Read the docs

Apple

Records9537All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical1131CVSS 9.0–10.0
CVSS high3512CVSS 7.0–8.9

Exploited now

Apple records in CISA KEV
TI-2024-18448 Apple Multiple Products Improper Authentication Vulnerability Priority HIGH 82KEV 2026-11-04TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2026-59424 Apple Multiple Products Out-of-Bounds Write Vulnerability Priority CRITICAL 97KEV 2026-09-29TI-2026-46583 Apple macOS Improper Authentication Vulnerability Priority CRITICAL 100KEV 2026-08-18TI-2025-22512 Apple Multiple Products Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2026-03-20TI-2025-28211 Apple Multiple Products Improper Locking Vulnerability Priority CRITICAL 93KEV 2026-03-20

Components

Products in the NVD configurations · select one to filter the records
Iphone Os 4501 records CRITICAL Macos 3491 records CRITICAL Mac Os X 3210 records CRITICAL Ipados 2383 records CRITICAL Tvos 2229 records CRITICAL Watchos 1995 records CRITICAL Safari 1694 records CRITICAL Itunes 922 records CRITICAL

Records

9537 records

TI-2026-46583 CVE-2026-65400 · GHSA-cwph-f4w9-f4wq

Improper authentication in Apple macOS

Priority CRITICAL 100KEV

An authentication issue was addressed with improved state management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01723 Published 2026-08-06 Fixed in 14.8.9, 15.7.9 +3 CWE-287
TI-2025-28008 CVE-2025-43300 · GHSA-cpwx-wfp4-x368

Out-of-bounds write in Apple iOS and iPadOS

Priority CRITICAL 100KEV

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.65159 Published 2025-08-21 Fixed in 15.8.5, 16.7.12 +5 CWE-787
TI-2025-22440 CVE-2025-31200 · GHSA-8f6m-fvf9-6397

Memory corruption in Apple iOS and iPadOS

Priority CRITICAL 100KEV

A memory corruption issue was addressed with improved bounds checking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.20898 Published 2025-04-16 Fixed in 18.4.1, 15.4.1 +2 CWE-119
TI-2025-17951 CVE-2025-24201 · GHSA-2j99-5q75-3f57

Out-of-bounds write in Apple Safari

Priority CRITICAL 100KEV

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03847 Published 2025-03-11 Partial fix · 18.3.1, 15.8.4 +6 CWE-787
TI-2025-17847 CVE-2025-24085 · GHSA-7h23-57pg-3hwc

Use after free in Apple iOS and iPadOS

Priority CRITICAL 100KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.17401 Published 2025-01-27 Fixed in 18.3, 17.7.6 +5 CWE-416
TI-2022-06854 CVE-2022-22587 · GHSA-p75p-vc6x-p9wf

Out-of-bounds write in Apple iOS and iPadOS

Priority CRITICAL 100KEV

A memory corruption issue was addressed with improved input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11638 Published 2022-03-18 Fixed in 15.3, 12.2 +1 CWE-787
TI-2021-19919 CVE-2021-44228 · GHSA-jfh8-c2jp-5v3q

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Priority CRITICAL 100KEV

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99999 Published 2021-12-10 Partial fix · 2.15.0, 2.3.1 +5 CWE-20
TI-2014-05975 CVE-2014-7169 · GHSA-f7j6-xrjp-vffg

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed…

Priority CRITICAL 100KEV

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown oth…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9994 Published 2014-09-25 Fixed CWE-78
TI-2014-05157 CVE-2014-6271 · GHSA-6hfc-grwp-2p9c

GNU Bash through 4.3 processes trailing strings after function definitions in the values…

Priority CRITICAL 100KEV

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99999 Published 2014-09-24 Fixed CWE-78
TI-2012-01607 CVE-2012-1823 · GHSA-3p37-hv77-x3rp

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI…

Priority CRITICAL 100KEV

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99998 Published 2012-05-11 Fixed CWE-77
TI-2026-59424 CVE-2026-86950 · GHSA-3cf3-h799-fjvq

Out-of-bounds write in Apple iOS and iPadOS

Priority CRITICAL 97KEV

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.26166 Published 2026-09-28 Fixed in 18.7.11, 26.7.1 +1 CWE-787
TI-2025-28228 CVE-2025-43529 · GHSA-m9mp-fmfc-g6gc

Use after free in Apple Safari

Priority CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.2565 Published 2025-12-17 Partial fix · 26.2, 18.7.3 CWE-416
TI-2025-22512 CVE-2025-31277 · GHSA-vrfh-8v52-6452

Memory corruption in Apple Safari

Priority CRITICAL 97KEV

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01678 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-119
TI-2025-12953 CVE-2025-14174 · GHSA-9fjm-6w64-76r7

Memory corruption in Google Chrome

Priority CRITICAL 97KEV

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.55334 Published 2025-12-12 Fixed in 143.0.7499.110 CWE-119
TI-2025-05957 CVE-2025-6558 · GHSA-5w32-633g-38jh

Improper input validation in Google Chrome

Priority CRITICAL 97KEV

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10927 Published 2025-07-15 Partial fix · 138.0.7204.157 CWE-20
TI-2024-15328 CVE-2024-23222 · GHSA-93px-8x98-j7p2

Type confusion in Apple Safari

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10593 Published 2024-01-23 Partial fix · 17.3, 15.8.7 +5 CWE-843
TI-2023-23046 CVE-2023-43000 · GHSA-96ff-3rwm-724g

Use after free in Apple macOS

Priority CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04042 Published 2025-11-05 Partial fix · 13.5, 16.6 +1 CWE-416
TI-2023-22996 CVE-2023-42917 · GHSA-phhr-cqm7-gjv6

Out-of-bounds write in Apple Safari

Priority CRITICAL 97KEV

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09295 Published 2023-11-30 Partial fix · 17.1, 14.1 CWE-787
TI-2023-15726 CVE-2023-32439 · GHSA-rh53-wvg6-9v8m

Type confusion in Apple iOS and iPadOS

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23968 Published 2023-06-23 Partial fix · 15.7, 16.5 +1 CWE-843
Load more
Open these records in search →