Exploited vulnerabilities

Apple

96 Apple vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue96
Last 12 months11
In ransomware campaigns0
Last addition4 November 2026

The vulnerabilities96

  1. 4 November 2026CVE-2024-27834Multiple ProductsApple Multiple Products Improper Authentication Vulnerability
  2. 29 September 2026CVE-2026-86950Multiple ProductsApple Multiple Products Out-of-Bounds Write Vulnerability
  3. 18 August 2026CVE-2026-65400macOSApple macOS Improper Authentication Vulnerability
  4. 20 March 2026CVE-2025-43520Multiple ProductsApple Multiple Products Classic Buffer Overflow Vulnerability
  5. 20 March 2026CVE-2025-43510Multiple ProductsApple Multiple Products Improper Locking Vulnerability
  6. 20 March 2026CVE-2025-31277Multiple ProductsApple Multiple Products Buffer Overflow Vulnerability
  7. 5 March 2026CVE-2023-43000Multiple ProductsApple Multiple products Use-After-Free Vulnerability
  8. 5 March 2026CVE-2023-41974iOS and iPadOSApple iOS and iPadOS Use-After-Free Vulnerability
  9. 5 March 2026CVE-2021-30952Multiple ProductsApple Multiple Products Integer Overflow or Wraparound Vulnerability
  10. 12 February 2026CVE-2026-20700Multiple ProductsApple Multiple Buffer Overflow Vulnerability
  11. 15 December 2025CVE-2025-43529Multiple ProductsApple Multiple Products Use-After-Free WebKit Vulnerability
  12. 20 October 2025CVE-2022-48503Multiple ProductsApple Multiple Products Unspecified Vulnerability
  13. 21 August 2025CVE-2025-43300iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
  14. 16 June 2025CVE-2025-43200Multiple ProductsApple Multiple Products Unspecified Vulnerability
  15. 17 April 2025CVE-2025-31201Multiple ProductsApple Multiple Products Arbitrary Read and Write Vulnerability
  16. 17 April 2025CVE-2025-31200Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
  17. 13 March 2025CVE-2025-24201Multiple ProductsApple Multiple Products WebKit Out-of-Bounds Write Vulnerability
  18. 12 February 2025CVE-2025-24200iOS and iPadOSApple iOS and iPadOS Incorrect Authorization Vulnerability
  19. 29 January 2025CVE-2025-24085Multiple ProductsApple Multiple Products Use-After-Free Vulnerability
  20. 21 November 2024CVE-2024-44309Multiple ProductsApple Multiple Products Cross-Site Scripting (XSS) Vulnerability
  21. 21 November 2024CVE-2024-44308Multiple ProductsApple Multiple Products Code Execution Vulnerability
  22. 6 March 2024CVE-2024-23296Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
  23. 6 March 2024CVE-2024-23225Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
  24. 31 January 2024CVE-2022-48618Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
  25. 23 January 2024CVE-2024-23222Multiple ProductsApple Multiple Products WebKit Type Confusion Vulnerability
  26. 8 January 2024CVE-2023-41990Multiple ProductsApple Multiple Products Code Execution Vulnerability
  27. 4 December 2023CVE-2023-42917Multiple ProductsApple Multiple Products WebKit Memory Corruption Vulnerability
  28. 4 December 2023CVE-2023-42916Multiple ProductsApple Multiple Products WebKit Out-of-Bounds Read Vulnerability
  29. 5 October 2023CVE-2023-42824iOS and iPadOSApple iOS and iPadOS Kernel Privilege Escalation Vulnerability
  30. 25 September 2023CVE-2023-41993Multiple ProductsApple Multiple Products WebKit Code Execution Vulnerability
  31. 25 September 2023CVE-2023-41992Multiple ProductsApple Multiple Products Kernel Privilege Escalation Vulnerability
  32. 25 September 2023CVE-2023-41991Multiple ProductsApple Multiple Products Improper Certificate Validation Vulnerability
  33. 11 September 2023CVE-2023-41064iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability
  34. 11 September 2023CVE-2023-41061iOS, iPadOS, and watchOSApple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability
  35. 26 July 2023CVE-2023-38606Multiple ProductsApple Multiple Products Kernel Unspecified Vulnerability
  36. 13 July 2023CVE-2023-37450Multiple ProductsApple Multiple Products WebKit Code Execution Vulnerability
  37. 23 June 2023CVE-2023-32439Multiple ProductsApple Multiple Products WebKit Type Confusion Vulnerability
  38. 23 June 2023CVE-2023-32435Multiple ProductsApple Multiple Products WebKit Memory Corruption Vulnerability
  39. 23 June 2023CVE-2023-32434Multiple ProductsApple Multiple Products Integer Overflow Vulnerability
  40. 22 May 2023CVE-2023-32409Multiple ProductsApple Multiple Products WebKit Sandbox Escape Vulnerability
  41. 22 May 2023CVE-2023-32373Multiple ProductsApple Multiple Products WebKit Use-After-Free Vulnerability
  42. 22 May 2023CVE-2023-28204Multiple ProductsApple Multiple Products WebKit Out-of-Bounds Read Vulnerability
  43. 17 April 2023CVE-2019-8526macOSApple macOS Use-After-Free Vulnerability
  44. 10 April 2023CVE-2023-28206iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability
  45. 10 April 2023CVE-2023-28205Multiple ProductsApple Multiple Products WebKit Use-After-Free Vulnerability
  46. 30 March 2023CVE-2021-30900iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
  47. 14 February 2023CVE-2023-23529Multiple ProductsApple Multiple Products WebKit Type Confusion Vulnerability
  48. 14 December 2022CVE-2022-42856iOSApple iOS Type Confusion Vulnerability
  49. 25 October 2022CVE-2022-42827iOS and iPadOSApple iOS and iPadOS Out-of-Bounds Write Vulnerability
  50. 14 September 2022CVE-2022-32917iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Remote Code Execution Vulnerability
  51. 8 September 2022CVE-2020-9934iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Input Validation Vulnerability
  52. 25 August 2022CVE-2021-31010iOS, macOS, watchOSApple iOS, macOS, watchOS Sandbox Bypass Vulnerability
  53. 18 August 2022CVE-2022-32894iOS and macOSApple iOS and macOS Out-of-Bounds Write Vulnerability
  54. 18 August 2022CVE-2022-32893iOS and macOSApple iOS and macOS Out-of-Bounds Write Vulnerability
  55. 27 June 2022CVE-2021-30983iOS and iPadOSApple iOS and iPadOS Buffer Overflow Vulnerability
  56. 27 June 2022CVE-2020-9907Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
  57. 27 June 2022CVE-2020-3837Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
  58. 27 June 2022CVE-2019-8605Multiple ProductsApple Multiple Products Use-After-Free Vulnerability
  59. 27 June 2022CVE-2018-4344Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
  60. 24 May 2022CVE-2016-4657iOSApple iOS Webkit Memory Corruption Vulnerability
  61. 24 May 2022CVE-2016-4656iOSApple iOS Memory Corruption Vulnerability
  62. 24 May 2022CVE-2016-4655iOSApple iOS Information Disclosure Vulnerability
  63. 23 May 2022CVE-2021-30883Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
  64. 23 May 2022CVE-2019-7287iOSApple iOS Memory Corruption Vulnerability
  65. 23 May 2022CVE-2019-7286Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
  66. 4 May 2022CVE-2021-1789Multiple ProductsApple Multiple Products Type Confusion Vulnerability
  67. 4 May 2022CVE-2019-8506Multiple ProductsApple Multiple Products Type Confusion Vulnerability
  68. 4 April 2022CVE-2022-22675macOSApple macOS Out-of-Bounds Write Vulnerability
  69. 4 April 2022CVE-2022-22674macOSApple macOS Out-of-Bounds Read Vulnerability
  70. 11 February 2022CVE-2022-22620iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability
  71. 10 February 2022CVE-2015-1130OS XApple OS X Authentication Bypass Vulnerability
  72. 10 February 2022CVE-2014-4404OS XApple OS X Heap-Based Buffer Overflow Vulnerability
  73. 28 January 2022CVE-2022-22587iOS and macOSApple Memory Corruption Vulnerability
  74. 3 November 2021CVE-2021-30869iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Type Confusion Vulnerability
  75. 3 November 2021CVE-2021-30860Multiple ProductsApple Multiple Products Integer Overflow Vulnerability
  76. 3 November 2021CVE-2021-30858iOS, iPadOS, and macOSApple iOS, iPadOS, macOS Use-After-Free Vulnerability
  77. 3 November 2021CVE-2021-30807Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
  78. 3 November 2021CVE-2021-30762iOSApple iOS WebKit Use-After-Free Vulnerability
  79. 3 November 2021CVE-2021-30761iOSApple iOS WebKit Memory Corruption Vulnerability
  80. 3 November 2021CVE-2021-30713macOSApple macOS Unspecified Vulnerability
  81. 3 November 2021CVE-2021-30666iOSApple iOS WebKit Buffer Overflow Vulnerability
  82. 3 November 2021CVE-2021-30665Multiple ProductsApple Multiple Products WebKit Memory Corruption Vulnerability
  83. 3 November 2021CVE-2021-30663Multiple ProductsApple Multiple Products WebKit Integer Overflow Vulnerability
  84. 3 November 2021CVE-2021-30661Multiple ProductsApple Multiple Products WebKit Storage Use-After-Free Vulnerability
  85. 3 November 2021CVE-2021-30657macOSApple macOS Unspecified Vulnerability
  86. 3 November 2021CVE-2021-1879iOS, iPadOS, and watchOSApple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability
  87. 3 November 2021CVE-2021-1871iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
  88. 3 November 2021CVE-2021-1870iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
  89. 3 November 2021CVE-2021-1782Multiple ProductsApple Multiple Products Race Condition Vulnerability
  90. 3 November 2021CVE-2020-9859Multiple ProductsApple Multiple Products Code Execution Vulnerability
  91. 3 November 2021CVE-2020-9819iOS, iPadOS, and watchOSApple iOS, iPadOS, and watchOS Memory Corruption Vulnerability
  92. 3 November 2021CVE-2020-9818iOS, iPadOS, and watchOSApple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability
  93. 3 November 2021CVE-2020-27950Multiple ProductsApple Multiple Products Memory Initialization Vulnerability
  94. 3 November 2021CVE-2020-27932Multiple ProductsApple Multiple Products Type Confusion Vulnerability
  95. 3 November 2021CVE-2020-27930Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
  96. 3 November 2021CVE-2019-6223iOS and macOSApple iOS and macOS Group Facetime Vulnerability

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, Apple included.

All vendorsThe catalogue on the CISA website