macOS vulnerabilities

1,185 known vulnerabilities in macOS from Apple. 1,173 are rated high or critical, and 78 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Apple Multiple Products WebKit Memory Corruption Exploited

  CVE-2021-30665Sep 8, 2021AppleEPSS 3.71%

  A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execu

• 8.8 High severity

  Apple Multiple Products WebKit Integer Overflow Exploited

  CVE-2021-30663Sep 8, 2021AppleEPSS 3.52%

  An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution.

• 8.8 High severity

  Apple Multiple Products WebKit Storage Use-After-Free Exploited

  CVE-2021-30661Sep 8, 2021AppleEPSS 4.49%

  A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code ex

• 5.5 Medium severity

  Apple macOS Unspecified Exploited

  CVE-2021-30657Sep 8, 2021AppleEPSS 68.5%

  A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively ex

• 7.5 High severity

  Apple iOS, macOS, watchOS Sandbox Bypass Exploited

  CVE-2021-31010Aug 24, 2021AppleEPSS 3.37%

  A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrict

• 7.8 High severity

  Apple Multiple Products Integer Overflow or Wraparound Exploited

  CVE-2021-30952Aug 24, 2021AppleEPSS 6.96%

  An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

• 7.8 High severity

  Apple iOS, iPadOS, and macOS Out-of-Bounds Write Exploited

  CVE-2021-30900Aug 24, 2021AppleEPSS 5.2%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A malicious application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  Apple Multiple Products Memory Corruption Exploited

  CVE-2021-30883Aug 24, 2021AppleEPSS 14.7%

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. An application may be able to execute

• 7.8 High severity

  Apple iOS, iPadOS, and macOS Type Confusion Exploited

  CVE-2021-30869Aug 24, 2021AppleEPSS 4.17%

  A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malicio

• 7.8 High severity

  Apple Multiple Products Integer Overflow Exploited

  CVE-2021-30860Aug 24, 2021AppleEPSS 76%

  An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution.

• 8.8 High severity

  Apple iOS, iPadOS, macOS Use-After-Free Exploited

  CVE-2021-30858Aug 24, 2021AppleEPSS 13.4%

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this iss

• 9.8 Critical severity

  Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Exploited

  CVE-2021-1871Apr 2, 2021AppleEPSS 7%

  A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Ap

• 9.8 Critical severity

  Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Exploited

  CVE-2021-1870Apr 2, 2021AppleEPSS 7.71%

  A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Ap

• 8.8 High severity

  Apple Multiple Products Type Confusion Exploited

  CVE-2021-1789Apr 2, 2021AppleEPSS 14%

  A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing malici

• 7.0 High severity

  Apple Multiple Products Race Condition Exploited

  CVE-2021-1782Apr 2, 2021AppleEPSS 2.2%

  A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevat

• 5.5 Medium severity

  Apple Multiple Products Memory Initialization Exploited

  CVE-2020-27950Dec 8, 2020AppleEPSS 16.5%

  A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.

• 7.8 High severity

  Apple Multiple Products Type Confusion Exploited

  CVE-2020-27932Dec 8, 2020AppleEPSS 10.3%

  A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3

• 7.8 High severity

  Apple Multiple Products Memory Corruption Exploited

  CVE-2020-27930Dec 8, 2020AppleEPSS 22%

  A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchO

• 5.5 Medium severity

  Apple iOS, iPadOS, and macOS Input Validation Exploited

  CVE-2020-9934Oct 16, 2020AppleEPSS 3.21%

  An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A local user may be able to view sensitive user information.

• 7.8 High severity

  Apple Multiple Products Code Execution Exploited

  CVE-2020-9859Jun 5, 2020Apple

  A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kerne

• 7.8 High severity

  Apple Multiple Products Memory Corruption Exploited

  CVE-2020-3837Feb 27, 2020AppleEPSS 14.8%

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  Apple Multiple Products Use-After-Free Exploited

  CVE-2019-8605Dec 18, 2019AppleEPSS 17.6%

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

• 7.8 High severity

  Apple macOS Use-After-Free Exploited

  CVE-2019-8526Dec 18, 2019Apple

  A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.

• 7.8 High severity

  Apple Multiple Products Memory Corruption Exploited

  CVE-2019-7286Dec 18, 2019AppleEPSS 15.9%

  A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.

• 7.5 High severity

  Apple iOS and macOS Group Facetime Exploited

  CVE-2019-6223Mar 5, 2019AppleEPSS 2.63%

  A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the