Sploitus

25 exploited vulnerabilities in Macos Big Sur

Vulnerabilities with publicly known exploits

Vendors
Apple, Almalinux, Astra Linux, Centos, Linux Mint, Red Hat
With known exploits
25
Affected Apple Ipados versions
< 15.3, 14.4.1, 15.5, 15.2, 14.0, 14.5, 15.7.9, 16.6.1, 14.8, 15.7.6, 16.5, 15.7.2, 15.6, 14.2, 15.7, 14.6
Affected Apple Iphone Os versions
< 15.3, 14.4.1, 15.5, 15.2, 14.0, 12.5.3, 14.5, 15.7.9, 16.6.1, 12.5.5, 14.8, 15.7.6, 16.5, 15.7.2, 16.1.2, 15.6, 14.2, 16.0, 14.6
Affected Apple Macos versions
< 11.6.3, 12.2, 11.2.3, 11.6.6, 12.4, 11.6.2, 12.1, 11.3, 11.7.10, 12.6.9, 13.5.2, 11.6, 11.7.9, 12.6.8, 13.5, 11.7.7, 12.6.6, 13.4, 11.7.2, 12.6.2, 13.1, 10.15.7, 11.6.8, 12.5, 11.7, 12.6, 11.4, 11.1.0, 11.7.5, 12.6.4, 13.3
Affected Apple Safari versions
< 14.0.3, 14.0, 14.1, 16.2, 14.1.1
Affected Apple Tvos versions
< 14.5, 15.5, 15.2, 14.0, 16.5, 16.2, 15.6, 14.2, 14.6
Affected Apple Watchos versions
< 7.3.2, 8.6, 8.3, 7.0, 7.4, 7.6.2, 9.5, 9.2, 8.7, 7.1, 9.0, 7.5
Affected Apple Mac Os X versions
< 10.15.7, 11.0.1, 10.14.6
Affected Apple Icloud versions
< 11.5.0, 12.3

Vulnerabilities with exploits

Highest CVSS first — 8 of these already have exploit code on Sploitus

CVE-2022-22587
CVSS 10.0 CRITICAL 2022-01-26FIX AVAILABLE
CVE-2021-1844
CVSS 10.0 HIGH 2021-03-08FIX AVAILABLE
CVE-2022-26757
CVSS 9.3 HIGH 2022-05-16FIX AVAILABLE
CVE-2022-26763
CVSS 9.3 HIGH 2022-05-16FIX AVAILABLE
CVE-2021-30937 1 exploit
CVSS 9.3 HIGH 2021-08-24FIX AVAILABLE
XNU inm_merge Heap Use-After-Free
CVE-2020-9947
CVSS 9.3 HIGH 2020-11-12FIX AVAILABLE
CVE-2021-30661
CVSS 9.0 HIGH 2020-11-23FIX AVAILABLE
CVE-2021-1820
CVSS 8.8 HIGH 2020-11-23FIX AVAILABLE
CVE-2021-1825
CVSS 8.8 HIGH 2020-11-23FIX AVAILABLE
CVE-2023-41064 2 exploits
CVSS 7.8 HIGH 2023-08-22FIX AVAILABLE
Exploit for Classic Buffer Overflow in Apple IpadosExploit for Out-of-bounds Write in Google Chrome
CVE-2022-26726 2 exploits
CVSS 7.8 HIGH 2022-05-16FIX AVAILABLE
Exploit for CVE-2022-26726Exploit for CVE-2022-26726
CVE-2021-30860 2 exploits
CVSS 7.8 HIGH 2021-08-24FIX AVAILABLE
Exploit for Integer Overflow or Wraparound in Apple IpadosExploit for Integer Overflow or Wraparound in Apple Ipados
CVE-2023-38571
CVSS 7.5 HIGH 2023-07-24FIX AVAILABLE
CVE-2023-32413 1 exploit
CVSS 7.0 HIGH 2023-05-18FIX AVAILABLE
Exploit for Race Condition in Apple Ipados
CVE-2022-46689 9 exploits
CVSS 7.0 HIGH 2022-12-13FIX AVAILABLE
Exploit for Race Condition in Apple SafariExploit for Race Condition in Apple Safari
CVE-2022-32832 2 exploits
CVSS 6.7 MEDIUM 2022-07-20FIX AVAILABLE
Exploit for CVE-2022-32832Exploit for CVE-2022-32832
CVE-2020-27935
CVSS 6.3 MEDIUM 2020-11-12FIX AVAILABLE
CVE-2021-1826
CVSS 6.1 MEDIUM 2020-11-23FIX AVAILABLE
CVE-2023-32407
CVSS 5.5 MEDIUM 2023-05-18FIX AVAILABLE
CVE-2022-32883
CVSS 5.5 MEDIUM 2022-09-12FIX AVAILABLE
CVE-2022-26766
CVSS 5.5 MEDIUM 2022-05-16FIX AVAILABLE
CVE-2022-46718
CVSS 5.5 MEDIUM 2022-12-13FIX AVAILABLE
CVE-2021-30682
CVSS 5.5 MEDIUM 2021-03-15FIX AVAILABLE
CVE-2020-27949 2 exploits
CVSS 5.5 MEDIUM 2020-12-14FIX AVAILABLE
Exploit for CVE-2020-27949Exploit for CVE-2020-27949
CVE-2023-28197
CVSS 3.3 LOW 2023-03-27FIX AVAILABLE