Apple macOS Ventura <13.6.8

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

EPSS ≥ 10%

by severity

2critical19high44medium6low

updated 2026-10-27

vulnerabilities (75)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-23296US	high7.8OT critical	1.41% (73rd)	KEV	no fix	2024-03-05	—
CVE-2024-40815US	high7.5	1.09% (65th)	Exploit	no fix	2024-07-29	—
CVE-2024-40777US	medium5.5	7.70% (95th)	—	no fix	2024-07-29	—
CVE-2024-4558US	critical9.6	1.53% (75th)	—	no fix	2024-05-07	—
CVE-2024-40803US	high7.5	1.22% (69th)	—	no fix	2024-07-29	—
CVE-2024-40794US	medium5.3	1.18% (68th)	—	no fix	2024-07-29	—
CVE-2024-40789US	medium6.5	1.15% (67th)	—	no fix	2024-07-29	—
CVE-2024-40776US	medium4.3	1.01% (63rd)	—	no fix	2024-07-29	—
CVE-2024-40782US	medium6.5	0.98% (62nd)	—	no fix	2024-07-29	—
CVE-2024-40786US	high7.5	0.96% (61st)	—	no fix	2024-07-29	—
CVE-2024-23261US	high7.5	0.91% (60th)	—	no fix	2024-07-29	—
CVE-2024-40796US	medium5.3	0.90% (59th)	—	no fix	2024-07-29	—
CVE-2024-27881US	medium5.3	0.83% (57th)	—	no fix	2024-07-29	—
CVE-2024-40829US	medium4.6	0.81% (57th)	—	no fix	2024-07-29	—
CVE-2024-40785US	medium6.1	0.78% (56th)	—	no fix	2024-07-29	—
CVE-2024-40780US	medium5.5	0.70% (53rd)	—	no fix	2024-07-29	—
CVE-2024-40817US	medium6.1	0.69% (53rd)	—	no fix	2024-07-29	—
CVE-2024-54551US	—	0.65% (51st)	—	no fix	2025-03-21	—
CVE-2024-40836US	medium5.5	0.56% (46th)	—	no fix	2024-07-29	—
CVE-2024-27862US	low2.4	0.55% (46th)	—	no fix	2024-07-29	—
CVE-2024-44206US	critical9.3	0.46% (39th)	—	no fix	2024-10-24	—
CVE-2024-27877US	medium6.1	0.43% (37th)	—	no fix	2024-07-29	—
CVE-2024-40799US	high7.1	0.43% (37th)	—	no fix	2024-07-29	—
CVE-2024-40818US	medium4.6	0.41% (35th)	—	no fix	2024-07-29	—
CVE-2024-40822US	low2.4	0.41% (35th)	—	no fix	2024-07-29	—
CVE-2024-54564US	—OT elevated	0.38% (31st)	—	no fix	2025-03-21	—
CVE-2024-40800US	medium5.5	0.34% (27th)	—	no fix	2024-07-29	—
CVE-2024-40779US	medium5.5	0.34% (27th)	—	no fix	2024-07-29	—
CVE-2024-40806US	medium5.5	0.34% (27th)	—	no fix	2024-07-29	—
CVE-2024-40787US	high7.1	0.33% (26th)	—	no fix	2024-07-29	—
CVE-2024-40774US	high7.1	0.33% (26th)	—	no fix	2024-07-29	—
CVE-2024-40809US	high7.8	0.33% (26th)	—	no fix	2024-07-29	—
CVE-2024-40795US	low3.3	0.33% (26th)	—	no fix	2024-07-29	—
CVE-2024-27878US	medium6.7	0.33% (26th)	—	no fix	2024-07-29	—
CVE-2024-40788US	medium5.5	0.32% (24th)	—	no fix	2024-07-29	—
CVE-2024-40783US	medium5.5	0.31% (24th)	—	no fix	2024-07-29	—
CVE-2024-40835US	medium5.5	0.31% (24th)	—	no fix	2024-07-29	—
CVE-2024-40798US	low3.3	0.31% (24th)	—	no fix	2024-07-29	—
CVE-2024-40793US	medium5.5	0.30% (23rd)	—	no fix	2024-07-29	—
CVE-2024-27882US	medium4.4OT elevated	0.30% (23rd)	—	no fix	2024-07-29	—
CVE-2024-27863US	medium5.5	0.30% (22nd)	—	no fix	2024-07-29	—
CVE-2024-40833US	medium5.5	0.30% (22nd)	—	no fix	2024-07-29	—
CVE-2024-40778US	low3.3	0.29% (22nd)	—	no fix	2024-07-29	—
CVE-2024-40784US	medium5.5	0.29% (21st)	—	no fix	2024-07-29	—
CVE-2024-27873US	medium5.5	0.29% (21st)	—	no fix	2024-07-29	—
CVE-2024-44185US	medium5.5	0.29% (21st)	—	no fix	2024-10-24	—
CVE-2024-40812US	high7.8	0.29% (21st)	—	no fix	2024-07-29	—
CVE-2024-40823US	medium5.5	0.29% (21st)	—	no fix	2024-07-29	—
CVE-2024-40824US	medium5.5	0.28% (20th)	—	no fix	2024-07-29	—
CVE-2024-40775US	medium5.5	0.28% (20th)	—	no fix	2024-07-29	—

showing 50 of 75

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor10 CVEs
CWE-125Out-of-bounds Read8 CVEs
CWE-281Improper Preservation of Permissions6 CVEs
CWE-284Improper Access Control6 CVEs
CWE-269Improper Privilege Management4 CVEs
CWE-285Improper Authorization4 CVEs
CWE-416Use After Free4 CVEs
CWE-787Out-of-bounds Write4 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)75 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan