Vulnerabilities (CVE)

Filtered by vendor Apple Subscribe
Filtered by product Macos
Total 4832 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-54558 1 Apple 3 Ipados, Iphone Os, Macos 2025-03-27 N/A 2.8 LOW
A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to trick a user into granting access to photos from the user's photo library.
CVE-2023-42920 2 Apple, Claris 3 Macos, Claris Pro, Filemaker Pro 2025-03-26 N/A 7.8 HIGH
Claris International has fixed a dylib hijacking vulnerability in the FileMaker Pro.app and Claris Pro.app versions on macOS.
CVE-2024-27818 1 Apple 3 Ipados, Iphone Os, Macos 2025-03-26 N/A 7.8 HIGH
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An attacker may be able to cause unexpected app termination or arbitrary code execution.
CVE-2024-22273 2 Apple, Vmware 5 Macos, Cloud Foundation, Esxi and 2 more 2025-03-26 N/A 8.1 HIGH
The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or execute code on the hypervisor from a virtual machine in conjunction with other issues.
CVE-2023-42949 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2025-03-25 N/A 3.3 LOW
This issue was addressed with improved data protection. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17. An app may be able to access edited photos saved to a temporary directory.
CVE-2024-27805 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2025-03-25 N/A 5.5 MEDIUM
An issue was addressed with improved validation of environment variables. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to access sensitive user data.
CVE-2024-54564 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2025-03-25 N/A 6.5 MEDIUM
This issue was addressed through improved state management. This issue is fixed in visionOS 1.3, macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6. A file received from AirDrop may not have the quarantine flag applied.
CVE-2023-28207 1 Apple 1 Macos 2025-03-25 N/A 5.5 MEDIUM
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A plug-in may be able to inherit app permissions and access user data.
CVE-2024-54520 1 Apple 1 Macos 2025-03-24 N/A 5.5 MEDIUM
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2, macOS Ventura 13.7.2. An app may be able to overwrite arbitrary files.
CVE-2025-24185 1 Apple 1 Macos 2025-03-24 N/A 5.5 MEDIUM
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.3, macOS Ventura 13.7.3, macOS Sonoma 14.7.3. Parsing a maliciously crafted file may lead to an unexpected app termination.
CVE-2024-44199 1 Apple 1 Macos 2025-03-24 N/A 7.1 HIGH
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6. An app may be able to cause unexpected system termination or read kernel memory.
CVE-2024-44305 1 Apple 1 Macos 2025-03-24 N/A 7.8 HIGH
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.6. An app may be able to gain root privileges.
CVE-2022-48610 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2025-03-24 N/A 5.5 MEDIUM
This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2. An app may be able to access user-sensitive data.
CVE-2022-43454 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2025-03-24 N/A 7.8 HIGH
A double free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An app may be able to execute arbitrary code with kernel privileges.
CVE-2024-54559 1 Apple 1 Macos 2025-03-24 N/A 5.5 MEDIUM
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data.
CVE-2024-54525 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2025-03-24 N/A 8.8 HIGH
A logic issue was addressed with improved file handling. This issue is fixed in visionOS 2.2, watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2. Restoring a maliciously crafted backup file may lead to modification of protected system files.
CVE-2024-54565 1 Apple 1 Macos 2025-03-24 N/A 6.2 MEDIUM
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data.
CVE-2025-24099 1 Apple 1 Macos 2025-03-24 N/A 5.1 MEDIUM
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Ventura 13.7.3, macOS Sonoma 14.7.3. A local attacker may be able to elevate their privileges.
CVE-2024-44179 1 Apple 3 Ipados, Iphone Os, Macos 2025-03-24 N/A 2.4 LOW
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a device may be able to read contact numbers from the lock screen.
CVE-2024-54539 1 Apple 1 Macos 2025-03-24 N/A 5.5 MEDIUM
This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2, macOS Ventura 13.7.2. An app may be able to capture keyboard events from the lock screen.