Known vulnerabilities in macOS 15.1.1 24B2091 - page 13

Vendor: Apple Inc.
Software: macOS
Version: 15.1.1 24B2091
Software CPE: cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Total vulnerabilities: 721
Public exploits: 17
Known exploited (KEV): 10
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting macOS version 15.1.1 24B2091 macOS 15.1.1 24B2091 is affected by 721 vulnerabilities: 6 critical, 50 high, 94 medium, 571 low Critical High Medium Low

Vulnerabilities (721)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118077 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-43288
CWE-59 Low
No
No
26.0 25A354, 15.7 24G222 04.11.2025 SB20250916387
SB2025091683
#VU115337 - Heap-based Buffer Overflow
CVE-2025-43353
CWE-122 High
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
#VU115335 - State Issues
CVE-2025-43359
CWE-371 Medium
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
and 5 more
#VU115331 - Protection Mechanism Failure
CVE-2025-43321
CWE-693 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
#VU115274 - Information Exposure Through Log Files
CVE-2025-43301
CWE-532 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
#VU115273 - Memory corruption
CVE-2025-43355
CWE-119 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
and 5 more
#VU115271 - Improper input validation
CVE-2025-43315
CWE-20 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
#VU115270 - Improper input validation
CVE-2025-43319
CWE-20 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
#VU115269 - Improper input validation
CVE-2025-43295
CWE-20 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
and 1 more
#VU115268 - Improper input validation
CVE-2025-43299
CWE-20 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
and 1 more
#VU115267 - State Issues
CVE-2025-31255
CWE-371 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
and 3 more
#VU115265 - Out-of-bounds write
CVE-2025-43302
CWE-787 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
and 5 more
#VU115264 - Memory corruption
CVE-2025-43326
CWE-119 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
#VU115263 - Improper Access Control
CVE-2025-43305
CWE-284 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
#VU115262 - State Issues
CVE-2025-43292
CWE-371 Low
No
No
15.7 24G222, 15.7.2 24G325, 26.0 25A354 16.09.2025 SB2025091683
SB20250916387
SB2025110423
#VU115260 - Out-of-bounds write
CVE-2025-43349
CWE-787 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
and 5 more
#VU115259 - Improper input validation
CVE-2025-43330
CWE-20 Low
No
No
15.7 24G222, 26.0 25A354 16.09.2025 SB2025091683
SB20250916387
#VU115258 - Permissions, Privileges, and Access Controls
CVE-2025-43285
CWE-264 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
#VU115254 - Permissions, Privileges, and Access Controls
CVE-2025-31268
CWE-264 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
#VU115253 - Memory corruption
CVE-2025-43312
CWE-119 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387


Showing elements 241 - 260 out of 721