Known vulnerabilities in macOS - page 26

Vendor: Apple Inc.
Software: macOS
Software CPE: cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Total vulnerabilities: 3367
Public exploits: 126
Known exploited (KEV): 83
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting macOS macOS is affected by 3367 known vulnerabilities: 39 critical, 535 high, 533 medium, 2260 low Critical High Medium Low

Vulnerabilities (3367)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118077 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-43288
CWE-59 Low
No
No
26.0 25A354, 15.7 24G222 04.11.2025 SB20250916387
SB2025091683
#VU118076 - Improper Access Control
CVE-2025-43345
CWE-284 Low
No
No
26.0 25A354, 14.8 23J21, 15.7 24G222 04.11.2025 SB20250916387
SB2025091764
SB2025091765
and 5 more
#VU118052 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-43364
CWE-362 Low
No
No
26.1 25B78, 14.8 23J21, 15.7 24G222 04.11.2025 SB2025110422
SB20250916107
SB2025091683
#VU115366 - Exposure of sensitive information to an unauthorized actor
CVE-2025-43367
CWE-200 Low
No
No
14.8 23J21, 26.0 25A354 16.09.2025 SB20250916107
SB20250916387
#VU115364 - Improper Access Control
CVE-2025-43231
CWE-284 Low
No
No
14.8 23J21 16.09.2025 SB20250916107
#VU115337 - Heap-based Buffer Overflow
CVE-2025-43353
CWE-122 High
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
#VU115335 - State Issues
CVE-2025-43359
CWE-371 Medium
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
and 5 more
#VU115274 - Information Exposure Through Log Files
CVE-2025-43301
CWE-532 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
#VU115273 - Memory corruption
CVE-2025-43355
CWE-119 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
and 5 more
#VU115271 - Improper input validation
CVE-2025-43315
CWE-20 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
#VU115270 - Improper input validation
CVE-2025-43319
CWE-20 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
#VU115269 - Improper input validation
CVE-2025-43295
CWE-20 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
and 1 more
#VU115268 - Improper input validation
CVE-2025-43299
CWE-20 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
and 1 more
#VU115267 - State Issues
CVE-2025-31255
CWE-371 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
and 3 more
#VU115264 - Memory corruption
CVE-2025-43326
CWE-119 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
#VU115263 - Improper Access Control
CVE-2025-43305
CWE-284 Low
No
No
15.7 24G222, 14.8 23J21, 26.0 25A354 16.09.2025 SB2025091683
SB20250916107
SB20250916387
#VU115262 - State Issues
CVE-2025-43292
CWE-371 Low
No
No
15.7 24G222, 15.7.2 24G325, 26.0 25A354 16.09.2025 SB2025091683
SB20250916387
SB2025110423
#VU115259 - Improper input validation
CVE-2025-43330
CWE-20 Low
No
No
15.7 24G222, 26.0 25A354 16.09.2025 SB2025091683
SB20250916387
#VU114314 - Out-of-bounds write
CVE-2025-43300
CWE-787 Critical
Available
Exploited
13.7.8 22H730, 14.7.8 23H730, 15.6.1 24G90 20.08.2025 SB20250820136
SB20250820137
SB20250820138
and 4 more
#VU113519 - Permissions, Privileges, and Access Controls
CVE-2025-43273
CWE-264 Low
No
No
15.6 24G84, 14.8 23J21 30.07.2025 SB2025073053
SB20250916107


Showing elements 501 - 520 out of 3367