macOS vulnerabilities

1,185 known vulnerabilities in macOS from Apple. 1,173 are rated high or critical, and 78 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  macOS: Improper Privilege Management

  CVE-2022-32829Sep 23, 2022Apple

  This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Improper Privilege Management

  CVE-2022-32826Sep 23, 2022Apple

  An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileg

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32821Sep 23, 2022Apple

  A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32820Sep 23, 2022Apple

  An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to execute arbi

• 7.8 High severity

  macOS: Improper Privilege Management

  CVE-2022-32819Sep 23, 2022Apple

  A logic issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileges.

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32815Sep 23, 2022Apple

  The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app with root privileges may be able to execute arb

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32798Sep 23, 2022AppleEPSS 1.65%

  An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.5. An app may be able to gain elevated privileges.

• 7.1 High severity

  This issue was addressed with improved checks.

  CVE-2022-32797Sep 23, 2022AppleEPSS 1.06%

  This issue was addressed with improved checks. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of proces

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32796Sep 23, 2022AppleEPSS 1.11%

  A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.

• 8.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32792Sep 23, 2022AppleEPSS 2.3%

  An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code executio

• 7.5 High severity

  macOS: Uncontrolled Resource Consumption

  CVE-2022-32790Sep 23, 2022AppleEPSS 2.07%

  This issue was addressed with improved checks. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, macOS Big Sur 11.6.6, Security Update 2022-004 Catalina. A remote user may be able to cause a denial-of-service.

• 8.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32787Sep 23, 2022AppleEPSS 1.63%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. Processing maliciously crafted web

• 8.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-26700Sep 23, 2022AppleEPSS 1.47%

  A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to code execution.

• 8.8 High severity

  Safari: Origin Validation Error

  CVE-2022-22637Sep 23, 2022Apple

  A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior.

• 8.8 High severity

  Safari: Use After Free

  CVE-2022-22628Sep 23, 2022AppleEPSS 1.37%

  A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

• 8.8 High severity

  Safari: Use After Free

  CVE-2022-22624Sep 23, 2022AppleEPSS 1.37%

  A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

• 8.8 High severity

  Safari: Out-of-bounds Write

  CVE-2022-22610Sep 23, 2022AppleEPSS 1.28%

  A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to code execution.

• 7.8 High severity

  Apple iOS, iPadOS, and macOS Remote Code Execution Exploited

  CVE-2022-32917Sep 20, 2022AppleEPSS 5.56%

  The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that

• 7.8 High severity

  iOS: Out-of-bounds Write

  CVE-2022-32911Sep 20, 2022Apple

  The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  iOS: Out-of-bounds Write

  CVE-2022-32908Sep 20, 2022Apple

  A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. A user may be able to elevate privileges.

• 9.8 Critical severity

  macOS: Out-of-bounds Write

  CVE-2022-32863Sep 20, 2022AppleEPSS 1.16%

  A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 15.6, macOS Monterey 12.5. Processing maliciously crafted web content may lead to arbitrary code execution.

• 7.8 High severity

  macOS: Protection Mechanism Failure

  CVE-2022-32802Sep 20, 2022Apple

  A logic issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, tvOS 15.6, macOS Monterey 12.5. Processing a maliciously crafted file may lead to arbitrary code execution.

• 9.8 Critical severity

  macOS: Buffer Copy without Checking Size of Input

  CVE-2022-32788Sep 20, 2022AppleEPSS 2.83%

  A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. A remote user may be able to cause kernel code execution.

• 8.8 High severity

  macOS: Protection Mechanism Failure

  CVE-2022-26696Sep 20, 2022Apple

  This issue was addressed with improved environment sanitization. This issue is fixed in macOS Monterey 12.4. A sandboxed process may be able to circumvent sandbox restrictions.

• 7.8 High severity

  Apple iOS and macOS Out-of-Bounds Write Exploited

  CVE-2022-32894Aug 24, 2022AppleEPSS 3.29%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that t

• 8.8 High severity

  Apple iOS and macOS Out-of-Bounds Write Exploited

  CVE-2022-32893Aug 24, 2022AppleEPSS 10.5%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware

• 7.8 High severity

  macOS: Improper Privilege Management

  CVE-2022-32840Aug 24, 2022Apple

  This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app may be able to execute arbitrary code with kernel privileges.

• 9.8 Critical severity

  macOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-32839Aug 24, 2022AppleEPSS 4.13%

  The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. A remote user may cause an unexpected app termination or

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32837Aug 24, 2022Apple

  This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to cause unexpected system termination or write kernel memory.

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32813Aug 24, 2022Apple

  The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. An app with root privileges may be able to execute arb

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32812Aug 24, 2022Apple

  The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Improper Locking

  CVE-2022-32811Aug 24, 2022Apple

  A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32810Aug 24, 2022Apple

  The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app may be able to execute arbitrary code with kernel privileges.

• 7.5 High severity

  macOS: Out-of-bounds Write

  CVE-2022-32793Aug 24, 2022AppleEPSS 1.11%

  Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to disclose kernel memory.

• 9.8 Critical severity

  SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Out-of-bounds Write

  CVE-2022-37434Aug 5, 2022SiemensEPSS 19.2%

  zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code

• 8.8 High severity

  WebRTC Heap Buffer Overflow Exploited

  CVE-2022-2294Jul 28, 2022GoogleEPSS 70.8%

  Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

• 9.8 Critical severity

  https://github.com/curl/curl: Incorrect Default Permissions

  CVE-2022-32207Jul 7, 2022Https://github.com/curl/curlEPSS 12.3%

  When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the perm

• 7.8 High severity

  vim/vim: Out-of-bounds Read

  CVE-2022-1720Jun 20, 2022VimEPSS 2.18%

  Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

• 9.8 Critical severity

  macOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-26776May 26, 2022AppleEPSS 2.21%

  This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An attacker may be able to cause unexpected application termination or arbitrary code execution.

• 9.8 Critical severity

  Security Update - Catalina: Integer Overflow or Wraparound

  CVE-2022-26775May 26, 2022AppleEPSS 2.13%

  An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. An attacker may be able to cause unexpected application termination or arbitrary code execution.