Apple: actively exploited vulnerabilities

Affected products

• Multiple Products54
• iOS, iPadOS, and macOS11
• iOS8
• macOS6
• iOS and iPadOS5
• iOS and macOS4
• iOS, iPadOS, and watchOS4
• OS X2
• iOS, macOS, watchOS1

CERT-FR alerts and notices

Recent CERT-FR publications naming this vendor (alerts: immediate threat; notices: patches released). In French.

1. CERTFR-2015-ALE-009Jul 24 2015

   Vulnérabilité dans Apple Mac OS X (24 juillet 2015)

All exploited vulnerabilities

CISA KEV catalog, newest first: each entry corresponds to observed exploitation.

2026 9 vulnerabilities

1. CVE-2026-86950added Sep 29

   Apple Multiple Products Out-of-Bounds Write Vulnerability

   NVD entryCISA catalog

2. CVE-2026-65400added Aug 18

   Apple macOS Improper Authentication Vulnerability

   NVD entryCISA catalog

3. CVE-2025-43520added Mar 20

   Apple Multiple Products Classic Buffer Overflow Vulnerability

   NVD entryCISA catalog

4. CVE-2025-43510added Mar 20

   Apple Multiple Products Improper Locking Vulnerability

   NVD entryCISA catalog

5. CVE-2025-31277added Mar 20

   Apple Multiple Products Buffer Overflow Vulnerability

   NVD entryCISA catalog

6. CVE-2023-43000added Mar 5

   Apple Multiple products Use-After-Free Vulnerability

   NVD entryCISA catalog

7. CVE-2023-41974added Mar 5

   Apple iOS and iPadOS Use-After-Free Vulnerability

   NVD entryCISA catalog

8. CVE-2021-30952added Mar 5

   Apple Multiple Products Integer Overflow or Wraparound Vulnerability

   NVD entryCISA catalog

9. CVE-2026-20700added Feb 12

   Apple Multiple Buffer Overflow Vulnerability

   NVD entryCISA catalog

2025 9 vulnerabilities

1. CVE-2025-43529added Dec 15 2025

   Apple Multiple Products Use-After-Free WebKit Vulnerability

   NVD entryCISA catalog

2. CVE-2022-48503added Oct 20 2025

   Apple Multiple Products Unspecified Vulnerability

   NVD entryCISA catalog

3. CVE-2025-43300added Aug 21 2025

   Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

   NVD entryCISA catalog

4. CVE-2025-43200added Jun 16 2025

   Apple Multiple Products Unspecified Vulnerability

   NVD entryCISA catalog

5. CVE-2025-31201added Apr 17 2025

   Apple Multiple Products Arbitrary Read and Write Vulnerability

   NVD entryCISA catalog

6. CVE-2025-31200added Apr 17 2025

   Apple Multiple Products Memory Corruption Vulnerability

   NVD entryCISA catalog

7. CVE-2025-24201added Mar 13 2025

   Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

   NVD entryCISA catalog

8. CVE-2025-24200added Feb 12 2025

   Apple iOS and iPadOS Incorrect Authorization Vulnerability

   NVD entryCISA catalog

9. CVE-2025-24085added Jan 29 2025

   Apple Multiple Products Use-After-Free Vulnerability

   NVD entryCISA catalog

2024 7 vulnerabilities

1. CVE-2024-44309added Nov 21 2024

   Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

   NVD entryCISA catalog

2. CVE-2024-44308added Nov 21 2024

   Apple Multiple Products Code Execution Vulnerability

   NVD entryCISA catalog

3. CVE-2024-23296added Mar 6 2024

   Apple Multiple Products Memory Corruption Vulnerability

   NVD entryCISA catalog

4. CVE-2024-23225added Mar 6 2024

   Apple Multiple Products Memory Corruption Vulnerability

   NVD entryCISA catalog

5. CVE-2022-48618added Jan 31 2024

   Apple Multiple Products Memory Corruption Vulnerability

   NVD entryCISA catalog

6. CVE-2024-23222added Jan 23 2024

   Apple Multiple Products WebKit Type Confusion Vulnerability

   NVD entryCISA catalog

7. CVE-2023-41990added Jan 8 2024

   Apple Multiple Products Code Execution Vulnerability

   NVD entryCISA catalog

2023 21 vulnerabilities

1. CVE-2023-42917added Dec 4 2023

   Apple Multiple Products WebKit Memory Corruption Vulnerability

   NVD entryCISA catalog

2. CVE-2023-42916added Dec 4 2023

   Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

   NVD entryCISA catalog

3. CVE-2023-42824added Oct 5 2023

   Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability

   NVD entryCISA catalog

4. CVE-2023-41993added Sep 25 2023

   Apple Multiple Products WebKit Code Execution Vulnerability

   NVD entryCISA catalog

5. CVE-2023-41992added Sep 25 2023

   Apple Multiple Products Kernel Privilege Escalation Vulnerability

   NVD entryCISA catalog

6. CVE-2023-41991added Sep 25 2023

   Apple Multiple Products Improper Certificate Validation Vulnerability

   NVD entryCISA catalog

7. CVE-2023-41064added Sep 11 2023

   Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

   NVD entryCISA catalog

8. CVE-2023-41061added Sep 11 2023

   Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability

   NVD entryCISA catalog

9. CVE-2023-38606added Jul 26 2023

   Apple Multiple Products Kernel Unspecified Vulnerability

   NVD entryCISA catalog

10. CVE-2023-37450added Jul 13 2023

    Apple Multiple Products WebKit Code Execution Vulnerability

    NVD entryCISA catalog

11. CVE-2023-32439added Jun 23 2023

    Apple Multiple Products WebKit Type Confusion Vulnerability

    NVD entryCISA catalog

12. CVE-2023-32435added Jun 23 2023

    Apple Multiple Products WebKit Memory Corruption Vulnerability

    NVD entryCISA catalog

13. CVE-2023-32434added Jun 23 2023

    Apple Multiple Products Integer Overflow Vulnerability

    NVD entryCISA catalog

14. CVE-2023-32409added May 22 2023

    Apple Multiple Products WebKit Sandbox Escape Vulnerability

    NVD entryCISA catalog

15. CVE-2023-32373added May 22 2023

    Apple Multiple Products WebKit Use-After-Free Vulnerability

    NVD entryCISA catalog

16. CVE-2023-28204added May 22 2023

    Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

    NVD entryCISA catalog

17. CVE-2019-8526added Apr 17 2023

    Apple macOS Use-After-Free Vulnerability

    NVD entryCISA catalog

18. CVE-2023-28206added Apr 10 2023

    Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

    NVD entryCISA catalog

19. CVE-2023-28205added Apr 10 2023

    Apple Multiple Products WebKit Use-After-Free Vulnerability

    NVD entryCISA catalog

20. CVE-2021-30900added Mar 30 2023

    Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

    NVD entryCISA catalog

21. CVE-2023-23529added Feb 14 2023

    Apple Multiple Products WebKit Type Confusion Vulnerability

    NVD entryCISA catalog

2022 26 vulnerabilities

1. CVE-2022-42856added Dec 14 2022

   Apple iOS Type Confusion Vulnerability

   NVD entryCISA catalog

2. CVE-2022-42827added Oct 25 2022

   Apple iOS and iPadOS Out-of-Bounds Write Vulnerability

   NVD entryCISA catalog

3. CVE-2022-32917added Sep 14 2022

   Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

   NVD entryCISA catalog

4. CVE-2020-9934added Sep 8 2022

   Apple iOS, iPadOS, and macOS Input Validation Vulnerability

   NVD entryCISA catalog

5. CVE-2021-31010added Aug 25 2022

   Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

   NVD entryCISA catalog

6. CVE-2022-32894added Aug 18 2022

   Apple iOS and macOS Out-of-Bounds Write Vulnerability

   NVD entryCISA catalog

7. CVE-2022-32893added Aug 18 2022

   Apple iOS and macOS Out-of-Bounds Write Vulnerability

   NVD entryCISA catalog

8. CVE-2021-30983added Jun 27 2022

   Apple iOS and iPadOS Buffer Overflow Vulnerability

   NVD entryCISA catalog

9. CVE-2020-9907added Jun 27 2022

   Apple Multiple Products Memory Corruption Vulnerability

   NVD entryCISA catalog

10. CVE-2020-3837added Jun 27 2022

    Apple Multiple Products Memory Corruption Vulnerability

    NVD entryCISA catalog

11. CVE-2019-8605added Jun 27 2022

    Apple Multiple Products Use-After-Free Vulnerability

    NVD entryCISA catalog

12. CVE-2018-4344added Jun 27 2022

    Apple Multiple Products Memory Corruption Vulnerability

    NVD entryCISA catalog

13. CVE-2016-4657added May 24 2022

    Apple iOS Webkit Memory Corruption Vulnerability

    NVD entryCISA catalog

14. CVE-2016-4656added May 24 2022

    Apple iOS Memory Corruption Vulnerability

    NVD entryCISA catalog

15. CVE-2016-4655added May 24 2022

    Apple iOS Information Disclosure Vulnerability

    NVD entryCISA catalog

16. CVE-2021-30883added May 23 2022

    Apple Multiple Products Memory Corruption Vulnerability

    NVD entryCISA catalog

17. CVE-2019-7287added May 23 2022

    Apple iOS Memory Corruption Vulnerability

    NVD entryCISA catalog

18. CVE-2019-7286added May 23 2022

    Apple Multiple Products Memory Corruption Vulnerability

    NVD entryCISA catalog

19. CVE-2021-1789added May 4 2022

    Apple Multiple Products Type Confusion Vulnerability

    NVD entryCISA catalog

20. CVE-2019-8506added May 4 2022

    Apple Multiple Products Type Confusion Vulnerability

    NVD entryCISA catalog

21. CVE-2022-22675added Apr 4 2022

    Apple macOS Out-of-Bounds Write Vulnerability

    NVD entryCISA catalog

22. CVE-2022-22674added Apr 4 2022

    Apple macOS Out-of-Bounds Read Vulnerability

    NVD entryCISA catalog

23. CVE-2022-22620added Feb 11 2022

    Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

    NVD entryCISA catalog

24. CVE-2015-1130added Feb 10 2022

    Apple OS X Authentication Bypass Vulnerability

    NVD entryCISA catalog

25. CVE-2014-4404added Feb 10 2022

    Apple OS X Heap-Based Buffer Overflow Vulnerability

    NVD entryCISA catalog

26. CVE-2022-22587added Jan 28 2022

    Apple Memory Corruption Vulnerability

    NVD entryCISA catalog

2021 23 vulnerabilities

1. CVE-2021-30869added Nov 3 2021

   Apple iOS, iPadOS, and macOS Type Confusion Vulnerability

   NVD entryCISA catalog

2. CVE-2021-30860added Nov 3 2021

   Apple Multiple Products Integer Overflow Vulnerability

   NVD entryCISA catalog

3. CVE-2021-30858added Nov 3 2021

   Apple iOS, iPadOS, macOS Use-After-Free Vulnerability

   NVD entryCISA catalog

4. CVE-2021-30807added Nov 3 2021

   Apple Multiple Products Memory Corruption Vulnerability

   NVD entryCISA catalog

5. CVE-2021-30762added Nov 3 2021

   Apple iOS WebKit Use-After-Free Vulnerability

   NVD entryCISA catalog

6. CVE-2021-30761added Nov 3 2021

   Apple iOS WebKit Memory Corruption Vulnerability

   NVD entryCISA catalog

7. CVE-2021-30713added Nov 3 2021

   Apple macOS Unspecified Vulnerability

   NVD entryCISA catalog

8. CVE-2021-30666added Nov 3 2021

   Apple iOS WebKit Buffer Overflow Vulnerability

   NVD entryCISA catalog

9. CVE-2021-30665added Nov 3 2021

   Apple Multiple Products WebKit Memory Corruption Vulnerability

   NVD entryCISA catalog

10. CVE-2021-30663added Nov 3 2021

    Apple Multiple Products WebKit Integer Overflow Vulnerability

    NVD entryCISA catalog

11. CVE-2021-30661added Nov 3 2021

    Apple Multiple Products WebKit Storage Use-After-Free Vulnerability

    NVD entryCISA catalog

12. CVE-2021-30657added Nov 3 2021

    Apple macOS Unspecified Vulnerability

    NVD entryCISA catalog

13. CVE-2021-1879added Nov 3 2021

    Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability

    NVD entryCISA catalog

14. CVE-2021-1871added Nov 3 2021

    Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

    NVD entryCISA catalog

15. CVE-2021-1870added Nov 3 2021

    Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

    NVD entryCISA catalog

16. CVE-2021-1782added Nov 3 2021

    Apple Multiple Products Race Condition Vulnerability

    NVD entryCISA catalog

17. CVE-2020-9859added Nov 3 2021

    Apple Multiple Products Code Execution Vulnerability

    NVD entryCISA catalog

18. CVE-2020-9819added Nov 3 2021

    Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability

    NVD entryCISA catalog

19. CVE-2020-9818added Nov 3 2021

    Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability

    NVD entryCISA catalog

20. CVE-2020-27950added Nov 3 2021

    Apple Multiple Products Memory Initialization Vulnerability

    NVD entryCISA catalog

21. CVE-2020-27932added Nov 3 2021

    Apple Multiple Products Type Confusion Vulnerability

    NVD entryCISA catalog

22. CVE-2020-27930added Nov 3 2021

    Apple Multiple Products Memory Corruption Vulnerability

    NVD entryCISA catalog

23. CVE-2019-6223added Nov 3 2021

    Apple iOS and macOS Group Facetime Vulnerability

    NVD entryCISA catalog