In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext HTTP step) even when HTTP is provided in the URL. This mech

• 7.8 High severity

  macOS: Access of Resource Using Incompatible Type

  CVE-2022-32814Sep 23, 2022Apple

  A type confusion issue was addressed with improved state handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.

• 8.8 High severity

  Safari: Out-of-bounds Write

  CVE-2022-22629Sep 23, 2022AppleEPSS 5.09%

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to a

• 7.1 High severity

  macOS: Out-of-bounds Read

  CVE-2022-32853Sep 23, 2022Apple

  An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected terminat

• 7.1 High severity

  macOS: Out-of-bounds Read

  CVE-2022-32852Sep 23, 2022Apple

  An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory.

• 7.1 High severity

  macOS: Out-of-bounds Read

  CVE-2022-32851Sep 23, 2022Apple

  An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected terminat

• 9.1 Critical severity

  macOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-32847Sep 23, 2022AppleEPSS 3.21%

  This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. A remote user may be able to cause unexpected system terminati

• 10.0 Critical severity

  macOS: Protection Mechanism Failure

  CVE-2022-32845Sep 23, 2022AppleEPSS 5.41%

  This issue was addressed with improved checks. This issue is fixed in watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to break out of its sandbox.

• 7.1 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32843Sep 23, 2022Apple

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted Postscript file may result in unexpected app termina

• 7.8 High severity

  macOS: Out-of-bounds Read

  CVE-2022-32842Sep 23, 2022Apple

  An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Monterey 12.5. An app may be able to gain elevated privileges.

• 7.1 High severity

  macOS: Out-of-bounds Read

  CVE-2022-32831Sep 23, 2022Apple

  An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or