Read the docs

Apple

Records9537All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical1131CVSS 9.0–10.0
CVSS high3512CVSS 7.0–8.9

Exploited now

Apple records in CISA KEV
TI-2024-18448 Apple Multiple Products Improper Authentication Vulnerability Priority HIGH 82KEV 2026-11-04TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2026-59424 Apple Multiple Products Out-of-Bounds Write Vulnerability Priority CRITICAL 97KEV 2026-09-29TI-2026-46583 Apple macOS Improper Authentication Vulnerability Priority CRITICAL 100KEV 2026-08-18TI-2025-22512 Apple Multiple Products Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2026-03-20TI-2025-28211 Apple Multiple Products Improper Locking Vulnerability Priority CRITICAL 93KEV 2026-03-20

Components

Products in the NVD configurations · select one to filter the records
Iphone Os 4501 records CRITICAL Macos 3491 records CRITICAL Mac Os X 3210 records CRITICAL Ipados 2383 records CRITICAL Tvos 2229 records CRITICAL Watchos 1995 records CRITICAL Safari 1694 records CRITICAL Itunes 922 records CRITICAL

Records

736 records in Visionos · all components

TI-2025-22440 CVE-2025-31200 · GHSA-8f6m-fvf9-6397

Memory corruption in Apple iOS and iPadOS

Priority CRITICAL 100KEV

A memory corruption issue was addressed with improved bounds checking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.20898 Published 2025-04-16 Fixed in 18.4.1, 15.4.1 +2 CWE-119
TI-2025-17951 CVE-2025-24201 · GHSA-2j99-5q75-3f57

Out-of-bounds write in Apple Safari

Priority CRITICAL 100KEV

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03847 Published 2025-03-11 Partial fix · 18.3.1, 15.8.4 +6 CWE-787
TI-2025-17847 CVE-2025-24085 · GHSA-7h23-57pg-3hwc

Use after free in Apple iOS and iPadOS

Priority CRITICAL 100KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.17401 Published 2025-01-27 Fixed in 18.3, 17.7.6 +5 CWE-416
TI-2025-28228 CVE-2025-43529 · GHSA-m9mp-fmfc-g6gc

Use after free in Apple Safari

Priority CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.2565 Published 2025-12-17 Partial fix · 26.2, 18.7.3 CWE-416
TI-2025-22512 CVE-2025-31277 · GHSA-vrfh-8v52-6452

Memory corruption in Apple Safari

Priority CRITICAL 97KEV

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01678 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-119
TI-2025-12953 CVE-2025-14174 · GHSA-9fjm-6w64-76r7

Memory corruption in Google Chrome

Priority CRITICAL 97KEV

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.55334 Published 2025-12-12 Fixed in 143.0.7499.110 CWE-119
TI-2025-05957 CVE-2025-6558 · GHSA-5w32-633g-38jh

Improper input validation in Google Chrome

Priority CRITICAL 97KEV

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10927 Published 2025-07-15 Partial fix · 138.0.7204.157 CWE-20
TI-2024-15328 CVE-2024-23222 · GHSA-93px-8x98-j7p2

Type confusion in Apple Safari

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10593 Published 2024-01-23 Partial fix · 17.3, 15.8.7 +5 CWE-843
TI-2026-16755 CVE-2026-20700 · GHSA-j5x8-2r52-c3ff

Memory corruption in Apple iOS and iPadOS

Priority CRITICAL 93KEV

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01654 Published 2026-02-11 Fixed in 26.3 CWE-119
TI-2024-15401 CVE-2024-23296 · GHSA-v4rc-hq4f-4cmp

Out-of-bounds write in Apple iOS and iPadOS

Priority CRITICAL 93KEV

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01411 Published 2024-03-05 Fixed in 16.7.8, 17.4 +5 CWE-787
TI-2024-15331 CVE-2024-23225 · GHSA-7r4v-4jv2-pj5p

Out-of-bounds write in Apple iOS and iPadOS

Priority CRITICAL 93KEV

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01481 Published 2024-03-05 Fixed in 16.7.6, 17.4 +5 CWE-787
TI-2024-29864 CVE-2024-44309 · GHSA-6cpp-mpjx-cx8v

Cross-site scripting in Apple Safari

Priority CRITICAL 85KEV

A cookie management issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.21948 Published 2024-11-19 Partial fix · 18.1.1, 17.7.2 +2 CWE-79
TI-2025-28221 CVE-2025-43520 · GHSA-c46j-8p94-c85x

Buffer overflow in Apple iOS and iPadOS

Priority HIGH 84KEV

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00425 Published 2025-12-12 Fixed in 18.7.2, 26.1 +2 CWE-120
TI-2025-18000 CVE-2025-24252 · GHSA-7wfr-865w-3mvg

Use after free in Apple iOS and iPadOS

Priority HIGH 73

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01309 Published 2025-04-29 Fixed in 18.4, 17.7.6 +4 CWE-416
TI-2025-06334 CVE-2025-6965 · GHSA-2m69-gcr7-jv3q

Integer Truncation on SQLite

Priority HIGH 72

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.73452 Published 2025-07-15 Partial fix · 3.50.2 CWE-197
TI-2024-18429 CVE-2024-27815 · GHSA-r6h9-62mm-q9wm

Out-of-bounds write in Apple iOS and iPadOS

Priority HIGH 69

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02047 Published 2024-06-10 Fixed in 17.5, 14.5 +2 CWE-787
TI-2024-29818 CVE-2024-44258 · GHSA-wpcr-qwq5-j6w2

Link following in Apple iOS and iPadOS

Priority MEDIUM 64

This issue was addressed with improved handling of symlinks.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00751 Published 2024-10-28 Fixed in 17.7.1, 18.1 +1 CWE-59
TI-2025-17978 CVE-2025-24230 · GHSA-fhfh-9mcw-2g3q

Out-of-bounds read in Apple iOS and iPadOS

Priority MEDIUM 53

An out-of-bounds read issue was addressed with improved input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0192 Published 2025-03-31 Fixed in 18.4, 17.7.6 +5 CWE-125
Load more
Open these records in search →