MA
Operating System
macOS
On CISA KEVExploited in the wildRansomware-linked
3,600
CVEs
79
On KEV
10.0
Max CVSS
336
New 30D
Severity mix
Critical 235High 254Medium 11Low 0
Watch
Add macOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-43347 | 9.8 | Sep 15 | This issue was addressed by removing the vulnerable code Affected: before 26 |
| CVE-2025-43237 | 9.8 | Jul 29 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 15.6 |
| CVE-2025-43233 | 9.8 | Jul 29 | This issue was addressed with improved access restrictions Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43186 | 9.8 | Jul 29 | The issue was addressed with improved memory handling Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43245 | 9.8 | Jul 29 | A downgrade issue was addressed with additional code-signing restrictions Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43253 | 9.8 | Jul 29 | This issue was addressed with improved input validation Affected: before 14.7.7; before 15.6 |
| CVE-2025-43199 | 9.8 | Jul 29 | A permissions issue was addressed by removing the vulnerable code Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43232 | 9.8 | Jul 29 | A permissions issue was addressed with additional restrictions Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43198 | 9.8 | Jul 29 | This issue was addressed by removing the vulnerable code Affected: before 14.7.7; before 15.6 |
| CVE-2025-43209 | 9.8 | Jul 29 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43194 | 9.8 | Jul 29 | The issue was addressed with improved checks Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43244 | 9.8 | Jul 29 | A race condition was addressed with improved state handling Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43275 | 9.8 | Jul 29 | A race condition was addressed with additional validation Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43234 | 9.8 | Jul 29 | Multiple memory corruption issues were addressed with improved input validation Affected: before 15.6 |
| CVE-2025-43261 | 9.8 | Jul 29 | A logic issue was addressed with improved checks Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43220 | 9.8 | Jul 29 | This issue was addressed with improved validation of symlinks Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43189 | 9.8 | Jul 29 | This issue was addressed with improved memory handling Affected: before 14.7.7; before 15.6 |
| CVE-2025-43222 | 9.8 | Jul 29 | A use-after-free issue was addressed by removing the vulnerable code Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43243 | 9.8 | Jul 29 | A permissions issue was addressed with additional restrictions Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43193 | 9.8 | Jul 29 | The issue was addressed with improved memory handling Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-31279 | 9.8 | Jul 29 | A permissions issue was addressed with additional restrictions Affected: before 13.7.7; before 14.7.7; before 15.6 |
| CVE-2025-43192 | 9.8 | Jul 29 | A configuration issue was addressed with additional restrictions Affected: before 14.7.7; before 15.6 |
| CVE-2025-43184 | 9.8 | Jul 29 | This issue was addressed by adding an additional prompt for user consent Affected: before 13.7.7; before 14.7.7; before 15.4 |
| CVE-2025-30466 | 9.8 | May 29 | This issue was addressed through improved state management Affected: before 15.4 |
| CVE-2025-24167 | 9.8 | Mar 31 | This issue was addressed through improved state management Affected: before 15.4 |
| CVE-2025-24238 | 9.8 | Mar 31 | A logic issue was addressed with improved checks Affected: before 13.7.5; before 14.7.5; before 15.4 |
| CVE-2025-24263 | 9.8 | Mar 31 | A privacy issue was addressed by moving sensitive data to a protected location Affected: before 15.4 |
| CVE-2025-30426 | 9.8 | Mar 31 | This issue was addressed with additional entitlement checks Affected: before 15.4 |
| CVE-2025-24259 | 9.8 | Mar 31 | This issue was addressed with additional entitlement checks Affected: before 13.7.5; before 14.7.5; before 15.4 |
| CVE-2025-30430 | 9.8 | Mar 31 | This issue was addressed through improved state management Affected: before 15.4 |
| CVE-2025-24264 | 9.8 | Mar 31 | The issue was addressed with improved memory handling Affected: before 15.4 |
| CVE-2025-24233 | 9.8 | Mar 31 | A permissions issue was addressed with additional restrictions Affected: before 13.7.5; before 14.7.5; before 15.4 |
| CVE-2025-24232 | 9.8 | Mar 31 | This issue was addressed through improved state management Affected: before 13.7.5; before 14.7.5; before 15.4 |
| CVE-2025-24265 | 9.8 | Mar 31 | An out-of-bounds read was addressed with improved bounds checking Affected: before 13.7.5; before 14.7.5; before 15.4 |
| CVE-2025-24273 | 9.8 | Mar 31 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 13.7.5; before 14.7.5; before 15.4 |
| CVE-2025-30461 | 9.8 | Mar 31 | An access issue was addressed with additional sandbox restrictions on the system pasteboards Affected: before 15.4 |
| CVE-2025-24249 | 9.8 | Mar 31 | A permissions issue was addressed with additional sandbox restrictions Affected: before 13.7.5; before 14.7.5; before 15.4 |
| CVE-2025-24269 | 9.8 | Mar 31 | The issue was addressed with improved memory handling Affected: before 15.4 |
| CVE-2025-30457 | 9.8 | Mar 31 | This issue was addressed with improved validation of symlinks Affected: before 13.7.5; before 14.7.5; before 15.4 |
| CVE-2025-24253 | 9.8 | Mar 31 | This issue was addressed with improved handling of symlinks Affected: before 13.7.5; before 14.7.5; before 15.4 |
| CVE-2025-24195 | 9.8 | Mar 31 | An integer overflow was addressed with improved input validation Affected: before 13.7.5; before 14.7.5; before 15.4 |
| CVE-2025-24204 | 9.8 | Mar 31 | The issue was addressed with improved checks Affected: before 15.4 |
| CVE-2025-24245 | 9.8 | Mar 31 | This issue was addressed by adding a delay between verification code attempts Affected: before 15.4 |
| CVE-2025-31183 | 9.8 | Mar 31 | The issue was addressed with improved restriction of data container access Affected: before 14.7.5; before 15.4 |
| CVE-2025-24250 | 9.8 | Mar 31 | This issue was addressed with improved access restrictions Affected: before 13.7.5; before 14.7.5; before 15.4 |
| CVE-2025-24207 | 9.8 | Mar 31 | A permissions issue was addressed with additional restrictions Affected: before 13.7.5; before 14.7.5; before 15.4 |
| CVE-2025-24211 | 9.8 | Mar 31 | This issue was addressed with improved memory handling Affected: before 13.7.5; before 14.7.5; before 15.4 |
| CVE-2025-24246 | 9.8 | Mar 31 | An injection issue was addressed with improved validation Affected: before 13.7.5; before 14.7.5; before 15.4 |
| CVE-2025-24231 | 9.8 | Mar 31 | The issue was addressed with improved checks Affected: before 13.7.5; before 14.7.5; before 15.4 |
| CVE-2025-24266 | 9.8 | Mar 31 | A buffer overflow was addressed with improved bounds checking Affected: before 13.7.5; before 14.7.5; before 15.4 |
The 500 most important CVEs for this product (exploited first, then by severity)