Apple vulnerabilities attackers have used

Every Apple entry in CISA KEV

1. CVE-2024-27834

   Added Nov 4, 2026 · due Nov 18, 2026

   Apple Multiple Products Improper Authentication Vulnerability

   Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.

2. CVE-2026-86950

   Added Sep 29, 2026 · due Oct 13, 2026

   Apple Multiple Products Out-of-Bounds Write Vulnerability

   Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution.

3. CVE-2026-65400

   Added Aug 18, 2026 · due Aug 21, 2026

   Apple macOS Improper Authentication Vulnerability

   Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials.

4. CVE-2025-43520

   Added Mar 20, 2026 · due Apr 3, 2026

   Apple Multiple Products Classic Buffer Overflow Vulnerability

   Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain a classic buffer overflow vulnerability which could allow a malicious application to cause unexpected system termination or write kernel memory.

5. CVE-2025-43510

   Added Mar 20, 2026 · due Apr 3, 2026

   Apple Multiple Products Improper Locking Vulnerability

   Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes.

6. CVE-2025-31277

   Added Mar 20, 2026 · due Apr 3, 2026

   Apple Multiple Products Buffer Overflow Vulnerability

   Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could allow the processing of maliciously crafted web content which may lead to memory corruption.

7. CVE-2023-43000

   Added Mar 5, 2026 · due Mar 26, 2026

   Apple Multiple products Use-After-Free Vulnerability

   Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory corruption.

8. CVE-2023-41974

   Added Mar 5, 2026 · due Mar 26, 2026

   Apple iOS and iPadOS Use-After-Free Vulnerability

   Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges.

9. CVE-2021-30952

   Added Mar 5, 2026 · due Mar 26, 2026

   Apple Multiple Products Integer Overflow or Wraparound Vulnerability

   Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.

10. CVE-2026-20700

    Added Feb 12, 2026 · due Mar 5, 2026

    Apple Multiple Buffer Overflow Vulnerability

    Apple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow an attacker with memory write the capability to execute arbitrary code.

11. CVE-2025-43529

    Added Dec 15, 2025 · due Jan 5, 2026

    Apple Multiple Products Use-After-Free WebKit Vulnerability

    Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit…

12. CVE-2022-48503

    Added Oct 20, 2025 · due Nov 10, 2025

    Apple Multiple Products Unspecified Vulnerability

    Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead to arbitrary code execution. The impacted product could be end-of-life (EoL) and/or end-of-service…

13. CVE-2025-43300

    Added Aug 21, 2025 · due Sep 11, 2025

    Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

    Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework.

14. CVE-2025-43200

    Added Jun 16, 2025 · due Jul 7, 2025

    Apple Multiple Products Unspecified Vulnerability

    Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link.

15. CVE-2025-31201

    Added Apr 17, 2025 · due May 8, 2025

    Apple Multiple Products Arbitrary Read and Write Vulnerability

    Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication.

16. CVE-2025-31200

    Added Apr 17, 2025 · due May 8, 2025

    Apple Multiple Products Memory Corruption Vulnerability

    Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execution when processing an audio stream in a maliciously crafted media file.

17. CVE-2025-24201

    Added Mar 13, 2025 · due Apr 3, 2025

    Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

    Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that…

18. CVE-2025-24200

    Added Feb 12, 2025 · due Mar 5, 2025

    Apple iOS and iPadOS Incorrect Authorization Vulnerability

    Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a locked device.

19. CVE-2025-24085

    Added Jan 29, 2025 · due Feb 19, 2025

    Apple Multiple Products Use-After-Free Vulnerability

    Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privileges.

20. CVE-2024-44309

    Added Nov 21, 2024 · due Dec 12, 2024

    Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

    Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting (XSS) attack.

21. CVE-2024-44308

    Added Nov 21, 2024 · due Dec 12, 2024

    Apple Multiple Products Code Execution Vulnerability

    Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to arbitrary code execution.

22. CVE-2024-23296

    Added Mar 6, 2024 · due Mar 27, 2024

    Apple Multiple Products Memory Corruption Vulnerability

    Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.

23. CVE-2024-23225

    Added Mar 6, 2024 · due Mar 27, 2024

    Apple Multiple Products Memory Corruption Vulnerability

    Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS kernel contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.

24. CVE-2022-48618

    Added Jan 31, 2024 · due Feb 21, 2024

    Apple Multiple Products Memory Corruption Vulnerability

    Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check/time-of-use (TOCTOU) memory corruption vulnerability that allows an attacker with read and write capabilities to bypass Pointer Authentication.

25. CVE-2024-23222

    Added Jan 23, 2024 · due Feb 13, 2024

    Apple Multiple Products WebKit Type Confusion Vulnerability

    Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including…

26. CVE-2023-41990

    Added Jan 8, 2024 · due Jan 29, 2024

    Apple Multiple Products Code Execution Vulnerability

    Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file.

27. CVE-2023-42917

    Added Dec 4, 2023 · due Dec 25, 2023

    Apple Multiple Products WebKit Memory Corruption Vulnerability

    Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but…

28. CVE-2023-42916

    Added Dec 4, 2023 · due Dec 25, 2023

    Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

    Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit…

29. CVE-2023-42824

    Added Oct 5, 2023 · due Oct 26, 2023

    Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability

    Apple iOS and iPadOS contain an unspecified vulnerability that allows for local privilege escalation.

30. CVE-2023-41993

    Added Sep 25, 2023 · due Oct 16, 2023

    Apple Multiple Products WebKit Code Execution Vulnerability

    Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not…

31. CVE-2023-41992

    Added Sep 25, 2023 · due Oct 16, 2023

    Apple Multiple Products Kernel Privilege Escalation Vulnerability

    Apple iOS, iPadOS, macOS, and watchOS contain an unspecified vulnerability that allows for local privilege escalation.

32. CVE-2023-41991

    Added Sep 25, 2023 · due Oct 16, 2023

    Apple Multiple Products Improper Certificate Validation Vulnerability

    Apple iOS, iPadOS, macOS, and watchOS contain an improper certificate validation vulnerability that can allow a malicious app to bypass signature validation.

33. CVE-2023-41064

    Added Sep 11, 2023 · due Oct 2, 2023

    Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

    Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061.

34. CVE-2023-41061

    Added Sep 11, 2023 · due Oct 2, 2023

    Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability

    Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously crafted attachment may result in code execution. This vulnerability was chained with CVE-2023-41064.

35. CVE-2023-38606

    Added Jul 26, 2023 · due Aug 16, 2023

    Apple Multiple Products Kernel Unspecified Vulnerability

    Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability allowing an app to modify a sensitive kernel state.

36. CVE-2023-37450

    Added Jul 13, 2023 · due Aug 3, 2023

    Apple Multiple Products WebKit Code Execution Vulnerability

    Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not…

37. CVE-2023-32439

    Added Jun 23, 2023 · due Jul 14, 2023

    Apple Multiple Products WebKit Type Confusion Vulnerability

    Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but…

38. CVE-2023-32435

    Added Jun 23, 2023 · due Jul 14, 2023

    Apple Multiple Products WebKit Memory Corruption Vulnerability

    Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but…

39. CVE-2023-32434

    Added Jun 23, 2023 · due Jul 14, 2023

    Apple Multiple Products Integer Overflow Vulnerability

    Apple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with kernel privileges.

40. CVE-2023-32409

    Added May 22, 2023 · due Jun 12, 2023

    Apple Multiple Products WebKit Sandbox Escape Vulnerability

    Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an unspecified vulnerability that can allow a remote attacker to break out of the Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit…

41. CVE-2023-32373

    Added May 22, 2023 · due Jun 12, 2023

    Apple Multiple Products WebKit Use-After-Free Vulnerability

    Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit…

42. CVE-2023-28204

    Added May 22, 2023 · due Jun 12, 2023

    Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

    Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers…

43. CVE-2019-8526

    Added Apr 17, 2023 · due May 8, 2023

    Apple macOS Use-After-Free Vulnerability

    Apple macOS contains a use-after-free vulnerability that could allow for privilege escalation.

44. CVE-2023-28206

    Added Apr 10, 2023 · due May 1, 2023

    Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

    Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kernel privileges.

45. CVE-2023-28205

    Added Apr 10, 2023 · due May 1, 2023

    Apple Multiple Products WebKit Use-After-Free Vulnerability

    Apple iOS, iPadOS, macOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but…

46. CVE-2021-30900

    Added Mar 30, 2023 · due Apr 20, 2023

    Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

    Apple GPU drivers, included in iOS, iPadOS, and macOS, contain an out-of-bounds write vulnerability that may allow a malicious application to execute code with kernel privileges.

47. CVE-2023-23529

    Added Feb 14, 2023 · due Mar 7, 2023

    Apple Multiple Products WebKit Type Confusion Vulnerability

    Apple iOS, MacOS, Safari and iPadOS WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not…

48. CVE-2022-42856

    Added Dec 14, 2022 · due Jan 4, 2023

    Apple iOS Type Confusion Vulnerability

    Apple iOS contains a type confusion vulnerability when processing maliciously crafted web content leading to code execution.

49. CVE-2022-42827

    Added Oct 25, 2022 · due Nov 15, 2022

    Apple iOS and iPadOS Out-of-Bounds Write Vulnerability

    Apple iOS and iPadOS kernel contain an out-of-bounds write vulnerability which can allow an application to perform code execution with kernel privileges.

50. CVE-2022-32917

    Added Sep 14, 2022 · due Oct 5, 2022

    Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

    Apple kernel, which is included in iOS, iPadOS, and macOS, contains an unspecified vulnerability where an application may be able to execute code with kernel privileges.

51. CVE-2020-9934

    Added Sep 8, 2022 · due Sep 29, 2022

    Apple iOS, iPadOS, and macOS Input Validation Vulnerability

    Apple iOS, iPadOS, and macOS contain an unspecified vulnerability involving input validation which can allow a local attacker to view sensitive user information.

52. CVE-2021-31010

    Added Aug 25, 2022 · due Sep 15, 2022

    Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

    In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions.

53. CVE-2022-32894

    Added Aug 18, 2022 · due Sep 8, 2022

    Apple iOS and macOS Out-of-Bounds Write Vulnerability

    Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow an application to execute code with kernel privileges.

54. CVE-2022-32893

    Added Aug 18, 2022 · due Sep 8, 2022

    Apple iOS and macOS Out-of-Bounds Write Vulnerability

    Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.

55. CVE-2021-30983

    Added Jun 27, 2022 · due Jul 18, 2022

    Apple iOS and iPadOS Buffer Overflow Vulnerability

    Apple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges.

56. CVE-2020-9907

    Added Jun 27, 2022 · due Jul 18, 2022

    Apple Multiple Products Memory Corruption Vulnerability

    Apple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.

57. CVE-2020-3837

    Added Jun 27, 2022 · due Jul 18, 2022

    Apple Multiple Products Memory Corruption Vulnerability

    Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.

58. CVE-2019-8605

    Added Jun 27, 2022 · due Jul 18, 2022

    Apple Multiple Products Use-After-Free Vulnerability

    A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system privileges.

59. CVE-2018-4344

    Added Jun 27, 2022 · due Jul 18, 2022

    Apple Multiple Products Memory Corruption Vulnerability

    Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution.

60. CVE-2016-4657

    Added May 24, 2022 · due Jun 14, 2022

    Apple iOS Webkit Memory Corruption Vulnerability

    Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service (DoS) via a crafted web site. This vulnerability could impact HTML parsers that use WebKit, including but…

61. CVE-2016-4656

    Added May 24, 2022 · due Jun 14, 2022

    Apple iOS Memory Corruption Vulnerability

    A memory corruption vulnerability in Apple iOS kernel allows attackers to execute code in a privileged context or cause a denial-of-service (DoS) via a crafted application.

62. CVE-2016-4655

    Added May 24, 2022 · due Jun 14, 2022

    Apple iOS Information Disclosure Vulnerability

    The Apple iOS kernel allows attackers to obtain sensitive information from memory via a crafted application.

63. CVE-2021-30883

    Added May 23, 2022 · due Jun 13, 2022

    Apple Multiple Products Memory Corruption Vulnerability

    Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for remote code execution.

64. CVE-2019-7287

    Added May 23, 2022 · due Jun 13, 2022

    Apple iOS Memory Corruption Vulnerability

    Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution.

65. CVE-2019-7286

    Added May 23, 2022 · due Jun 13, 2022

    Apple Multiple Products Memory Corruption Vulnerability

    Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation.

66. CVE-2021-1789

    Added May 4, 2022 · due May 25, 2022

    Apple Multiple Products Type Confusion Vulnerability

    A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.

67. CVE-2019-8506

    Added May 4, 2022 · due May 25, 2022

    Apple Multiple Products Type Confusion Vulnerability

    A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.

68. CVE-2022-22675

    Added Apr 4, 2022 · due Apr 25, 2022

    Apple macOS Out-of-Bounds Write Vulnerability

    macOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code with kernel privileges.

69. CVE-2022-22674

    Added Apr 4, 2022 · due Apr 25, 2022

    Apple macOS Out-of-Bounds Read Vulnerability

    macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory.

70. CVE-2022-22620

    Added Feb 11, 2022 · due Feb 25, 2022

    Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

    Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not…

71. CVE-2015-1130

    Added Feb 10, 2022 · due Aug 10, 2022

    Apple OS X Authentication Bypass Vulnerability

    The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges.

72. CVE-2014-4404

    Added Feb 10, 2022 · due Aug 10, 2022

    Apple OS X Heap-Based Buffer Overflow Vulnerability

    Heap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute arbitrary code in a privileged context.

73. CVE-2022-22587

    Added Jan 28, 2022 · due Feb 11, 2022

    Apple Memory Corruption Vulnerability

    Apple IOMobileFrameBuffer contains a memory corruption vulnerability which can allow a malicious application to execute arbitrary code with kernel privileges.

74. CVE-2021-30869

    Added Nov 3, 2021 · due Nov 17, 2021

    Apple iOS, iPadOS, and macOS Type Confusion Vulnerability

    Apple iOS, iPadOS, and macOS contain a type confusion vulnerability in the XNU which may allow a malicious application to execute code with kernel privileges.

75. CVE-2021-30860

    Added Nov 3, 2021 · due Nov 17, 2021

    Apple Multiple Products Integer Overflow Vulnerability

    Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.

76. CVE-2021-30858

    Added Nov 3, 2021 · due Nov 17, 2021

    Apple iOS, iPadOS, macOS Use-After-Free Vulnerability

    Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not…

77. CVE-2021-30807

    Added Nov 3, 2021 · due Nov 17, 2021

    Apple Multiple Products Memory Corruption Vulnerability

    Apple iOS, iPadOS, macOS, and watchOS IOMobileFrameBuffer contain a memory corruption vulnerability which may allow an application to execute code with kernel privileges.

78. CVE-2021-30762

    Added Nov 3, 2021 · due Nov 17, 2021

    Apple iOS WebKit Use-After-Free Vulnerability

    Apple iOS WebKit contains a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari…

79. CVE-2021-30761

    Added Nov 3, 2021 · due Nov 17, 2021

    Apple iOS WebKit Memory Corruption Vulnerability

    Apple iOS WebKit contains a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple…

80. CVE-2021-30713

    Added Nov 3, 2021 · due Nov 17, 2021

    Apple macOS Unspecified Vulnerability

    Apple macOS Transparency, Consent, and Control (TCC) contains an unspecified permissions issue which may allow a malicious application to bypass privacy preferences.

81. CVE-2021-30666

    Added Nov 3, 2021 · due Nov 17, 2021

    Apple iOS WebKit Buffer Overflow Vulnerability

    Apple iOS WebKit contains a buffer-overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari…

82. CVE-2021-30665

    Added Nov 3, 2021 · due Nov 17, 2021

    Apple Multiple Products WebKit Memory Corruption Vulnerability

    Apple iOS, iPadOS, macOS, watchOS, and tvOS WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit…

83. CVE-2021-30663

    Added Nov 3, 2021 · due Nov 17, 2021

    Apple Multiple Products WebKit Integer Overflow Vulnerability

    Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain an integer overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit…

84. CVE-2021-30661

    Added Nov 3, 2021 · due Nov 17, 2021

    Apple Multiple Products WebKit Storage Use-After-Free Vulnerability

    Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use…

85. CVE-2021-30657

    Added Nov 3, 2021 · due Nov 17, 2021

    Apple macOS Unspecified Vulnerability

    Apple macOS contains an unspecified logic issue in System Preferences that may allow a malicious application to bypass Gatekeeper checks.

86. CVE-2021-1879

    Added Nov 3, 2021 · due Nov 17, 2021

    Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability

    Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting (XSS) when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit…

87. CVE-2021-1871

    Added Nov 3, 2021 · due Nov 17, 2021

    Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

    Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and…

88. CVE-2021-1870

    Added Nov 3, 2021 · due Nov 17, 2021

    Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

    Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and…

89. CVE-2021-1782

    Added Nov 3, 2021 · due Nov 17, 2021

    Apple Multiple Products Race Condition Vulnerability

    Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges.

90. CVE-2020-9859

    Added Nov 3, 2021 · due May 3, 2022

    Apple Multiple Products Code Execution Vulnerability

    Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel privileges.

91. CVE-2020-9819

    Added Nov 3, 2021 · due May 3, 2022

    Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability

    Apple iOS, iPadOS, and watchOS Mail contains a memory corruption vulnerability that may allow heap corruption when processing a maliciously crafted mail message.

92. CVE-2020-9818

    Added Nov 3, 2021 · due May 3, 2022

    Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability

    Apple iOS, iPadOS, and watchOS Mail contains an out-of-bounds write vulnerability which may allow memory modification or application termination when processing a maliciously crafted mail message.

93. CVE-2020-27950

    Added Nov 3, 2021 · due May 3, 2022

    Apple Multiple Products Memory Initialization Vulnerability

    Apple iOS, iPadOS, macOS, and watchOS contain a memory initialization vulnerability that may allow a malicious application to disclose kernel memory.

94. CVE-2020-27932

    Added Nov 3, 2021 · due May 3, 2022

    Apple Multiple Products Type Confusion Vulnerability

    Apple iOS, iPadOS, macOS, and watchOS contain a type confusion vulnerability that may allow a malicious application to execute code with kernel privileges.

95. CVE-2020-27930

    Added Nov 3, 2021 · due May 3, 2022

    Apple Multiple Products Memory Corruption Vulnerability

    Apple iOS, iPadOS, macOS, and watchOS FontParser contain a memory corruption vulnerability which may allow for code execution when processing maliciously crafted front.

96. CVE-2019-6223

    Added Nov 3, 2021 · due May 3, 2022

    Apple iOS and macOS Group Facetime Vulnerability

    Apple iOS and macOS Group FaceTime contains an unspecified vulnerability where the call initiator can cause the recipient's Apple device to answer unknowingly or without user interaction.

Related

• All vendors in CISA KEV

  Ranked by how many exploited vulnerabilities each has.

• Latest CVEs this week

  Critical and High CVEs from the last 7 days, with KEV and EPSS.

• Vulnerability watch

  A briefing and a fix pull request when an advisory hits your dependencies.