Apple Apple macOS Sequoia <15.7

Name: Apple Apple macOS Sequoia <15.7
Brand: Apple

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical2high2medium1low

updated 2026-10-27

vulnerabilities (92)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-6965US	high7.7	73.5% (99th)	Exploit	no fix	2025-07-15	≤ Sequoia <15.7
CVE-2024-27280US	—	2.36% (84th)	—	no fix	2024-05-14	≤ Sequoia <15.7
CVE-2025-31255US	—	1.63% (76th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43272US	—	1.08% (65th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43359US	—	0.96% (61st)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43347US	—	0.92% (60th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43368US	—	0.81% (57th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43343US	—	0.80% (57th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43342US	—	0.77% (56th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43356US	—	0.67% (52nd)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43273US	—	0.64% (50th)	—	no fix	2025-07-30	≤ Sequoia <15.7
CVE-2025-43349US	—	0.52% (44th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43372US	high7.8	0.52% (44th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-40909US	—	0.50% (43rd)	—	no fix	2025-05-30	≤ Sequoia <15.7
CVE-2025-43327US	—	0.50% (42nd)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-24088US	—	0.48% (41st)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43308US	medium5.3	0.40% (34th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43283US	—	0.40% (34th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-31271US	—	0.40% (34th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43323US	—	0.40% (34th)	—	no fix	2025-11-04	≤ Sequoia <15.7
CVE-2025-43297US	—	0.37% (31st)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43285US	—	0.34% (28th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43333US	—	0.34% (28th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43204US	—	0.34% (28th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43344US	—	0.33% (26th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43316US	—OT elevated	0.32% (25th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43329US	—OT elevated	0.31% (24th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43358US	—OT elevated	0.30% (23rd)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43277US	—	0.29% (22nd)	—	no fix	2025-07-30	≤ Sequoia <15.7
CVE-2025-43190US	—	0.27% (19th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43302US	—	0.26% (18th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43312US	—	0.26% (17th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43304US	—	0.26% (17th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-31259US	—	0.25% (16th)	—	no fix	2025-05-12	≤ Sequoia <15.7
CVE-2025-43314US	—	0.25% (16th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43298US	—	0.24% (16th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43346US	—	0.24% (15th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43355US	—	0.24% (14th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43299US	—	0.23% (14th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43295US	—	0.23% (14th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43293US	—	0.23% (14th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43330US	—	0.23% (14th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43311US	—OT elevated	0.23% (14th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43301US	—	0.23% (14th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43357US	low3.3	0.23% (14th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43354US	—	0.23% (13th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43287US	—	0.23% (13th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43326US	—	0.22% (13th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43303US	—	0.22% (13th)	—	no fix	2025-09-15	≤ Sequoia <15.7
CVE-2025-43231US	—	0.22% (13th)	—	no fix	2025-09-15	≤ Sequoia <15.7

showing 50 of 92

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control25 CVEs
CWE-862Missing Authorization8 CVEs
CWE-125Out-of-bounds Read7 CVEs
CWE-20Improper Input Validation6 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-359Exposure of Private Personal Information to an Unauthorized Actor4 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')4 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)92 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan