Apple

Records9537All Threatist records

Exploited (KEV)107In CISA KEV

CVSS critical1131CVSS 9.0–10.0

CVSS high3512CVSS 7.0–8.9

Exploited now

Apple records in CISA KEV

TI-2024-18448 Apple Multiple Products Improper Authentication Vulnerability HIGH 82KEV 2026-11-04 TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2026-59424 Apple Multiple Products Out-of-Bounds Write Vulnerability CRITICAL 97KEV 2026-09-29 TI-2026-46583 Apple macOS Improper Authentication Vulnerability CRITICAL 100KEV 2026-08-18 TI-2025-22512 Apple Multiple Products Buffer Overflow Vulnerability CRITICAL 97KEV 2026-03-20 TI-2025-28211 Apple Multiple Products Improper Locking Vulnerability CRITICAL 93KEV 2026-03-20

Components

Products in the NVD configurations · select one to filter the records

Iphone Os 4501 records CRITICAL Macos 3491 records CRITICAL Mac Os X 3210 records CRITICAL Ipados 2383 records CRITICAL Tvos 2229 records CRITICAL Watchos 1995 records CRITICAL Safari 1694 records CRITICAL Itunes 922 records CRITICAL

Records

3210 records in Mac Os X · all components

TI-2021-01573 CVE-2021-1871 · GHSA-hvr3-8pvc-577j

Apple iOS and iPadOS: A remote attacker may be able to cause arbitrary code execution

CRITICAL 100KEV

A logic issue was addressed with improved restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07002 Published 2021-04-02 Partial fix · 14.4, 11.2

TI-2021-01572 CVE-2021-1870 · GHSA-f8fh-g8mv-p7hh

Apple iOS and iPadOS: A remote attacker may be able to cause arbitrary code execution

CRITICAL 100KEV

A logic issue was addressed with improved restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0771 Published 2021-04-02 Partial fix · 14.4, 11.2

TI-2014-05975 CVE-2014-7169 · GHSA-f7j6-xrjp-vffg

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed…

CRITICAL 100KEV

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown oth…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9994 Published 2014-09-25 Fixed CWE-78

TI-2014-05157 CVE-2014-6271 · GHSA-6hfc-grwp-2p9c

GNU Bash through 4.3 processes trailing strings after function definitions in the values…

CRITICAL 100KEV

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99999 Published 2014-09-24 Fixed CWE-78

TI-2012-01607 CVE-2012-1823 · GHSA-3p37-hv77-x3rp

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI…

CRITICAL 100KEV

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99998 Published 2012-05-11 Fixed CWE-77

TI-2022-02117 CVE-2022-2294 · GHSA-9q96-cwq7-cr4m

Out-of-bounds write in Google Chrome

CRITICAL 97KEV

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.70833 Published 2022-07-28 Fixed in 103.0.5060.114 CWE-787

TI-2021-01502 CVE-2021-1789 · GHSA-c838-pj7m-89q4

Type confusion in Apple iOS and iPadOS

CRITICAL 97KEV

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.13975 Published 2021-04-02 Partial fix · 14.4, 11.2 +2 CWE-843

TI-2021-11241 CVE-2021-30869

Type confusion in Apple iOS and iPadOS

CRITICAL 93KEV

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.04169 Published 2021-08-24 Fixed in 14.4, 11.2 +2 CWE-843

TI-2021-11232 CVE-2021-30860

Integer overflow in Apple macOS

CRITICAL 93KEV

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.75994 Published 2021-08-24 Fixed in 11.6, 2021-005 +2 CWE-190

TI-2021-11096 CVE-2021-30713 · GHSA-x3vf-fcq8-6cpg

Missing authorization in Apple macOS

CRITICAL 93KEV

A permissions issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.07038 Published 2021-09-08 Fixed in 11.4 CWE-862

TI-2020-16987 CVE-2020-27932 · GHSA-f3wv-rx3x-v6fh

Type confusion in Apple watchOS

CRITICAL 93KEV

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.10337 Published 2020-12-08 Fixed in 7.1, 14.2 +6 CWE-843

TI-2020-16985 CVE-2020-27930 · GHSA-pcwp-p8jm-7xc7

Out-of-bounds write in Apple watchOS

CRITICAL 93KEV

A memory corruption issue was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.22009 Published 2020-12-08 Fixed in 7.1, 14.2 +6 CWE-787

TI-2020-07935 CVE-2020-9859 · GHSA-frwv-8c9x-7766

Double free in Apple iOS

CRITICAL 93KEV

A memory consumption issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00829 Published 2020-06-05 Fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update +2 CWE-415

TI-2020-03339 CVE-2020-3837 · GHSA-qhhm-rhwq-mpvm

Out-of-bounds write in Apple iOS

CRITICAL 93KEV

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.14774 Published 2020-02-27 Fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3 +2 CWE-787

TI-2019-06181 CVE-2019-8605 · GHSA-rv43-fj24-7hpc

Use after free in Apple iOS

CRITICAL 93KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.17609 Published 2019-12-18 Fixed in iOS 12.3, macOS Mojave 10.14.5 +2 CWE-416

TI-2019-06104 CVE-2019-8526 · GHSA-p8m9-gxw7-g5pf

Use after free in Apple macOS

CRITICAL 93KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00701 Published 2019-12-18 Fixed in macOS Mojave 10.14.4 CWE-416

TI-2019-05176 CVE-2019-7286 · GHSA-7c5f-gfr7-vw4v

Out-of-bounds write in Apple iOS

CRITICAL 93KEV

A memory corruption issue was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.15939 Published 2019-12-18 Fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update CWE-787

TI-2018-03293 CVE-2018-4344 · GHSA-486c-fgp8-q4mj

Memory corruption in iOS, macOS, tvOS, watchOS

CRITICAL 93KEV

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02374 Published 2019-04-03 No fix listed CWE-119

TI-2015-01025 CVE-2015-1130 · GHSA-2697-3jf6-rpjg

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users…

CRITICAL 93KEV

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.09887 Published 2015-04-10 No fix listed CWE-59

TI-2014-03602 CVE-2014-4404 · GHSA-frxp-ch88-g8fc

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7…

CRITICAL 93KEV

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.48923 Published 2014-09-18 No fix listed CWE-787

TI-2019-04421 CVE-2019-6223 · GHSA-fj6p-rwp3-vrrh

A logic issue existed in the handling of Group FaceTime calls.

CRITICAL 92KEV

A logic issue existed in the handling of Group FaceTime calls.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02629 Published 2019-03-05 Fixed in iOS 12.1.3, macOS Mojave 10.14.3

TI-2021-11373 CVE-2021-31010

Deserialization of untrusted data in Apple macOS

CRITICAL 90KEV

A deserialization issue was addressed through improved validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03673 Published 2021-08-24 Fixed in 11.6, 2021 +3 CWE-502

TI-2021-01495 CVE-2021-1782 · GHSA-22jf-974v-hf7j

Apple iOS and iPadOS: A malicious application may be able to elevate privileges

CRITICAL 90KEV

A race condition was addressed with improved locking.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.02222 Published 2021-04-02 Fixed in 14.4, 11.2 +1 CWE-667

TI-2015-00205 CVE-2015-0235 · GHSA-jwcp-p679-fcr4

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and…

CRITICAL 87

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostb…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.94558 Published 2015-01-28 Fixed CWE-787

TI-2021-20274 CVE-2021-44790 · GHSA-c547-2659-q37g

Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier

CRITICAL 86

A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9684 Published 2021-12-20 Partial fix CWE-787

Open these records in search →

Critical	1131
High	3512
Medium	4309
Low	581
No CVSS	4