Apple macOS <13.6.5
productDEA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
public exploit
0
EPSS ≥ 10%
0
critical
by severity
0critical13high14medium5low
updated 2026-10-27
01
vulnerabilities (32)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2024-23225US | high7.8OT critical | KEV |
| CVE-2024-23248US | high7.1 | — |
| CVE-2024-23245US | low3.3 | — |
| CVE-2024-23274US | high7.8 | — |
| CVE-2024-23268US | high7.8 | — |
| CVE-2024-23253US | low3.3OT elevated | — |
| CVE-2024-23247US | high7.8 | — |
| CVE-2024-23276US | high7.8 | — |
| CVE-2024-23294US | high7.8 | — |
| CVE-2024-23216US | high7.1 | — |
| CVE-2024-23234US | medium6.7 | — |
| CVE-2024-23279US | medium5.5 | — |
| CVE-2024-23285US | medium5.5 | — |
| CVE-2024-23269US | medium5.5 | — |
| CVE-2024-23201US | medium5.5OT elevated | — |
| CVE-2024-23227US | low3.3 | — |
| CVE-2024-23299US | high8.6 | — |
| CVE-2024-23249US | high7.1 | — |
| CVE-2024-23258US | high7.8 | — |
| CVE-2024-23272US | medium5.5 | — |
| CVE-2024-23244US | high7.8 | — |
| CVE-2024-23281US | medium5.5 | — |
| CVE-2024-23266US | medium5.5 | — |
| CVE-2022-42816US | medium5.5 | — |
| CVE-2024-23267US | medium5.5 | — |
| CVE-2024-23233US | high7.8 | — |
| CVE-2024-23232US | low3.3 | — |
| CVE-2024-23260US | medium5.5 | — |
| CVE-2023-42853US | medium5.5 | — |
| CVE-2024-23238US | low3.3 | — |
| CVE-2024-23230US | medium5.5OT elevated | — |
| CVE-2024-23275US | medium4.7 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-284Improper Access Control5 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
- CWE-269Improper Privilege Management3 CVEs
- CWE-20Improper Input Validation2 CVEs
- CWE-266Incorrect Privilege Assignment2 CVEs
- CWE-276Incorrect Default Permissions2 CVEs
- CWE-404Improper Resource Shutdown or Release2 CVEs
- CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)32 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan