Apple vendor intelligence
Apple Known Exploited Vulnerabilities
Track evidence-backed exploitation affecting Apple products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.
- Total KEVs
- 97
- Known exploited vulnerabilities affecting Apple products
- In CISA KEV
- 96
- Records also listed in the official catalog
- Beyond CISA KEV
- 1
- Additional exploited CVEs absent from CISA KEV
- Sensor Observed
- 0
- Apple KEVs with sensor-observed exploitation activity
The catalog gap matters for Apple exposure
One of the 97 exploited Apple CVEs tracked here are not in CISA KEV. Teams relying on the official catalog alone would miss 1% of this vendor portfolio.
- 99%
- Covered by CISA
- 1%
- Beyond CISA
- 46
- Product families
Attested Apple CVEs
Search the exploited-vulnerability portfolio, then narrow it to official CISA coverage or the additional records KEV Intelligence tracks beyond the catalog.
How exploitation is verified| CVE / description | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2026-65400
An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe... |
macOS | Confirmed | In CISA | 15 Aug 2026 |
|
CVE-2023-43000
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari... |
macOS, iOS and iPadOS, Safari | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-31277
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6,... |
Safari, iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-43520
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS... |
iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-43510
A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS... |
iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2023-41974
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An... |
iOS and iPadOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2021-30952
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and... |
watchOS, iOS and iPadOS, macOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2026-20700
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS... |
iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-43529
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2... |
Safari, iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2022-48503
The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5,... |
macOS, tvOS, Safari, watchOS, iOS and iPadOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-43300
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and... |
iOS and iPadOS, iPadOS, macOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-43200
This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and... |
iOS and iPadOS, iPadOS, macOS, visionOS, watchOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2011-0226
Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and... |
iOS | High | Beyond CISA | 19 Jul 2011 |
|
CVE-2020-9859
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5... |
iOS, macOS, tvOS, watchOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30869
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2,... |
iOS and iPadOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30761
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web... |
iOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30663
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3,... |
macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30665
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS... |
macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30657
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A... |
macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30713
A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to... |
macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30666
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content... |
iOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30661
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5,... |
iOS and iPadOS, Safari, tvOS, watchOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-1879
This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS... |
iOS and iPadOS, iOS, watchOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-1871
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security... |
iOS and iPadOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-1870
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security... |
iOS and iPadOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-1782
A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update... |
iOS and iPadOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30762
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content... |
iOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-9819
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5,... |
iOS, iOS-1, watchOS, watchOS-1 | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-9818
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS... |
iOS, iOS-1, watchOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-27932
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS... |
watchOS, iOS and iPadOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-27950
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update... |
watchOS, iOS and iPadOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30807
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1,... |
macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-27930
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9,... |
watchOS, iOS and iPadOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30860
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS... |
macOS, watchOS, iOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2019-6223
A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS... |
iOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30858
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6.... |
macOS, iOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2022-22587
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3,... |
iOS and iPadOS, macOS | Confirmed | In CISA | 28 Jan 2022 |
|
CVE-2014-4404
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged... |
iOS, Apple TV | Confirmed | In CISA | 10 Feb 2022 |
|
CVE-2015-1130
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via... |
OS X | Confirmed | In CISA | 10 Feb 2022 |
|
CVE-2022-22620
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1,... |
Safari (v and ), macOS | Confirmed | In CISA | 11 Feb 2022 |
|
CVE-2022-22674
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is... |
macOS | Confirmed | In CISA | 04 Apr 2022 |
|
CVE-2022-22675
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6,... |
iOS and iPadOS, macOS, watchOS | Confirmed | In CISA | 04 Apr 2022 |
|
CVE-2019-8506
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes... |
iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for Windows | Confirmed | In CISA | 04 May 2022 |
|
CVE-2021-1789
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina,... |
iOS and iPadOS, macOS | Confirmed | In CISA | 04 May 2022 |
|
CVE-2019-8720
A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code... |
webkitgtk | Confirmed | In CISA | 23 May 2022 |
|
CVE-2019-7287
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute... |
iOS | Confirmed | In CISA | 23 May 2022 |
|
CVE-2019-7286
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental... |
iOS, macOS | Confirmed | In CISA | 23 May 2022 |
|
CVE-2021-30883
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1,... |
iOS and iPadOS, macOS | Confirmed | In CISA | 23 May 2022 |
|
CVE-2016-4657
WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted... |
iOS | Confirmed | In CISA | 24 May 2022 |
|
CVE-2016-4656
The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory... |
iOS | Confirmed | In CISA | 24 May 2022 |
|
CVE-2016-4655
The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app. |
iOS | Confirmed | In CISA | 24 May 2022 |
|
CVE-2018-4344
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12,... |
iOS, macOS, tvOS, watchOS | Confirmed | In CISA | 27 Jun 2022 |
|
CVE-2019-8605
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS... |
iOS, macOS, tvOS, watchOS | Confirmed | In CISA | 27 Jun 2022 |
|
CVE-2020-9907
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An... |
iOS, tvOS | Confirmed | In CISA | 27 Jun 2022 |
|
CVE-2020-3837
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3,... |
iOS, macOS, tvOS, watchOS | Confirmed | In CISA | 27 Jun 2022 |
|
CVE-2021-30983
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to... |
iOS and iPadOS | Confirmed | In CISA | 27 Jun 2022 |
|
CVE-2022-32893
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey... |
Safari, iOS and iPadOS, macOS | Confirmed | In CISA | 18 Aug 2022 |
|
CVE-2022-32894
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey... |
iOS and iPadOS, macOS | Confirmed | In CISA | 18 Aug 2022 |
|
CVE-2021-31010
A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8... |
macOS, watchOS | Confirmed | In CISA | 25 Aug 2022 |
|
CVE-2020-9934
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and... |
iOS, macOS | Confirmed | In CISA | 08 Sep 2022 |
|
CVE-2022-32917
The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur... |
iOS, macOS | Confirmed | In CISA | 14 Sep 2022 |
|
CVE-2022-42827
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS... |
iOS and iPadOS | Confirmed | In CISA | 25 Oct 2022 |
|
CVE-2022-42856
A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2... |
tvOS | Confirmed | In CISA | 14 Dec 2022 |
|
CVE-2023-23529
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS... |
iOS and iPadOS, Safari, macOS | Confirmed | In CISA | 14 Feb 2023 |
|
CVE-2021-30900
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS... |
iOS and iPadOS | Confirmed | In CISA | 30 Mar 2023 |
|
CVE-2023-28206
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS... |
iOS and iPadOS, macOS | Confirmed | In CISA | 10 Apr 2023 |
|
CVE-2023-28205
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS... |
iOS and iPadOS, Safari, macOS | Confirmed | In CISA | 10 Apr 2023 |
|
CVE-2019-8526
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to... |
macOS | Confirmed | In CISA | 17 Apr 2023 |
|
CVE-2023-32373
A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6... |
macOS, Safari, watchOS, iOS and iPadOS, tvOS | Confirmed | In CISA | 22 May 2023 |
|
CVE-2023-28204
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6... |
macOS, Safari, watchOS, iOS and iPadOS, tvOS | Confirmed | In CISA | 22 May 2023 |
|
CVE-2023-32409
The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS... |
macOS, Safari, watchOS, iOS and iPadOS, tvOS | Confirmed | In CISA | 22 May 2023 |
|
CVE-2023-32439
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS... |
iOS and iPadOS, Safari, macOS | Confirmed | In CISA | 23 Jun 2023 |
|
CVE-2023-32435
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS... |
macOS, iOS and iPadOS, Safari | Confirmed | In CISA | 23 Jun 2023 |
|
CVE-2023-32434
An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS... |
macOS, iOS and iPadOS, watchOS | Confirmed | In CISA | 23 Jun 2023 |
|
CVE-2023-37450
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5,... |
Safari, tvOS, iOS and iPadOS, macOS, watchOS | Confirmed | In CISA | 13 Jul 2023 |
|
CVE-2023-38606
This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and... |
tvOS, iOS and iPadOS, macOS, watchOS | Confirmed | In CISA | 26 Jul 2023 |
|
CVE-2023-41061
A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted... |
iOS and iPadOS, watchOS | Confirmed | In CISA | 11 Sep 2023 |
|
CVE-2023-41064
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9,... |
macOS, iOS and iPadOS | Confirmed | In CISA | 11 Sep 2023 |
|
CVE-2023-41993
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution.... |
macOS | Confirmed | In CISA | 25 Sep 2023 |
|
CVE-2023-41992
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local... |
macOS, iOS and iPadOS | Confirmed | In CISA | 25 Sep 2023 |
|
CVE-2023-41991
A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to... |
iOS and iPadOS, macOS | Confirmed | In CISA | 25 Sep 2023 |
|
CVE-2023-42824
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their... |
iOS and iPadOS | Confirmed | In CISA | 05 Oct 2023 |
|
CVE-2023-42916
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2,... |
Safari, macOS, iOS and iPadOS | Confirmed | In CISA | 04 Dec 2023 |
|
CVE-2023-42917
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2,... |
Safari, macOS, iOS and iPadOS | Confirmed | In CISA | 04 Dec 2023 |
|
CVE-2023-41990
The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS... |
iOS and iPadOS, tvOS, macOS, watchOS | Confirmed | In CISA | 08 Jan 2024 |
|
CVE-2024-23222
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS... |
Safari, iOS and iPadOS, macOS, tvOS, visionOS | Confirmed | In CISA | 23 Jan 2024 |
|
CVE-2022-48618
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An... |
tvOS, macOS, iOS and iPadOS, watchOS | Confirmed | In CISA | 31 Jan 2024 |
|
CVE-2024-23296
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4,... |
iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 06 Mar 2024 |
|
CVE-2024-23225
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4,... |
iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 06 Mar 2024 |
|
CVE-2024-44308
The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1,... |
Safari, iOS and iPadOS, macOS, visionOS | Confirmed | In CISA | 21 Nov 2024 |
|
CVE-2024-44309
A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS... |
Safari, iOS and iPadOS, macOS, visionOS | Confirmed | In CISA | 21 Nov 2024 |
|
CVE-2025-24085
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia... |
iOS and iPadOS, iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 29 Jan 2025 |
|
CVE-2022-23748
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what... |
Audinate Dante Application Library for Windows | Confirmed | In CISA | 06 Feb 2025 |
|
CVE-2025-24200
An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS... |
iOS and iPadOS, iPadOS | Confirmed | In CISA | 12 Feb 2025 |
|
CVE-2025-24201
An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4... |
Safari, iOS and iPadOS, iPadOS, macOS, visionOS, watchOS | Confirmed | In CISA | 13 Mar 2025 |
|
CVE-2025-31200
A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1,... |
iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 17 Apr 2025 |
|
CVE-2025-31201
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1,... |
iOS and iPadOS, macOS, tvOS, visionOS | Confirmed | In CISA | 17 Apr 2025 |
No Apple CVEs match this search or filter.
Showing 97 of 97 Apple known exploited vulnerabilities.
Recurring weakness patterns
Out-of-bounds write, use after free, and access account for 48 mapped occurrences across this Apple KEV portfolio.
CWE-787
Out-of-bounds Write
CWE-416
Use After Free
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-190
Integer Overflow or Wraparound
CWE-125
Out-of-bounds Read
CWE-667
Improper Locking
Early warning alerts
Get alerts on high-impact exploitation
Receive curator-selected alerts when exploitation activity warrants attention. Each alert includes the evidence and context needed to decide what requires attention now.