Read the docs

Apple

Records9537All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical1131CVSS 9.0–10.0
CVSS high3512CVSS 7.0–8.9

Exploited now

Apple records in CISA KEV
TI-2024-18448 Apple Multiple Products Improper Authentication Vulnerability Priority HIGH 82KEV 2026-11-04TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2026-59424 Apple Multiple Products Out-of-Bounds Write Vulnerability Priority CRITICAL 97KEV 2026-09-29TI-2026-46583 Apple macOS Improper Authentication Vulnerability Priority CRITICAL 100KEV 2026-08-18TI-2025-22512 Apple Multiple Products Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2026-03-20TI-2025-28211 Apple Multiple Products Improper Locking Vulnerability Priority CRITICAL 93KEV 2026-03-20

Components

Products in the NVD configurations · select one to filter the records
Iphone Os 4501 records CRITICAL Macos 3491 records CRITICAL Mac Os X 3210 records CRITICAL Ipados 2383 records CRITICAL Tvos 2229 records CRITICAL Watchos 1995 records CRITICAL Safari 1694 records CRITICAL Itunes 922 records CRITICAL

Records

1694 records in Safari · all components

TI-2025-17951 CVE-2025-24201 · GHSA-2j99-5q75-3f57

Out-of-bounds write in Apple Safari

Priority CRITICAL 100KEV

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03847 Published 2025-03-11 Partial fix · 18.3.1, 15.8.4 +6 CWE-787
TI-2025-28228 CVE-2025-43529 · GHSA-m9mp-fmfc-g6gc

Use after free in Apple Safari

Priority CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.2565 Published 2025-12-17 Partial fix · 26.2, 18.7.3 CWE-416
TI-2025-22512 CVE-2025-31277 · GHSA-vrfh-8v52-6452

Memory corruption in Apple Safari

Priority CRITICAL 97KEV

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01678 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-119
TI-2025-12953 CVE-2025-14174 · GHSA-9fjm-6w64-76r7

Memory corruption in Google Chrome

Priority CRITICAL 97KEV

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.55334 Published 2025-12-12 Fixed in 143.0.7499.110 CWE-119
TI-2025-05957 CVE-2025-6558 · GHSA-5w32-633g-38jh

Improper input validation in Google Chrome

Priority CRITICAL 97KEV

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10927 Published 2025-07-15 Partial fix · 138.0.7204.157 CWE-20
TI-2024-15328 CVE-2024-23222 · GHSA-93px-8x98-j7p2

Type confusion in Apple Safari

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10593 Published 2024-01-23 Partial fix · 17.3, 15.8.7 +5 CWE-843
TI-2023-23046 CVE-2023-43000 · GHSA-96ff-3rwm-724g

Use after free in Apple macOS

Priority CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04042 Published 2025-11-05 Partial fix · 13.5, 16.6 +1 CWE-416
TI-2023-22996 CVE-2023-42917 · GHSA-phhr-cqm7-gjv6

Out-of-bounds write in Apple Safari

Priority CRITICAL 97KEV

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09295 Published 2023-11-30 Partial fix · 17.1, 14.1 CWE-787
TI-2023-15726 CVE-2023-32439 · GHSA-rh53-wvg6-9v8m

Type confusion in Apple iOS and iPadOS

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23968 Published 2023-06-23 Partial fix · 15.7, 16.5 +1 CWE-843
TI-2023-15722 CVE-2023-32435 · GHSA-xqxr-jq6f-63f9

Out-of-bounds write in Apple macOS

Priority CRITICAL 97KEV

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.22951 Published 2023-06-23 Partial fix · 13.3, 15.7 +1 CWE-787
TI-2023-15664 CVE-2023-32373 · GHSA-3x5r-c923-f923

Use after free in Apple macOS

Priority CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.12172 Published 2023-06-23 Partial fix · 13.4, 16.5 +2 CWE-416
TI-2023-12769 CVE-2023-28205 · GHSA-6qjh-p74q-89mv

Use after free in Apple iOS and iPadOS

Priority CRITICAL 97KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.27076 Published 2023-04-10 Partial fix · 15.7, 16.4 +1 CWE-416
TI-2023-09361 CVE-2023-23529 · GHSA-c5hw-5p2j-xqg7

Type confusion in Apple iOS and iPadOS

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09426 Published 2023-02-27 Partial fix · 16.3, 13.2 +1 CWE-843
TI-2022-24081 CVE-2022-48503 · GHSA-hqf2-wqhm-8v23

Improper array index validation in Apple macOS

Priority CRITICAL 97KEV

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03213 Published 2023-08-14 Partial fix · 12.5, 15.6 +1 CWE-129
TI-2022-20866 CVE-2022-42856 · GHSA-qh2r-8xvg-hm24

Type confusion in Apple tvOS

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08523 Published 2022-12-15 Partial fix · 16.2, 13.1 +2 CWE-843
TI-2022-14420 CVE-2022-32893 · GHSA-qjpw-c5xf-g33j

Out-of-bounds write in Apple Safari

Priority CRITICAL 97KEV

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09931 Published 2022-08-24 Partial fix · 15.6, 12.5 CWE-787
TI-2022-06885 CVE-2022-22620 · GHSA-2886-x646-53fj

Use after free in Apple Safari

Priority CRITICAL 97KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.16342 Published 2022-03-18 Fixed in 15.3, 12.2 CWE-416
TI-2021-11319 CVE-2021-30952

Integer overflow in Apple watchOS

Priority CRITICAL 97KEV

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06964 Published 2021-08-24 Partial fix · 8.3, 15.2 +1 CWE-190
TI-2021-11048 CVE-2021-30663 · GHSA-5g93-pf3w-6f59

Integer overflow in Apple macOS

Priority CRITICAL 97KEV

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03521 Published 2021-09-08 Partial fix · 11.3, 14.5 +3 CWE-190
TI-2021-11046 CVE-2021-30661 · GHSA-79qq-9x66-f5r5

Use after free in Apple iOS and iPadOS

Priority CRITICAL 97KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04491 Published 2021-09-08 Partial fix · 14.5, 14.1 +3 CWE-416
TI-2019-06084 CVE-2019-8506 · GHSA-fg7h-q67h-82rg

Type confusion in Apple iOS

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.16159 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-843
TI-2023-22995 CVE-2023-42916 · GHSA-95hw-v8fq-666q

Out-of-bounds read in Apple Safari

Priority CRITICAL 86KEV

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.17823 Published 2023-11-30 Partial fix · 17.1, 14.1 CWE-125
Load more
Open these records in search →