CVE-20XX-?
agent?

Apple macOS CVEs.

Published CVEs affecting Apple macOS, ranked by exploit odds.

278 CVEs · updated 2026-11-13 10:05 UTC

Reset all
  1. CVE-2026-65400

    An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

    Drop everything exploited Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 18% exploit odds Fix listed
  2. CVE-2025-31201

    This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS.

    Drop everything exploited Auth & access Device Apple macOS

    9.8 CRITICAL 14% exploit odds Fix listed
  3. CVE-2025-24181

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 1% exploit odds Fix listed
  4. CVE-2025-24207

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to enable iCloud storage features without user consent.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 1% exploit odds Fix listed
  5. CVE-2025-24233

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to read or write to protected files.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 1% exploit odds Fix listed
  6. CVE-2025-24241

    A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to trick a user into copying sensitive data to the pasteboard.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 1% exploit odds Fix listed
  7. CVE-2025-31194

    An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A Shortcut may run with admin privileges without authentication.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 1% exploit odds Fix listed
  8. CVE-2025-24172

    A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. "Block All Remote Content" may not apply for all mail previews.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 0.9% exploit odds Fix listed
  9. CVE-2025-24195

    An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A user may be able to elevate privileges.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 0.9% exploit odds Fix listed
  10. CVE-2021-30856

    This issue was addressed by adding a new Remote Login option for opting into Full Disk Access for Secure Shell sessions. This issue is fixed in macOS Big Sur 11.3. A malicious unsandboxed app on a system with Remote Login enabled may bypass Privacy preferences.

    Auth & access OS & kernel Apple macOS

    9.1 CRITICAL 0.9% exploit odds Fix listed
  11. CVE-2025-24249

    A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to check the existence of an arbitrary path on the file system.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 0.9% exploit odds Fix listed
  12. CVE-2025-30462

    A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. Apps that appear to use App Sandbox may be able to launch without restrictions.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 0.9% exploit odds Fix listed
  13. CVE-2026-28862

    A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access user-sensitive data.

    Auth & access OS & kernel Apple macOS

    5.3 MEDIUM 0.8% exploit odds Fix listed
  14. CVE-2025-43184

    This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. A shortcut may be able to bypass sensitive Shortcuts app settings.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 0.8% exploit odds Fix listed
  15. CVE-2025-24254

    This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A user may be able to elevate privileges.

    Auth & access OS & kernel Apple macOS

    8.8 HIGH 0.8% exploit odds Fix listed
  16. CVE-2025-24093

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access removable volumes without user consent.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 0.8% exploit odds Fix listed
  17. CVE-2025-24229

    A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A sandboxed app may be able to access sensitive user data.

    Auth & access OS & kernel Apple macOS

    7.4 HIGH 0.8% exploit odds Fix listed
  18. CVE-2025-43194

    The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to modify protected parts of the file system.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 0.8% exploit odds Fix listed
  19. CVE-2025-43199

    A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. A malicious app may be able to gain root privileges.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 0.8% exploit odds Fix listed
  20. CVE-2025-24259

    This issue was addressed with additional entitlement checks. This issue is fixed in iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to retrieve Safari bookmarks without an entitlement check.

    Auth & access Browser & mail Apple macOS

    9.8 CRITICAL 0.8% exploit odds Fix listed
  21. CVE-2025-43232

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to bypass certain Privacy preferences.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 0.8% exploit odds Fix listed
  22. CVE-2025-30460

    A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data.

    Auth & access OS & kernel Apple macOS

    7.4 HIGH 0.8% exploit odds Fix listed
  23. CVE-2025-43233

    This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. A malicious app acting as a HTTPS proxy could get access to sensitive user data.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 0.8% exploit odds Fix listed
  24. CVE-2024-54533

    A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access sensitive user data.

    Auth & access OS & kernel Apple macOS

    7.0 HIGH 0.7% exploit odds Fix listed
  25. CVE-2024-54466

    An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An encrypted volume may be accessed by a different user without prompting for the password.

    Auth & access OS & kernel Apple macOS

    5.3 MEDIUM 0.7% exploit odds Fix listed
  26. CVE-2026-112427

    An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execution.

    Auth & access OS & kernel Apple macOS

    8.1 HIGH 0.7% exploit odds Fix listed
  27. CVE-2025-43192

    A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. Account-driven User Enrollment may still be possible with Lockdown Mode turned on.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 0.7% exploit odds Fix listed
  28. CVE-2025-30461

    An access issue was addressed with additional sandbox restrictions on the system pasteboards. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 0.7% exploit odds Fix listed
  29. CVE-2025-24245

    This issue was addressed by adding a delay between verification code attempts. This issue is fixed in macOS Sequoia 15.4. A malicious app may be able to access a user's saved passwords.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 0.7% exploit odds Fix listed
  30. CVE-2025-43198

    This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to access protected user data.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 0.7% exploit odds Fix listed
  31. CVE-2025-24272

    The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to modify protected parts of the file system.

    Auth & access OS & kernel Apple macOS

    6.8 MEDIUM 0.7% exploit odds Fix listed
  32. CVE-2026-65375

    The issue was addressed with improved authentication. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

    Auth & access OS & kernel Apple macOS

    7.5 HIGH 0.7% exploit odds Fix listed
  33. CVE-2024-44270

    A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A sandboxed process may be able to circumvent sandbox restrictions.

    Auth & access OS & kernel Apple macOS

    8.6 HIGH 0.6% exploit odds Fix listed
  34. CVE-2024-44265

    The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An attacker with physical access can input Game Controller events to apps running on a locked device.

    Auth & access OS & kernel Apple macOS

    2.4 LOW 0.6% exploit odds Fix listed
  35. CVE-2024-44289

    A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to read sensitive location information.

    Auth & access OS & kernel Apple macOS

    7.5 HIGH 0.6% exploit odds Fix listed
  36. CVE-2026-64738

    A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 0.6% exploit odds Fix listed
  37. CVE-2026-43779

    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to intercept network connections intended for another process.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 0.5% exploit odds Fix listed
  38. CVE-2026-64702

    An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to break out of its sandbox.

    Auth & access OS & kernel Apple macOS

    9.8 CRITICAL 0.5% exploit odds Fix listed
  39. CVE-2024-44196

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to modify protected parts of the file system.

    Auth & access OS & kernel Apple macOS

    5.5 MEDIUM 0.5% exploit odds Fix listed
  40. CVE-2026-113947

    This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2. Unpacking a maliciously crafted archive may lead to unexpected app termination or arbitrary code execution.

    Auth & access OS & kernel Apple macOS

    8.8 HIGH 0.5% exploit odds Fix listed
  41. CVE-2026-112480

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A user with screen sharing access may be able to view another user's screen.

    Auth & access OS & kernel Apple macOS

    7.5 HIGH 0.5% exploit odds Fix listed
  42. CVE-2026-28838

    A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to break out of its sandbox.

    Auth & access OS & kernel Apple macOS

    5.3 MEDIUM 0.5% exploit odds Fix listed
  43. CVE-2025-31247

    A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An attacker may gain access to protected parts of the file system.

    Auth & access OS & kernel Apple macOS

    7.5 HIGH 0.5% exploit odds Fix listed
  44. CVE-2026-86868

    An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker may be able to impersonate other users.

    Auth & access OS & kernel Apple macOS

    9.1 CRITICAL 0.5% exploit odds Fix listed
  45. CVE-2024-44151

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to modify protected parts of the file system.

    Auth & access OS & kernel Apple macOS

    5.5 MEDIUM 0.5% exploit odds Fix listed
  46. CVE-2026-112542

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to intercept network traffic.

    Auth & access OS & kernel Apple macOS

    7.5 HIGH 0.5% exploit odds Fix listed
  47. CVE-2025-24088

    The issue was addressed by adding additional logic. This issue is fixed in macOS Tahoe 26. An app may be able to override MDM-enforced settings from profiles.

    Auth & access OS & kernel Apple macOS

    7.5 HIGH 0.5% exploit odds Fix listed
  48. CVE-2024-44231

    This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. A person with physical access to a Mac may be able to bypass Login Window during a software update.

    Auth & access OS & kernel Apple macOS

    4.6 MEDIUM 0.4% exploit odds Fix listed
  49. CVE-2025-43416

    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data.

    Auth & access OS & kernel Apple macOS

    5.5 MEDIUM 0.4% exploit odds Fix listed
  50. CVE-2026-112473

    An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with the legacy VNC password for Screen Sharing may be able to copy files to the Mac.

    Auth & access OS & kernel Apple macOS

    7.4 HIGH 0.4% exploit odds Fix listed

All CVEs affecting Apple macOS that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.