Known vulnerabilities in macOS - page 42

Vendor: Apple Inc.
Software: macOS
Software CPE: cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Total vulnerabilities: 3367
Public exploits: 126
Known exploited (KEV): 83
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting macOS macOS is affected by 3367 known vulnerabilities: 39 critical, 535 high, 533 medium, 2260 low Critical High Medium Low

Vulnerabilities (3367)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118693 - Out-of-bounds read
CVE-2025-43374
CWE-125 Medium
No
No
15.5 24F74, 13.7.3 22H417, 14.7.3 23H417 24.11.2025 SB2025051256
SB2025012805
SB2025051303
and 5 more
#VU118692 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-31248
CWE-22 Low
No
No
15.5 24F74, 13.7.3 22H417, 14.7.3 23H417 24.11.2025 SB2025051256
SB2025012805
SB2025012804
#VU111710 - Security Features
CVE-2025-30466
CWE-254 Medium
No
No
15.4 24E248 21.06.2025 SB20250402143
SB2025040109
SB2025040103
and 1 more
#VU105548 - Out-of-bounds write
CVE-2025-24201
CWE-787 Critical
Available
Exploited
15.3.2 24D81 11.03.2025 SB2025031182
SB2025031183
SB2025031185
and 41 more
#VU103395 - Improper Access Control
CVE-2025-24093
CWE-284 Low
No
No
14.7.3 23H417, 13.7.3 22H417, 15.4 24E248 28.01.2025 SB2025012804
SB2025012805
SB2025040103
#VU103385 - Memory corruption
CVE-2025-24153
CWE-119 Low
No
No
15.3 24D60 28.01.2025 SB2025012802
#VU103384 - Memory corruption
CVE-2025-24152
CWE-119 Low
No
No
15.3 24D60 28.01.2025 SB2025012802
#VU103383 - Memory corruption
CVE-2025-24151
CWE-119 Low
No
No
15.3 24D60, 13.7.3 22H417, 14.7.3 23H417 28.01.2025 SB2025012802
SB2025012804
SB2025012805
#VU103382 - Out-of-bounds read
CVE-2025-24139
CWE-125 Medium
No
No
15.3 24D60, 13.7.3 22H417, 13.7.5 22H527, 14.7.3 23H417 28.01.2025 SB2025012802
SB2025012804
SB2025012805
and 1 more
#VU103381 - Improper Access Control
CVE-2025-24108
CWE-284 Low
No
No
15.3 24D60 28.01.2025 SB2025012802
#VU103380 - UNIX Symbolic Link (Symlink) Following
CVE-2025-24103
CWE-61 Low
No
No
15.3 24D60, 13.7.3 22H417, 14.7.3 23H417 28.01.2025 SB2025012802
SB2025012804
SB2025012805
#VU103379 - Information Exposure Through Log Files
CVE-2025-24146
CWE-532 Low
No
No
15.3 24D60, 13.7.3 22H417, 14.7.3 23H417 28.01.2025 SB2025012802
SB2025012804
SB2025012805
#VU103378 - Improper Access Control
CVE-2025-24130
CWE-284 Low
No
No
15.3 24D60, 13.7.3 22H417, 14.7.3 23H417 28.01.2025 SB2025012802
SB2025012804
SB2025012805
#VU103377 - State Issues
CVE-2025-24096
CWE-371 Low
No
No
15.3 24D60 28.01.2025 SB2025012802
#VU103376 - Exposure of sensitive information to an unauthorized actor
CVE-2025-24101
CWE-200 Low
No
No
15.3 24D60 28.01.2025 SB2025012802
#VU103375 - UNIX Symbolic Link (Symlink) Following
CVE-2025-24136
CWE-61 Low
No
No
15.3 24D60, 13.7.3 22H417, 14.7.3 23H417 28.01.2025 SB2025012802
SB2025012804
SB2025012805
#VU103356 - Out-of-bounds read
CVE-2025-24149
CWE-125 Low
No
No
13.7.3 22H417, 14.7.3 23H417, 15.3 24D60 27.01.2025 SB2025012784
SB2025012785
SB2025012801
and 5 more
#VU103351 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-24128
CWE-451 Medium
No
No
15.3 24D60 27.01.2025 SB2025012783
SB2025012784
SB2025012802
#VU103350 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-24113
CWE-451 Medium
No
No
15.3 24D60, 15.4 24E248 27.01.2025 SB2025012783
SB2025012784
SB2025012802
and 7 more
#VU103349 - Exposure of sensitive information to an unauthorized actor
CVE-2025-24169
CWE-200 Low
No
No
15.3 24D60 27.01.2025 SB2025012783
SB2025012802


Showing elements 821 - 840 out of 3367