Exploited vulnerabilities
Apple
96 Apple vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue96
Last 12 months11
In ransomware campaigns0
Last addition4 November 2026
The vulnerabilities96
- 4 November 2026CVE-2024-27834Multiple ProductsApple Multiple Products Improper Authentication Vulnerability
- 29 September 2026CVE-2026-86950Multiple ProductsApple Multiple Products Out-of-Bounds Write Vulnerability
- 18 August 2026CVE-2026-65400macOSApple macOS Improper Authentication Vulnerability
- 20 March 2026CVE-2025-43520Multiple ProductsApple Multiple Products Classic Buffer Overflow Vulnerability
- 20 March 2026CVE-2025-43510Multiple ProductsApple Multiple Products Improper Locking Vulnerability
- 20 March 2026CVE-2025-31277Multiple ProductsApple Multiple Products Buffer Overflow Vulnerability
- 5 March 2026CVE-2023-43000Multiple ProductsApple Multiple products Use-After-Free Vulnerability
- 5 March 2026CVE-2023-41974iOS and iPadOSApple iOS and iPadOS Use-After-Free Vulnerability
- 5 March 2026CVE-2021-30952Multiple ProductsApple Multiple Products Integer Overflow or Wraparound Vulnerability
- 12 February 2026CVE-2026-20700Multiple ProductsApple Multiple Buffer Overflow Vulnerability
- 15 December 2025CVE-2025-43529Multiple ProductsApple Multiple Products Use-After-Free WebKit Vulnerability
- 20 October 2025CVE-2022-48503Multiple ProductsApple Multiple Products Unspecified Vulnerability
- 21 August 2025CVE-2025-43300iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
- 16 June 2025CVE-2025-43200Multiple ProductsApple Multiple Products Unspecified Vulnerability
- 17 April 2025CVE-2025-31201Multiple ProductsApple Multiple Products Arbitrary Read and Write Vulnerability
- 17 April 2025CVE-2025-31200Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
- 13 March 2025CVE-2025-24201Multiple ProductsApple Multiple Products WebKit Out-of-Bounds Write Vulnerability
- 12 February 2025CVE-2025-24200iOS and iPadOSApple iOS and iPadOS Incorrect Authorization Vulnerability
- 29 January 2025CVE-2025-24085Multiple ProductsApple Multiple Products Use-After-Free Vulnerability
- 21 November 2024CVE-2024-44309Multiple ProductsApple Multiple Products Cross-Site Scripting (XSS) Vulnerability
- 21 November 2024CVE-2024-44308Multiple ProductsApple Multiple Products Code Execution Vulnerability
- 6 March 2024CVE-2024-23296Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
- 6 March 2024CVE-2024-23225Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
- 31 January 2024CVE-2022-48618Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
- 23 January 2024CVE-2024-23222Multiple ProductsApple Multiple Products WebKit Type Confusion Vulnerability
- 8 January 2024CVE-2023-41990Multiple ProductsApple Multiple Products Code Execution Vulnerability
- 4 December 2023CVE-2023-42917Multiple ProductsApple Multiple Products WebKit Memory Corruption Vulnerability
- 4 December 2023CVE-2023-42916Multiple ProductsApple Multiple Products WebKit Out-of-Bounds Read Vulnerability
- 5 October 2023CVE-2023-42824iOS and iPadOSApple iOS and iPadOS Kernel Privilege Escalation Vulnerability
- 25 September 2023CVE-2023-41993Multiple ProductsApple Multiple Products WebKit Code Execution Vulnerability
- 25 September 2023CVE-2023-41992Multiple ProductsApple Multiple Products Kernel Privilege Escalation Vulnerability
- 25 September 2023CVE-2023-41991Multiple ProductsApple Multiple Products Improper Certificate Validation Vulnerability
- 11 September 2023CVE-2023-41064iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability
- 11 September 2023CVE-2023-41061iOS, iPadOS, and watchOSApple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability
- 26 July 2023CVE-2023-38606Multiple ProductsApple Multiple Products Kernel Unspecified Vulnerability
- 13 July 2023CVE-2023-37450Multiple ProductsApple Multiple Products WebKit Code Execution Vulnerability
- 23 June 2023CVE-2023-32439Multiple ProductsApple Multiple Products WebKit Type Confusion Vulnerability
- 23 June 2023CVE-2023-32435Multiple ProductsApple Multiple Products WebKit Memory Corruption Vulnerability
- 23 June 2023CVE-2023-32434Multiple ProductsApple Multiple Products Integer Overflow Vulnerability
- 22 May 2023CVE-2023-32409Multiple ProductsApple Multiple Products WebKit Sandbox Escape Vulnerability
- 22 May 2023CVE-2023-32373Multiple ProductsApple Multiple Products WebKit Use-After-Free Vulnerability
- 22 May 2023CVE-2023-28204Multiple ProductsApple Multiple Products WebKit Out-of-Bounds Read Vulnerability
- 17 April 2023CVE-2019-8526macOSApple macOS Use-After-Free Vulnerability
- 10 April 2023CVE-2023-28206iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability
- 10 April 2023CVE-2023-28205Multiple ProductsApple Multiple Products WebKit Use-After-Free Vulnerability
- 30 March 2023CVE-2021-30900iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
- 14 February 2023CVE-2023-23529Multiple ProductsApple Multiple Products WebKit Type Confusion Vulnerability
- 14 December 2022CVE-2022-42856iOSApple iOS Type Confusion Vulnerability
- 25 October 2022CVE-2022-42827iOS and iPadOSApple iOS and iPadOS Out-of-Bounds Write Vulnerability
- 14 September 2022CVE-2022-32917iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Remote Code Execution Vulnerability
- 8 September 2022CVE-2020-9934iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Input Validation Vulnerability
- 25 August 2022CVE-2021-31010iOS, macOS, watchOSApple iOS, macOS, watchOS Sandbox Bypass Vulnerability
- 18 August 2022CVE-2022-32894iOS and macOSApple iOS and macOS Out-of-Bounds Write Vulnerability
- 18 August 2022CVE-2022-32893iOS and macOSApple iOS and macOS Out-of-Bounds Write Vulnerability
- 27 June 2022CVE-2021-30983iOS and iPadOSApple iOS and iPadOS Buffer Overflow Vulnerability
- 27 June 2022CVE-2020-9907Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
- 27 June 2022CVE-2020-3837Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
- 27 June 2022CVE-2019-8605Multiple ProductsApple Multiple Products Use-After-Free Vulnerability
- 27 June 2022CVE-2018-4344Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
- 24 May 2022CVE-2016-4657iOSApple iOS Webkit Memory Corruption Vulnerability
- 24 May 2022CVE-2016-4656iOSApple iOS Memory Corruption Vulnerability
- 24 May 2022CVE-2016-4655iOSApple iOS Information Disclosure Vulnerability
- 23 May 2022CVE-2021-30883Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
- 23 May 2022CVE-2019-7287iOSApple iOS Memory Corruption Vulnerability
- 23 May 2022CVE-2019-7286Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
- 4 May 2022CVE-2021-1789Multiple ProductsApple Multiple Products Type Confusion Vulnerability
- 4 May 2022CVE-2019-8506Multiple ProductsApple Multiple Products Type Confusion Vulnerability
- 4 April 2022CVE-2022-22675macOSApple macOS Out-of-Bounds Write Vulnerability
- 4 April 2022CVE-2022-22674macOSApple macOS Out-of-Bounds Read Vulnerability
- 11 February 2022CVE-2022-22620iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability
- 10 February 2022CVE-2015-1130OS XApple OS X Authentication Bypass Vulnerability
- 10 February 2022CVE-2014-4404OS XApple OS X Heap-Based Buffer Overflow Vulnerability
- 28 January 2022CVE-2022-22587iOS and macOSApple Memory Corruption Vulnerability
- 3 November 2021CVE-2021-30869iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Type Confusion Vulnerability
- 3 November 2021CVE-2021-30860Multiple ProductsApple Multiple Products Integer Overflow Vulnerability
- 3 November 2021CVE-2021-30858iOS, iPadOS, and macOSApple iOS, iPadOS, macOS Use-After-Free Vulnerability
- 3 November 2021CVE-2021-30807Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
- 3 November 2021CVE-2021-30762iOSApple iOS WebKit Use-After-Free Vulnerability
- 3 November 2021CVE-2021-30761iOSApple iOS WebKit Memory Corruption Vulnerability
- 3 November 2021CVE-2021-30713macOSApple macOS Unspecified Vulnerability
- 3 November 2021CVE-2021-30666iOSApple iOS WebKit Buffer Overflow Vulnerability
- 3 November 2021CVE-2021-30665Multiple ProductsApple Multiple Products WebKit Memory Corruption Vulnerability
- 3 November 2021CVE-2021-30663Multiple ProductsApple Multiple Products WebKit Integer Overflow Vulnerability
- 3 November 2021CVE-2021-30661Multiple ProductsApple Multiple Products WebKit Storage Use-After-Free Vulnerability
- 3 November 2021CVE-2021-30657macOSApple macOS Unspecified Vulnerability
- 3 November 2021CVE-2021-1879iOS, iPadOS, and watchOSApple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability
- 3 November 2021CVE-2021-1871iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
- 3 November 2021CVE-2021-1870iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
- 3 November 2021CVE-2021-1782Multiple ProductsApple Multiple Products Race Condition Vulnerability
- 3 November 2021CVE-2020-9859Multiple ProductsApple Multiple Products Code Execution Vulnerability
- 3 November 2021CVE-2020-9819iOS, iPadOS, and watchOSApple iOS, iPadOS, and watchOS Memory Corruption Vulnerability
- 3 November 2021CVE-2020-9818iOS, iPadOS, and watchOSApple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability
- 3 November 2021CVE-2020-27950Multiple ProductsApple Multiple Products Memory Initialization Vulnerability
- 3 November 2021CVE-2020-27932Multiple ProductsApple Multiple Products Type Confusion Vulnerability
- 3 November 2021CVE-2020-27930Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
- 3 November 2021CVE-2019-6223iOS and macOSApple iOS and macOS Group Facetime Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, Apple included.