macOS vulnerabilities

1,185 known vulnerabilities in macOS from Apple. 1,173 are rated high or critical, and 78 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  macOS: Out-of-bounds Write

  CVE-2022-26772May 26, 2022Apple

  A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  Security Update - Catalina: Out-of-bounds Read

  CVE-2022-26770May 26, 2022AppleEPSS 1.11%

  An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  Security Update - Catalina: Out-of-bounds Write

  CVE-2022-26769May 26, 2022AppleEPSS 1.08%

  A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  watchOS: Out-of-bounds Write

  CVE-2022-26768May 26, 2022AppleEPSS 1.39%

  A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, watchOS 8.6, tvOS 15.5, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  watchOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-26763May 26, 2022AppleEPSS 3.92%

  An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious application may be abl

• 7.8 High severity

  Security Update - Catalina: Out-of-bounds Write

  CVE-2022-26761May 26, 2022Apple

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  watchOS: Use After Free

  CVE-2022-26757May 26, 2022AppleEPSS 3.12%

  A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute a

• 7.8 High severity

  Security Update - Catalina: Out-of-bounds Write

  CVE-2022-26756May 26, 2022AppleEPSS 1.06%

  An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Buffer Copy without Checking Size of Input

  CVE-2022-26754May 26, 2022Apple

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Buffer Copy without Checking Size of Input

  CVE-2022-26753May 26, 2022Apple

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Buffer Copy without Checking Size of Input

  CVE-2022-26752May 26, 2022Apple

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  Security Update - Catalina: Out-of-bounds Write

  CVE-2022-26751May 26, 2022AppleEPSS 1.84%

  A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a maliciously crafted

• 7.8 High severity

  macOS: Buffer Copy without Checking Size of Input

  CVE-2022-26750May 26, 2022Apple

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Buffer Copy without Checking Size of Input

  CVE-2022-26749May 26, 2022Apple

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

• 8.8 High severity

  Security Update - Catalina: Out-of-bounds Write

  CVE-2022-26748May 26, 2022AppleEPSS 1.54%

  An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing maliciously crafted web content may lead to arbitrary code execution.

• 7.0 High severity

  macOS: Out-of-bounds Write

  CVE-2022-26743May 26, 2022Apple

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.4. An attacker that has already achieved code execution in macOS Recovery may be able to escalate to kernel privileges.

• 7.8 High severity

  macOS: Buffer Copy without Checking Size of Input

  CVE-2022-26742May 26, 2022Apple

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Buffer Copy without Checking Size of Input

  CVE-2022-26741May 26, 2022Apple

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  tvOS: Out-of-bounds Write

  CVE-2022-26740May 26, 2022AppleEPSS 1.06%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  tvOS: Out-of-bounds Write

  CVE-2022-26739May 26, 2022AppleEPSS 1.06%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  tvOS: Out-of-bounds Write

  CVE-2022-26738May 26, 2022AppleEPSS 1.06%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  tvOS: Out-of-bounds Write

  CVE-2022-26737May 26, 2022AppleEPSS 1.06%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  tvOS: Out-of-bounds Write

  CVE-2022-26736May 26, 2022AppleEPSS 1.24%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

• 9.8 Critical severity

  macOS: Out-of-bounds Write

  CVE-2022-26723May 26, 2022AppleEPSS 1.5%

  A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution.

• 7.8 High severity

  Security Update - Catalina: Improper Initialization

  CVE-2022-26722May 26, 2022Apple

  A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to gain root privileges.

• 7.8 High severity

  Security Update - Catalina: Improper Initialization

  CVE-2022-26721May 26, 2022Apple

  A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to gain root privileges.

• 7.8 High severity

  Security Update - Catalina: Out-of-bounds Write

  CVE-2022-26720May 26, 2022AppleEPSS 1.23%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  macOS: Out-of-bounds Read

  CVE-2022-26718May 26, 2022Apple

  An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An application may be able to gain elevated privileges.

• 7.8 High severity

  Security Update - Catalina: Out-of-bounds Write

  CVE-2022-26715May 26, 2022Apple

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An application may be able to gain elevated privileges.

• 7.8 High severity

  watchOS: Out-of-bounds Write

  CVE-2022-26714May 26, 2022AppleEPSS 1.21%

  A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute arbit

• 9.8 Critical severity

  watchOS: Integer Overflow or Wraparound

  CVE-2022-26711May 26, 2022AppleEPSS 4.04%

  An integer overflow issue was addressed with improved input validation. This issue is fixed in tvOS 15.5, iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4. A remote attacker may be able to cause unexpected application term

• 7.8 High severity

  macOS: Improper Link Resolution Before File Access

  CVE-2022-26704May 26, 2022AppleEPSS 1.04%

  A validation issue existed in the handling of symlinks and was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.4. An app may be able to gain elevated privileges.

• 7.5 High severity

  tvOS: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2022-26701May 26, 2022AppleEPSS 1.32%

  A race condition was addressed with improved locking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

• 7.1 High severity

  Security Update - Catalina: Out-of-bounds Read

  CVE-2022-26698May 26, 2022Apple

  An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpected applicati

• 7.1 High severity

  Security Update - Catalina: Out-of-bounds Read

  CVE-2022-26697May 26, 2022AppleEPSS 1.08%

  An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpected applicat

• 7.8 High severity

  Apple macOS Out-of-Bounds Write Exploited

  CVE-2022-22675May 26, 2022AppleEPSS 12.5%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel

• 5.5 Medium severity

  Apple macOS Out-of-Bounds Read Exploited

  CVE-2022-22674May 26, 2022AppleEPSS 1.09%

  An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2022-22672May 26, 2022AppleEPSS 1.07%

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious application may be able to execute arbitrary code

• 8.2 High severity

  nokogiri: Access of Resource Using Incompatible Type

  CVE-2022-29181May 20, 2022SparklemotionEPSS 3.23%

  Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors (segfault) or reads

• 7.8 High severity

  vim/vim: Out-of-bounds Read

  CVE-2022-1629May 10, 2022VimEPSS 1.91%

  Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution