Apple macOS <12.7.5

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical22high24medium2low

updated 2026-10-27

vulnerabilities (48)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-27815US	high7.8	2.05% (81st)	Exploit	no fix	2024-06-10	—
CVE-2024-27822US	high7.8	1.46% (74th)	Exploit	no fix	2024-05-14	—
CVE-2024-27804US	medium5.5	1.31% (71st)	Exploit	no fix	2024-05-14	—
CVE-2024-27821US	medium4.7	0.92% (60th)	Exploit	no fix	2024-05-14	—
CVE-2024-27857US	high7.8	1.83% (79th)	—	no fix	2024-06-10	—
CVE-2024-27808US	high8.8	1.18% (68th)	—	no fix	2024-06-10	—
CVE-2024-27816US	medium5.5	0.98% (62nd)	—	no fix	2024-05-14	—
CVE-2023-42861US	medium6.5	0.80% (56th)	—	no fix	2023-10-25	—
CVE-2024-27818US	high7.8	0.73% (54th)	—	no fix	2024-05-14	—
CVE-2024-27855US	high8.8	0.72% (54th)	—	no fix	2024-06-10	—
CVE-2024-27810US	medium5.5	0.71% (53rd)	—	no fix	2024-05-14	—
CVE-2024-27823US	medium5.9	0.68% (52nd)	—	no fix	2024-07-29	—
CVE-2024-27850US	medium6.5	0.65% (51st)	—	no fix	2024-06-10	—
CVE-2024-27830US	medium6.5	0.65% (51st)	—	no fix	2024-06-10	—
CVE-2024-27829US	high7.8	0.63% (50th)	—	no fix	2024-05-14	—
CVE-2024-27789US	medium5.5	0.62% (49th)	—	no fix	2024-05-14	—
CVE-2024-27800US	medium6.5	0.60% (49th)	—	no fix	2024-06-10	—
CVE-2024-27834US	medium5.5	0.60% (48th)	—	no fix	2024-05-14	—
CVE-2024-27832US	high7.8	0.59% (48th)	—	no fix	2024-06-10	—
CVE-2024-27811US	high7.8	0.56% (46th)	—	no fix	2024-06-10	—
CVE-2024-27844US	medium5.5	0.56% (46th)	—	no fix	2024-06-10	—
CVE-2024-27841US	medium5.5	0.44% (38th)	—	no fix	2024-05-14	—
CVE-2024-27802US	high7.8	0.42% (36th)	—	no fix	2024-06-10	—
CVE-2024-27813US	high8.6	0.39% (33rd)	—	no fix	2024-05-14	—
CVE-2024-27836US	high7.8	0.38% (32nd)	—	no fix	2024-06-10	—
CVE-2024-23251US	medium4.6	0.37% (31st)	—	no fix	2024-06-10	—
CVE-2024-27801US	high7.8	0.36% (29th)	—	no fix	2024-06-10	—
CVE-2024-27842US	high7.8	0.33% (26th)	—	no fix	2024-05-14	—
CVE-2024-27831US	high7.8	0.30% (23rd)	—	no fix	2024-06-10	—
CVE-2024-23229US	medium5.5	0.27% (20th)	—	no fix	2024-05-14	—
CVE-2024-27885US	medium6.3	0.27% (19th)	—	no fix	2024-06-10	—
CVE-2023-42893US	medium5.5	0.26% (18th)	—	no fix	2024-03-28	—
CVE-2024-27806US	medium5.5	0.26% (17th)	—	no fix	2024-06-10	—
CVE-2024-27796US	high7.8	0.26% (17th)	—	no fix	2024-05-14	—
CVE-2024-27884US	medium5.5	0.25% (17th)	—	no fix	2024-07-29	—
CVE-2024-23236US	medium5.5	0.25% (17th)	—	no fix	2024-05-14	—
CVE-2024-27805US	medium5.5	0.25% (16th)	—	no fix	2024-06-10	—
CVE-2024-27827US	medium5.5	0.25% (16th)	—	no fix	2024-05-14	—
CVE-2024-23282US	medium5.5	0.24% (15th)	—	no fix	2024-06-10	—
CVE-2024-27799US	low3.3	0.24% (14th)	—	no fix	2024-06-10	—
CVE-2024-27824US	high7.8	0.23% (13th)	—	no fix	2024-05-14	—
CVE-2024-27847US	medium5.5	0.22% (13th)	—	no fix	2024-05-14	—
CVE-2024-27843US	high7.8	0.21% (12th)	—	no fix	2024-05-14	—
CVE-2024-27798US	high7.8OT elevated	0.20% (10th)	—	no fix	2024-05-14	—
CVE-2024-27848US	high7.8OT elevated	0.20% (10th)	—	no fix	2024-06-10	—
CVE-2024-27825US	high7.1	0.19% (9th)	—	no fix	2024-05-14	—
CVE-2024-27817US	high7.8	0.18% (8th)	—	no fix	2024-06-10	—
CVE-2024-27837US	low3.3	0.18% (7th)	—	no fix	2024-05-14	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-277Insecure Inherited Permissions5 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-266Incorrect Privilege Assignment3 CVEs
CWE-284Improper Access Control3 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)48 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan