← Back

Macos

macos

Vendor: Apple • 2,755 CVEs

CVEs (2,755)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-27827
1Apple
1Macos
Jun 17, 2026
May 14, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to read arbitrary files.
CVE-2024-27825
1Apple
1Macos
Jun 17, 2026
May 14, 2024
N/A· v4
7.1 HIGH· v3
N/A· v2
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.5. An app may be able to bypass certain Privacy preferences.
CVE-2024-27824
1Apple
1Macos
Jun 17, 2026
May 14, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to elevate privileges.
CVE-2024-27822
1Apple
1Macos
Jun 17, 2026
May 14, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.5. An app may be able to gain root privileges.
CVE-2024-27821
1Apple
4Ipados
Iphone OsMacos+1 more
Jun 17, 2026
May 14, 2024
N/A· v4
4.7 MEDIUM· v3
N/A· v2
A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, watchOS 10.5. A shortcut may output sensitive user data without consent.
CVE-2024-27818
1Apple
3Ipados
Iphone OsMacos
Jun 17, 2026
May 14, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An attacker may be able to cause unexpected app termination or arbi...Show more
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An attacker may be able to cause unexpected app termination or arbitrary code execution.Show less
CVE-2024-27816
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
May 14, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker may be able to access user data.
CVE-2024-27813
1Apple
1Macos
Jun 17, 2026
May 14, 2024
N/A· v4
8.6 HIGH· v3
N/A· v2
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
CVE-2024-27810
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
May 14, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, watchOS 10.5. An app may be able t...Show more
A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, watchOS 10.5. An app may be able to read sensitive location information.Show less
CVE-2024-27804
1Apple
6Ipados
Iphone OsMacos+3 more
Jun 17, 2026
May 14, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.3, watchOS 10.5. An app may be able to cause unexpected system termination.
CVE-2024-27798
1Apple
1Macos
Jun 17, 2026
May 14, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
An authorization issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An attacker may be able to elevate privileges.
CVE-2024-27796
1Apple
3Ipados
Iphone OsMacos
Jun 17, 2026
May 14, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An attacker may be able to elev...Show more
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An attacker may be able to elevate privileges.Show less
CVE-2024-27789
1Apple
3Ipados
Iphone OsMacos
Jun 17, 2026
May 14, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, macOS Monterey 12.7.5, macOS Sonoma 14.4, macOS Ventura 13.6.7. An app may be able to access user-sensitive data.
CVE-2024-23236
1Apple
1Macos
Jun 17, 2026
May 14, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app may be able to read arbitrary files.
CVE-2024-23229
1Apple
1Macos
Jun 17, 2026
May 14, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.4, macOS Ventura 13.6.5. A malicious application may be able to access Find My data...Show more
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.4, macOS Ventura 13.6.5. A malicious application may be able to access Find My data.Show less
CVE-2024-4558
3Apple
FedoraprojectGoogle
6Chrome
FedoraIpados+3 more
Jun 17, 2026
May 7, 2024
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2024-27791
1Apple
4Ipados
Iphone OsMacos+1 more
Jun 17, 2026
Apr 24, 2024
N/A· v4
7.1 HIGH· v3
N/A· v2
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3. An app may be able t...Show more
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3. An app may be able to corrupt coprocessor memory.Show less
CVE-2024-23271
1Apple
6Ipados
Iphone OsMacos+3 more
Jun 17, 2026
Apr 24, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.
CVE-2024-24795
6Apache
AppleBroadcom+3 more
7Debian Linux
Fabric Operating SystemFedora+4 more
Jun 17, 2026
Apr 4, 2024
N/A· v4
6.3 MEDIUM· v3
N/A· v2
HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended...Show more
HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue.Show less
CVE-2023-38709
6Apache
AppleBroadcom+3 more
7Debian Linux
Fabric Operating SystemFedora+4 more
Jun 17, 2026
Apr 4, 2024
N/A· v4
7.3 HIGH· v3
N/A· v2
Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.