← Back

Macos

macos

Vendor: Apple • 2,755 CVEs

CVEs (2,755)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-28544
4Apache
AppleDebian+1 more
4Debian Linux
FedoraMacos+1 more
Jun 17, 2026
Apr 12, 2022
N/A· v4
4.3 MEDIUM· v3
3.5 LOW· v2
Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied...Show more
Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom' path of the original. This also reveals the fact that the node was copied. Only the 'copyfrom' path is revealed; not its contents. Both httpd and svnserve servers are vulnerable.Show less
CVE-2022-24836
4Apple
DebianFedoraproject+1 more
4Debian Linux
FedoraMacos+1 more
Jun 17, 2026
Apr 11, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents...Show more
Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade to Nokogiri `>= 1.13.4`. There are no known workarounds for this issue.Show less
CVE-2018-25032
11Apple
AzulDebian+8 more
27Active Iq Unified Manager
Debian LinuxE Series Santricity Os Controller+24 more
Jul 14, 2026
Mar 25, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
CVE-2022-22669
1Apple
1Macos
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel privileges.
CVE-2022-22665
1Apple
2Mac Os X
Macos
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to gain root privileges.
CVE-2022-22664
1Apple
3Garageband
Logic Pro XMacos
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application te...Show more
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.Show less
CVE-2022-22661
1Apple
2Mac Os X
Macos
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to execute arbitrary code...Show more
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2022-22660
1Apple
1Macos
Jun 17, 2026
Mar 18, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
This issue was addressed with a new entitlement. This issue is fixed in macOS Monterey 12.3. An app may be able to spoof system notifications and UI.
CVE-2022-22657
1Apple
3Garageband
Logic Pro XMacos
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected applic...Show more
A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.Show less
CVE-2022-22656
1Apple
2Mac Os X
Macos
Jun 17, 2026
Mar 18, 2022
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A local attacker may be able to view the previous...Show more
An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A local attacker may be able to view the previous logged in user’s desktop from the fast user switching screen.Show less
CVE-2022-22651
1Apple
1Macos
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.3. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2022-22650
1Apple
2Mac Os X
Macos
Jun 17, 2026
Mar 18, 2022
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and acces...Show more
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and access user data.Show less
CVE-2022-22648
1Apple
2Mac Os X
Macos
Jun 17, 2026
Mar 18, 2022
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to read restricted memory.
CVE-2022-22647
1Apple
2Mac Os X
Macos
Jun 17, 2026
Mar 18, 2022
N/A· v4
4.6 MEDIUM· v3
2.1 LOW· v2
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A person with access to a Mac may be able to bypass Login Window.
CVE-2022-22644
1Apple
1Macos
Jun 17, 2026
Mar 18, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to access information about a u...Show more
A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to access information about a user's contacts.Show less
CVE-2022-22643
1Apple
3Ipados
Iphone OsMacos
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. A user may send audio and video in a FaceTime call without knowing that they have done so.
CVE-2022-22641
1Apple
4Ipados
Iphone OsMacos+1 more
Jun 17, 2026
Mar 18, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. An application may be able to gain elevated privileges.
CVE-2022-22640
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. An application may be able to execute arbitrary code with ke...Show more
A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. An application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2022-22639
1Apple
3Ipados
Iphone OsMacos
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A logic issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. An application may be able to gain elevated privileges.
CVE-2022-22638
1Apple
6Ipados
Iphone OsMac Os X+3 more
Jun 17, 2026
Mar 18, 2022
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A null pointer dereference was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An...Show more
A null pointer dereference was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An attacker in a privileged position may be able to perform a denial of service attack.Show less