Class familyApple · macOS
Apple iOS and macOS out-of-bounds read flaws, 2022–2026
64 macOS CVEs with CWE-125 weaknesses, 26 May 2022 to 14 Sep 2026. 4 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
12 2022’22
10 2023’23
12 2024’24
13 2025’25
17 2026’26
In CISA KEVNot in KEV
202212 CVEs, 2 in KEV
202310 CVEs, 2 in KEV
202412 CVEs
202513 CVEs
202617 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2022-22674KEV | 26 May 2022 | Apple macOS Out-of-Bounds Read Vulnerability | Grouped by weakness | 54.9 |
| CVE-2022-22675KEV | 26 May 2022 | Apple macOS Out-of-Bounds Write Vulnerability | Grouped by weakness | 62.7 |
| CVE-2022-32912 | 20 Sep 2022 | An out-of-bounds read was addressed with improved bounds checking | Grouped by weakness | 20.9 |
| CVE-2022-32799 | 23 Sep 2022 | An out-of-bounds read issue was addressed with improved bounds checking | Grouped by weakness | 19.3 |
| CVE-2022-32817 | 23 Sep 2022 | An out-of-bounds read issue was addressed with improved bounds checking | Grouped by weakness | 14.9 |
| CVE-2022-32831 | 23 Sep 2022 | An out-of-bounds read was addressed with improved bounds checking | Grouped by weakness | 14.6 |
| CVE-2022-32842 | 23 Sep 2022 | An out-of-bounds read issue was addressed with improved input validation | Grouped by weakness | 14.8 |
| CVE-2022-32851 | 23 Sep 2022 | An out-of-bounds read issue was addressed with improved input validation | Grouped by weakness | 14.6 |
| CVE-2022-32853 | 23 Sep 2022 | An out-of-bounds read issue was addressed with improved input validation | Grouped by weakness | 14.6 |
| CVE-2022-32916 | 15 Dec 2022 | An out-of-bounds read issue existed that led to the disclosure of kernel memory | Grouped by weakness | 7.0 |
| CVE-2022-32942 | 15 Dec 2022 | The issue was addressed with improved memory handling | Grouped by weakness | 11.9 |
| CVE-2022-32948 | 15 Dec 2022 | An out-of-bounds read was addressed with improved bounds checking | Grouped by weakness | 8.9 |
| CVE-2023-27929 | 8 May 2023 | An out-of-bounds read was addressed with improved input validation | Grouped by weakness | 7.1 |
| CVE-2023-27946 | 8 May 2023 | An out-of-bounds read was addressed with improved bounds checking | Grouped by weakness | 8.8 |
| CVE-2023-27949 | 8 May 2023 | An out-of-bounds read was addressed with improved input validation | Grouped by weakness | 8.8 |
| CVE-2023-28204KEV | 23 Jun 2023 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | Grouped by weakness | 61.9 |
| CVE-2023-32357 | 23 Jun 2023 | An authorization issue was addressed with improved state management | Grouped by weakness | 3.2 |
| CVE-2023-32372 | 23 Jun 2023 | An out-of-bounds read was addressed with improved input validation | Grouped by weakness | 7.1 |
| CVE-2023-32375 | 23 Jun 2023 | An out-of-bounds read was addressed with improved input validation | Grouped by weakness | 6.8 |
| CVE-2023-32389 | 23 Jun 2023 | This issue was addressed with improved redaction of sensitive information | Grouped by weakness | 3.2 |
| CVE-2023-32403 | 23 Jun 2023 | This issue was addressed with improved redaction of sensitive information | Grouped by weakness | 2.9 |
| CVE-2023-42916KEV | 30 Nov 2023 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | Grouped by weakness | 62.0 |
| CVE-2023-42862 | 10 Jan 2024 | An out-of-bounds read was addressed with improved input validation | Grouped by weakness | 13.4 |
| CVE-2023-42865 | 10 Jan 2024 | An out-of-bounds read was addressed with improved input validation | Grouped by weakness | 13.4 |
| CVE-2024-23264 | 8 Mar 2024 | A validation issue was addressed with improved input sanitization | Grouped by weakness | 15.0 |
| CVE-2024-40779 | 29 Jul 2024 | An out-of-bounds read was addressed with improved bounds checking | Grouped by weakness | 9.3 |
| CVE-2024-40780 | 29 Jul 2024 | An out-of-bounds read was addressed with improved bounds checking | Grouped by weakness | 15.2 |
| CVE-2024-40789 | 29 Jul 2024 | An out-of-bounds access issue was addressed with improved bounds checking | Grouped by weakness | 17.9 |
| CVE-2024-40799 | 29 Jul 2024 | An out-of-bounds read issue was addressed with improved input validation | Grouped by weakness | 12.3 |
| CVE-2024-40806 | 29 Jul 2024 | An out-of-bounds read issue was addressed with improved input validation | Grouped by weakness | 9.3 |
| CVE-2024-27880 | 16 Sep 2024 | An out-of-bounds read issue was addressed with improved input validation | Grouped by weakness | 7.6 |
| CVE-2024-44282 | 28 Oct 2024 | An out-of-bounds read was addressed with improved input validation | Grouped by weakness | 15.9 |
| CVE-2024-54502 | 11 Dec 2024 | The issue was addressed with improved checks | Grouped by weakness | 24.0 |
| CVE-2024-54508 | 11 Dec 2024 | The issue was addressed with improved memory handling | Grouped by weakness | 16.9 |
| CVE-2024-54478 | 27 Jan 2025 | An out-of-bounds access issue was addressed with improved bounds checking | Grouped by weakness | 14.3 |
| CVE-2025-24149 | 27 Jan 2025 | An out-of-bounds read was addressed with improved bounds checking | Grouped by weakness | 9.1 |
| CVE-2025-24162 | 27 Jan 2025 | This issue was addressed through improved state management | Grouped by weakness | 17.0 |
| CVE-2025-24182 | 31 Mar 2025 | An out-of-bounds read issue was addressed with improved input validation | Grouped by weakness | 8.3 |
| CVE-2025-24230 | 31 Mar 2025 | An out-of-bounds read issue was addressed with improved input validation | Grouped by weakness | 22.8 |
| CVE-2025-31196 | 12 May 2025 | An out-of-bounds read was addressed with improved input validation | Grouped by weakness | 7.1 |
| CVE-2025-31209 | 12 May 2025 | An out-of-bounds read was addressed with improved bounds checking | Grouped by weakness | 16.2 |
| CVE-2025-43226 | 29 Jul 2025 | An out-of-bounds read was addressed with improved input validation | Grouped by weakness | 6.0 |
| CVE-2025-43265 | 29 Jul 2025 | An out-of-bounds read was addressed with improved input validation | Grouped by weakness | 8.2 |
| CVE-2025-43344 | 15 Sep 2025 | An out-of-bounds access issue was addressed with improved bounds checking | Grouped by weakness | 7.6 |
| CVE-2025-43361 | 4 Nov 2025 | An out-of-bounds read was addressed with improved bounds checking | Grouped by weakness | 7.7 |
| CVE-2025-43377 | 4 Nov 2025 | An out-of-bounds read was addressed with improved bounds checking | Grouped by weakness | 5.6 |
| CVE-2025-43205 | 12 Nov 2025 | An out-of-bounds access issue was addressed with improved bounds checking | Grouped by weakness | 3.8 |
| CVE-2026-20609 | 11 Feb 2026 | The issue was addressed with improved memory handling | Grouped by weakness | 3.8 |
| CVE-2026-20675 | 11 Feb 2026 | The issue was addressed with improved bounds checks | Grouped by weakness | 9.9 |
| CVE-2025-43210 | 2 Apr 2026 | An out-of-bounds access issue was addressed with improved bounds checking | Grouped by weakness | 11.3 |
| CVE-2026-28991 | 11 May 2026 | An out-of-bounds read was addressed with improved bounds checking | Grouped by weakness | 14.6 |
| CVE-2026-43655 | 11 May 2026 | An out-of-bounds read was addressed with improved bounds checking | Grouped by weakness | 16.2 |
| CVE-2026-28979 | 29 Jun 2026 | An out-of-bounds access issue was addressed with improved bounds checking | Grouped by weakness | 11.2 |
| CVE-2026-43676 | 29 Jun 2026 | An out-of-bounds access issue was addressed with improved bounds checking | Grouped by weakness | 12.7 |
| CVE-2026-43712 | 29 Jun 2026 | The issue was addressed with improved memory handling | Grouped by weakness | 11.9 |
| CVE-2026-43817 | 27 Jul 2026 | An out-of-bounds read was addressed with improved bounds checking | Grouped by weakness | 4.9 |
| CVE-2026-64692 | 27 Jul 2026 | An out-of-bounds read was addressed with improved bounds checking | Grouped by weakness | 6.1 |
| CVE-2026-64719 | 27 Jul 2026 | An out-of-bounds access issue was addressed with improved bounds checking | Grouped by weakness | 12.5 |
| CVE-2026-64768 | 27 Jul 2026 | An out-of-bounds read issue was addressed with improved input validation | Grouped by weakness | 15.1 |
| CVE-2026-64784 | 17 Aug 2026 | An out-of-bounds access issue was addressed with improved bounds checking | Grouped by weakness | 12.6 |
| CVE-2026-28968 | 14 Sep 2026 | An out-of-bounds write issue was addressed with improved bounds checking | Grouped by weakness | 5.4 |
| CVE-2026-64736 | 14 Sep 2026 | An out-of-bounds access issue was addressed with improved bounds checking | Grouped by weakness | 6.1 |
| CVE-2026-65359 | 14 Sep 2026 | An out-of-bounds read was addressed with improved bounds checking | Grouped by weakness | 6.4 |
| CVE-2026-86903 | 14 Sep 2026 | An out-of-bounds read was addressed with improved input validation | Grouped by weakness | 4.8 |