Read the docs

Apple

Records9537All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical1131CVSS 9.0–10.0
CVSS high3512CVSS 7.0–8.9

Exploited now

Apple records in CISA KEV
TI-2024-18448 Apple Multiple Products Improper Authentication Vulnerability Priority HIGH 82KEV 2026-11-04TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2026-59424 Apple Multiple Products Out-of-Bounds Write Vulnerability Priority CRITICAL 97KEV 2026-09-29TI-2026-46583 Apple macOS Improper Authentication Vulnerability Priority CRITICAL 100KEV 2026-08-18TI-2025-22512 Apple Multiple Products Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2026-03-20TI-2025-28211 Apple Multiple Products Improper Locking Vulnerability Priority CRITICAL 93KEV 2026-03-20

Components

Products in the NVD configurations · select one to filter the records
Iphone Os 4501 records CRITICAL Macos 3491 records CRITICAL Mac Os X 3210 records CRITICAL Ipados 2383 records CRITICAL Tvos 2229 records CRITICAL Watchos 1995 records CRITICAL Safari 1694 records CRITICAL Itunes 922 records CRITICAL

Records

3491 records in Macos · all components

TI-2026-46583 CVE-2026-65400 · GHSA-cwph-f4w9-f4wq

Improper authentication in Apple macOS

Priority CRITICAL 100KEV

An authentication issue was addressed with improved state management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01723 Published 2026-08-06 Fixed in 14.8.9, 15.7.9 +3 CWE-287
TI-2025-28008 CVE-2025-43300 · GHSA-cpwx-wfp4-x368

Out-of-bounds write in Apple iOS and iPadOS

Priority CRITICAL 100KEV

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.65159 Published 2025-08-21 Fixed in 15.8.5, 16.7.12 +5 CWE-787
TI-2025-22440 CVE-2025-31200 · GHSA-8f6m-fvf9-6397

Memory corruption in Apple iOS and iPadOS

Priority CRITICAL 100KEV

A memory corruption issue was addressed with improved bounds checking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.20898 Published 2025-04-16 Fixed in 18.4.1, 15.4.1 +2 CWE-119
TI-2025-17951 CVE-2025-24201 · GHSA-2j99-5q75-3f57

Out-of-bounds write in Apple Safari

Priority CRITICAL 100KEV

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03847 Published 2025-03-11 Partial fix · 18.3.1, 15.8.4 +6 CWE-787
TI-2025-17847 CVE-2025-24085 · GHSA-7h23-57pg-3hwc

Use after free in Apple iOS and iPadOS

Priority CRITICAL 100KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.17401 Published 2025-01-27 Fixed in 18.3, 17.7.6 +5 CWE-416
TI-2022-06854 CVE-2022-22587 · GHSA-p75p-vc6x-p9wf

Out-of-bounds write in Apple iOS and iPadOS

Priority CRITICAL 100KEV

A memory corruption issue was addressed with improved input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11638 Published 2022-03-18 Fixed in 15.3, 12.2 +1 CWE-787
TI-2026-59424 CVE-2026-86950 · GHSA-3cf3-h799-fjvq

Out-of-bounds write in Apple iOS and iPadOS

Priority CRITICAL 97KEV

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.26166 Published 2026-09-28 Fixed in 18.7.11, 26.7.1 +1 CWE-787
TI-2025-28228 CVE-2025-43529 · GHSA-m9mp-fmfc-g6gc

Use after free in Apple Safari

Priority CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.2565 Published 2025-12-17 Partial fix · 26.2, 18.7.3 CWE-416
TI-2025-22512 CVE-2025-31277 · GHSA-vrfh-8v52-6452

Memory corruption in Apple Safari

Priority CRITICAL 97KEV

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01678 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-119
TI-2025-12953 CVE-2025-14174 · GHSA-9fjm-6w64-76r7

Memory corruption in Google Chrome

Priority CRITICAL 97KEV

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.55334 Published 2025-12-12 Fixed in 143.0.7499.110 CWE-119
TI-2025-05957 CVE-2025-6558 · GHSA-5w32-633g-38jh

Improper input validation in Google Chrome

Priority CRITICAL 97KEV

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10927 Published 2025-07-15 Partial fix · 138.0.7204.157 CWE-20
TI-2024-15328 CVE-2024-23222 · GHSA-93px-8x98-j7p2

Type confusion in Apple Safari

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10593 Published 2024-01-23 Partial fix · 17.3, 15.8.7 +5 CWE-843
TI-2023-23046 CVE-2023-43000 · GHSA-96ff-3rwm-724g

Use after free in Apple macOS

Priority CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04042 Published 2025-11-05 Partial fix · 13.5, 16.6 +1 CWE-416
TI-2023-22996 CVE-2023-42917 · GHSA-phhr-cqm7-gjv6

Out-of-bounds write in Apple Safari

Priority CRITICAL 97KEV

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09295 Published 2023-11-30 Partial fix · 17.1, 14.1 CWE-787
TI-2023-15726 CVE-2023-32439 · GHSA-rh53-wvg6-9v8m

Type confusion in Apple iOS and iPadOS

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23968 Published 2023-06-23 Partial fix · 15.7, 16.5 +1 CWE-843
TI-2023-15722 CVE-2023-32435 · GHSA-xqxr-jq6f-63f9

Out-of-bounds write in Apple macOS

Priority CRITICAL 97KEV

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.22951 Published 2023-06-23 Partial fix · 13.3, 15.7 +1 CWE-787
TI-2023-15664 CVE-2023-32373 · GHSA-3x5r-c923-f923

Use after free in Apple macOS

Priority CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.12172 Published 2023-06-23 Partial fix · 13.4, 16.5 +2 CWE-416
TI-2023-12769 CVE-2023-28205 · GHSA-6qjh-p74q-89mv

Use after free in Apple iOS and iPadOS

Priority CRITICAL 97KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.27076 Published 2023-04-10 Partial fix · 15.7, 16.4 +1 CWE-416
TI-2023-09361 CVE-2023-23529 · GHSA-c5hw-5p2j-xqg7

Type confusion in Apple iOS and iPadOS

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09426 Published 2023-02-27 Partial fix · 16.3, 13.2 +1 CWE-843
Load more
Open these records in search →