macOS

The US cybersecurity agency CISA lists these vulnerabilities in its catalog of Known Exploited Vulnerabilities. Check your version and patch or mitigate promptly.

• CVE-2025-43300Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

  10.0 critical · over the network, without login · CISA deadline was 11 Sept 25

• CVE-2026-65400Apple macOS Improper Authentication Vulnerability

  9.8 critical · over the network, without login · CISA deadline was 21 Aug

• CVE-2021-1871Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

  9.8 critical · over the network, without login · CISA deadline was 17 Nov 21

• CVE-2021-1870Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

  9.8 critical · over the network, without login · CISA deadline was 17 Nov 21

• CVE-2022-22587Apple Memory Corruption Vulnerability

  9.8 critical · over the network, without login · CISA deadline was 11 Feb 22

• CVE-2021-30858Apple iOS, iPadOS, macOS Use-After-Free Vulnerability

  8.8 high · over the network, without login, needs user action · CISA deadline was 17 Nov 21

• CVE-2022-22620Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

  8.8 high · over the network, without login, needs user action · CISA deadline was 25 Feb 22

• CVE-2022-32893Apple iOS and macOS Out-of-Bounds Write Vulnerability

  8.8 high · over the network, without login, needs user action · CISA deadline was 8 Sept 22

• CVE-2023-28206Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

  8.6 high · locally only, without login, needs user action · CISA deadline was 1 May 23

• CVE-2021-30869Apple iOS, iPadOS, and macOS Type Confusion Vulnerability

  7.8 high · locally only, without login, needs user action · CISA deadline was 17 Nov 21

• CVE-2021-30713Apple macOS Unspecified Vulnerability

  7.8 high · locally only, with a basic account · CISA deadline was 17 Nov 21

• CVE-2022-22675Apple macOS Out-of-Bounds Write Vulnerability

  7.8 high · locally only, without login, needs user action · CISA deadline was 25 Apr 22

• CVE-2022-32894Apple iOS and macOS Out-of-Bounds Write Vulnerability

  7.8 high · locally only, without login, needs user action · CISA deadline was 8 Sept 22

• CVE-2022-32917Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

  7.8 high · locally only, with a basic account · CISA deadline was 5 Oct 22

• CVE-2021-30900Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

  7.8 high · locally only, without login, needs user action · CISA deadline was 20 Apr 23

• CVE-2019-8526Apple macOS Use-After-Free Vulnerability

  7.8 high · locally only, with a basic account · CISA deadline was 8 May 23

• CVE-2023-41064Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

  7.8 high · locally only, without login, needs user action · CISA deadline was 2 Oct 23

• CVE-2019-6223Apple iOS and macOS Group Facetime Vulnerability

  7.5 high · over the network, without login · CISA deadline was 3 May 22

• CVE-2021-31010Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

  7.5 high · over the network, without login · CISA deadline was 15 Sept 22

• CVE-2021-30657Apple macOS Unspecified Vulnerability

  5.5 medium · locally only, without login, needs user action · CISA deadline was 17 Nov 21

• CVE-2022-22674Apple macOS Out-of-Bounds Read Vulnerability

  5.5 medium · locally only, with a basic account · CISA deadline was 25 Apr 22

• CVE-2020-9934Apple iOS, iPadOS, and macOS Input Validation Vulnerability

  5.5 medium · locally only, with a basic account · CISA deadline was 29 Sept 22

Source: CISA KEV. The CVE is matched to the product automatically — when in doubt, the linked NVD entry applies.