Apple macOS known exploited vulnerabilities, ranked
CISA lists 6 Apple macOS CVEs as exploited in the wild. 1 were added in the last 12 months and 0 are known to be used in ransomware. The table ranks all of them by EPSS, FIRST's estimate of the chance a CVE is exploited in the next 30 days, so the first rows are the ones to patch first.
Patch these first
- CVE-2021-30657: EPSS 68.5%, added 2021-11-03
- CVE-2022-22675: EPSS 12.5%, added 2022-04-04
- CVE-2021-30713: EPSS 7.0%, added 2021-11-03
- CVE-2026-65400: EPSS 1.7%, added 2026-08-18
- CVE-2022-22674: EPSS 1.1%, added 2022-04-04
All 6 Apple macOS CVEs in CISA KEV, by EPSS
| # | CVE | Flaw | EPSS | Ransomware | Added | Federal due |
|---|---|---|---|---|---|---|
| 1 | CVE-2021-30657 | macOS Unspecified | 68.5% | – | 2021-11-03 | 2021-11-17 |
| 2 | CVE-2022-22675 | macOS Out-of-Bounds Write | 12.5% | – | 2022-04-04 | 2022-04-25 |
| 3 | CVE-2021-30713 | macOS Unspecified | 7.0% | – | 2021-11-03 | 2021-11-17 |
| 4 | CVE-2026-65400 | macOS Improper Authentication | 1.7% | – | 2026-08-18 | 2026-08-21 |
| 5 | CVE-2022-22674 | macOS Out-of-Bounds Read | 1.1% | – | 2022-04-04 | 2022-04-25 |
| 6 | CVE-2019-8526 | macOS Use-After-Free | 0.7% | – | 2023-04-17 | 2023-05-08 |
EPSS changes daily; a CVE with a low EPSS that is in KEV is still exploited somewhere. Federal due dates bind US federal civilian agencies; everyone else can use them as a priority hint.
Sources: CISA KEV, FIRST EPSS.
More: all Apple KEV CVEs · other Apple products: Multiple Products · iOS and iPadOS · iOS, iPadOS, and macOS · iOS · free KEV badge for Apple · all vendors