Most severe exploited vulnerabilities for "macos"

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.7.5 and iPadOS 15.7.5, Safari 16.4.1, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

1 / 6

First published (updated )

CVE-2023-28205

tvOSApple iOS Type Confusion Vulnerability

Risk 95

Severity

8.8

Exploited

Input Validation, Race Condition, Integer Overflow, Use After Free, Double Free

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1..

1 / 57

Source: NVD

First published (updated )

CVE-2022-42856

ubuntu/webkit2gtkApple Multiple Products WebKit Memory Corruption Vulnerability

Risk 95

Severity

8.8

Exploited

Zeroday

Buffer Overflow, Input Validation, Integer Overflow, Use After Free, Race Condition

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.

1 / 76

Source: Ubuntu

First published (updated )

CVE-2023-32435

Apple iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

Risk 87

Severity

8.6

Exploited

Input Validation

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.

1 / 3

First published (updated )

CVE-2023-28206

Apple iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Risk 97

Severity

7.8

Exploited

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

GPU Drivers. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 5

First published (updated )

CVE-2021-30900

Apple iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

Risk 87

Severity

7.8

Exploited

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Apple kernel, which is included in iOS, iPadOS, and macOS, contains an unspecified vulnerability where an application may be able to execute code with kernel privileges.

1 / 3

Source: CISA

First published (updated )

CVE-2022-32917

Apple iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

Risk 91

Severity

7.8

Exploited

Zeroday

Buffer Overflow, Path Traversal

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 and iPadOS 15.7.9, macOS Big Sur 11.7.10. Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

1 / 3

First published (updated )

CVE-2023-41064

macOSBuffer Overflow, Input Validation, Null Pointer Dereference, Use After Free, Integer Overflow, Race Condition

Risk 91

Severity

7.8

Exploited

Zeroday

Buffer Overflow, Input Validation, Null Pointer Dereference, Use After Free, Integer Overflow, Race Condition

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to execute arbitrary code with kernel privileges.

1 / 130

Source: MITRE

First published (updated )

CVE-2025-24228

macOSUse After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow

Risk 91

Severity

7.8

Exploited

Zeroday

Use After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges.

1 / 49

Source: MITRE

First published (updated )

CVE-2025-24267

Apple iOS, iPadOS, and macOSUse After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow

Risk 74

Severity

7.8

Exploited

Zeroday

EPSS

0.01%

Use After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges.

1 / 50

Source: MITRE

First published (updated )

CVE-2025-30456