Apple

Records9537All Threatist records

Exploited (KEV)107In CISA KEV

CVSS critical1131CVSS 9.0–10.0

CVSS high3512CVSS 7.0–8.9

Exploited now

Apple records in CISA KEV

TI-2024-18448 Apple Multiple Products Improper Authentication Vulnerability HIGH 82KEV 2026-11-04 TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2026-59424 Apple Multiple Products Out-of-Bounds Write Vulnerability CRITICAL 97KEV 2026-09-29 TI-2026-46583 Apple macOS Improper Authentication Vulnerability CRITICAL 100KEV 2026-08-18 TI-2025-22512 Apple Multiple Products Buffer Overflow Vulnerability CRITICAL 97KEV 2026-03-20 TI-2025-28211 Apple Multiple Products Improper Locking Vulnerability CRITICAL 93KEV 2026-03-20

Components

Products in the NVD configurations · select one to filter the records

Iphone Os 4501 records CRITICAL Macos 3491 records CRITICAL Mac Os X 3210 records CRITICAL Ipados 2383 records CRITICAL Tvos 2229 records CRITICAL Watchos 1995 records CRITICAL Safari 1694 records CRITICAL Itunes 922 records CRITICAL

Records

8 records in Music · all components

TI-2022-14380 CVE-2022-32846 · GHSA-wj5g-5xxg-2f92

Apple Music for Android: An app may be able to access user-sensitive data

MEDIUM 40

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00613 Published 2023-02-27 Fixed in 3.9 CWE-664

TI-2022-14370 CVE-2022-32836 · GHSA-jv4h-v7cw-4f5c

Information disclosure in Apple Music for Android

MEDIUM 40

This issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00552 Published 2023-02-27 Fixed in 3.9 CWE-200

TI-2023-15716 CVE-2023-32427 · GHSA-rg97-m354-39g3

Apple Music for Android: An attacker in a privileged network position may be able to…

LOW 27

This issue was addressed by using HTTPS when sending information over the network.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00433 Published 2023-07-28 Fixed in 4.2

TI-2021-21529 CVE-2021-46841 · GHSA-9283-fvg2-gf6j

Information disclosure in Apple Music for Android

LOW 27

This issue was addressed by using HTTPS when sending information over the network.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00468 Published 2023-02-27 Fixed in 3.5 CWE-200

TI-2020-08052 CVE-2020-9982 · GHSA-fxj8-h239-6vrg

Apple Music for Android: A malicious application may be able to leak a user's credentials

LOW 26

This issue was addressed with improved checks to prevent unauthorized actions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00759 Published 2020-10-27 Fixed in 3.4

TI-2024-36614 CVE-2024-54540 · GHSA-jw5g-j894-hv7p

Cross-site scripting in Apple Music

LOW 24

The issue was addressed with improved input sanitization.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0021 Published 2025-01-15 Fixed in 1.5.0 CWE-79

TI-2023-12767 CVE-2023-28203 · GHSA-6w6c-rmc6-wccw

Information disclosure in Apple Music for Android

LOW 24

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00194 Published 2023-07-28 Fixed in 4.2 CWE-200

TI-2022-14432 CVE-2022-32906 · GHSA-fr43-5hh3-gm58

Cleartext transmission of sensitive information in Apple Music for Android

LOW 24

This issue was addressed with using HTTPS when sending information over the network.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00353 Published 2023-02-27 Fixed in 3.9 CWE-319

Open these records in search →

Critical	1131
High	3512
Medium	4309
Low	581
No CVSS	4