macOS vulnerabilitiesAnd the versions its exploited flaws hit.
macOS is made by Apple. We track 4,662 published vulnerabilities listed under that exact name, across 143 versions. 82 of them are on the list of flaws known to be exploited, the newest added on 13 April 2026. Apple lists newer releases under their own names, such as Macos Server, so check those pages too.
The most recent macOS flaw added to the known-exploited list is CVE-2020-9715, on 13 April 2026. We keep watching the known-exploited list.
Is macOS listed under other names? Yes.
Apple also lists macOS under more specific names, such as Macos Server. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.
Which versions of macOS do the exploited flaws hit?
Each exploited flaw lists the versions it affects, usually as ranges. "12.0 to before 12.1" means from 12.0 up to, but not including, 12.1. Find your version, then patch.
- CVE-2021-30952Exploited list, 5 Mar 2026
Apple Multiple Products Integer Overflow or Wraparound Vulnerability
12.0 to before 12.1 - CVE-2022-48503Exploited list, 20 Oct 2025
Apple Multiple Products Unspecified Vulnerability
12.0.0 to before 12.5 - CVE-2025-43300Exploited list, 21 Aug 2025
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
before 13.7.8 - CVE-2025-6558Exploited list, 22 Jul 2025
Google Chromium ANGLE and GPU Improper Input Validation Vulnerability
before 15.6 - CVE-2025-43200Exploited list, 16 Jun 2025
Apple Multiple Products Unspecified Vulnerability
before 13.7.414.0 to before 14.7.415.0 to before 15.3.1 - CVE-2025-31201Exploited list, 17 Apr 2025
Apple Multiple Products Arbitrary Read and Write Vulnerability
before 15.4.1 - CVE-2025-31200Exploited list, 17 Apr 2025
Apple Multiple Products Memory Corruption Vulnerability
before 15.4.1 - CVE-2025-24201Exploited list, 13 Mar 2025
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
before 15.3.2 - CVE-2025-24085Exploited list, 29 Jan 2025
Apple Multiple Products Use-After-Free Vulnerability
before 15.3 - CVE-2024-44309Exploited list, 21 Nov 2024
Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability
15.0 to before 15.1.1 - CVE-2024-44308Exploited list, 21 Nov 2024
Apple Multiple Products Code Execution Vulnerability
before 15.1.1 - CVE-2024-23225Exploited list, 6 Mar 2024
Apple Multiple Products Memory Corruption Vulnerability
12.0 to before 12.7.413.0 to before 13.6.514.0 to before 14.4 - CVE-2024-23296Exploited list, 6 Mar 2024
Apple Multiple Products Memory Corruption Vulnerability
12.0 to before 12.7.613.0 to before 13.6.714.0 to before 14.4 - CVE-2022-48618Exploited list, 31 Jan 2024
Apple Multiple Products Memory Corruption Vulnerability
13.0 to before 13.1 - CVE-2024-23222Exploited list, 23 Jan 2024
Apple Multiple Products WebKit Type Confusion Vulnerability
12.0 to before 12.7.313.0 to before 13.6.414.0 to before 14.3 - CVE-2023-41990Exploited list, 8 Jan 2024
Apple Multiple Products Code Execution Vulnerability
before 11.7.912.0.0 to before 12.6.813.0 to before 13.2 - CVE-2023-42917Exploited list, 4 Dec 2023
Apple Multiple Products WebKit Memory Corruption Vulnerability
14.0 to before 14.1.2 - CVE-2023-42916Exploited list, 4 Dec 2023
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
14.0 to before 14.1.2 - CVE-2023-41991Exploited list, 25 Sep 2023
Apple Multiple Products Improper Certificate Validation Vulnerability
13.0 to before 13.6 - CVE-2023-41993Exploited list, 25 Sep 2023
Apple Multiple Products WebKit Code Execution Vulnerability
before 14.0 - CVE-2023-41992Exploited list, 25 Sep 2023
Apple Multiple Products Kernel Privilege Escalation Vulnerability
12.0 to before 12.713.0 to before 13.6 - CVE-2023-41064Exploited list, 11 Sep 2023
Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability
11.0 to before 11.7.1012.0 to before 12.6.913.0 to before 13.5.2 - CVE-2023-38606Exploited list, 26 Jul 2023
Apple Multiple Products Kernel Unspecified Vulnerability
11.0 to before 11.7.912.0.0 to before 12.6.813.0 to before 13.5 - CVE-2023-37450Exploited list, 13 Jul 2023
Apple Multiple Products WebKit Code Execution Vulnerability
13.0 to before 13.5
6 more exploited flaws name macOS without a version of its own, for example as the system other affected software runs on. They are in the list below.
Showing the 30 most recently added of 82 exploited flaws. The full list is below.
Which macOS vulnerabilities are being exploited?
50 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 7.8Adobe Acrobat Use-After-Free Vulnerability
Adobe Acrobat contains a use-after-free vulnerability that allows for code execution
- 7.8Apple Multiple Products Integer Overflow or Wraparound Vulnerability
Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.
- 8.8Apple Multiple Products Unspecified Vulnerability
Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead to arbitrary code execution.
- 8.8Google Chromium V8 Type Confusion Vulnerability
Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine.
- 8.8Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework.
- 8.8Google Chromium ANGLE and GPU Improper Input Validation Vulnerability
Google Chromium contains an improper input validation vulnerability in ANGLE and GPU.
- 8.1Google Chromium V8 Type Confusion Vulnerability
Google Chromium V8 contains a type confusion vulnerability that could allow a remote attacker to perform arbitrary read/write via a crafted HTML page.
- 4.2Apple Multiple Products Unspecified Vulnerability
Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link.
Which macOS flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 90%
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161.
- 85%CVE-2020-36221High
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
- 85%CVE-2020-36228High
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.
- 81%
Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service...
- 77%CVE-2020-36227High
A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
- 77%CVE-2020-36222High
A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.
Running macOS? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Adobe Acrobat contains a use-after-free vulnerability that allows for code execution
- Matched to
- macOS on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 4,662 published vulnerabilities listed under the name macOS, across 143 versions. The most recent macOS flaw added to the known-exploited list is CVE-2020-9715, on 13 April 2026.
82 are on the list of flaws known to be exploited. The most recently added are CVE-2020-9715, CVE-2021-30952 and CVE-2022-48503.
Apple also lists macOS under more specific names, such as Macos Server. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.
Each flaw names its own versions, usually as ranges. The newest, CVE-2021-30952, affects 12.0 to before 12.1. The versions for every exploited flaw are listed on this page.
Create a EdgeProtect account and track macOS. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.