← Back

Macos

macos

Vendor: Apple • 3,171 CVEs

CVEs (3,171)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Apple
6Ipados
Iphone OsMacos+3 more
Jun 17, 2026
Feb 27, 2023
N/A· v4
4.3 MEDIUM· v3
N/A· v2
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safari 16.2. Visiting a malicious website ma...Show more
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safari 16.2. Visiting a malicious website may lead to address bar spoofing.Show less
1Apple
1Macos
Jun 17, 2026
Feb 27, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Monterey 12.6.2. An app may be able to modify protected parts of the file system.
1Apple
1Macos
Jun 17, 2026
Feb 27, 2023
N/A· v4
3.3 LOW· v3
N/A· v2
An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A camera extension may be able to continue receiving video after the app which activated was closed.
1Apple
1Macos
Jun 17, 2026
Feb 27, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.
2Apple
Webkitgtk
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Feb 27, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1 and iPadOS 16, Safari 16.1. Processing maliciously crafted web content may lead to arbitrary code ex...Show more
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1 and iPadOS 16, Safari 16.1. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
1Apple
1Macos
Jun 17, 2026
Feb 27, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6, macOS Big Sur 11.7. An app may be able to bypass Privacy preferences.
1Apple
1Macos
Jun 17, 2026
Feb 27, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6, macOS Big Sur 11.7. An app may be able to gain elevated privileges.
1Apple
1Macos
Jun 17, 2026
Feb 27, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6, macOS Big Sur 11.7. A user may be able to view sensitive user information.
1Apple
3Ipados
Iphone OsMacos
Jun 17, 2026
Feb 27, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. A malicious application may be able to leak sensitive user information.
1Apple
2Mac Os X
Macos
Jun 17, 2026
Feb 27, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5, macOS Monterey 12.3....Show more
A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5, macOS Monterey 12.3. A local user may be able to write arbitrary files.Show less
1Apple
1Macos
Jun 17, 2026
Feb 27, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to access local users' Apple IDs.
3Apple
HaxxSplunk
3Curl
MacosUniversal Forwarder
Oct 23, 2026
Feb 9, 2023
N/A· v4
5.9 MEDIUM· v3
N/A· v2
A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting de...Show more
A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.Show less
4Apple
FedoraprojectNeovim+1 more
4Fedora
MacosNeovim+1 more
Sep 24, 2026
Jan 21, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.
4Apple
DebianFedoraproject+1 more
4Debian Linux
FedoraMacos+1 more
Jun 17, 2026
Jan 18, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries...Show more
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.Show less
4Apple
FedoraprojectNeovim+1 more
4Fedora
MacosNeovim+1 more
Sep 24, 2026
Jan 13, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
5Apple
FedoraprojectNeovim+2 more
5Fedora
Hci Compute NodeMacos+2 more
Sep 24, 2026
Jan 4, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
1Apple
4Ipados
Iphone OsMacos+1 more
Jun 17, 2026
Dec 15, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2. Connecting to a malicious NFS server may lead to arbitrary code execution with kernel p...Show more
The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2. Connecting to a malicious NFS server may lead to arbitrary code execution with kernel privileges.Show less
1Apple
6Ipados
Iphone OsMacos+3 more
Jun 17, 2026
Dec 15, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing m...Show more
A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
1Apple
6Ipados
Iphone OsMacos+3 more
Jun 17, 2026
Dec 15, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content...Show more
A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
1Apple
7Icloud
IpadosIphone Os+4 more
Jun 17, 2026
Dec 15, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web cont...Show more
A logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may disclose sensitive user information.Show less