Read the docs

Apple

Records9537All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical1131CVSS 9.0–10.0
CVSS high3512CVSS 7.0–8.9

Exploited now

Apple records in CISA KEV
TI-2024-18448 Apple Multiple Products Improper Authentication Vulnerability Priority HIGH 82KEV 2026-11-04TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2026-59424 Apple Multiple Products Out-of-Bounds Write Vulnerability Priority CRITICAL 97KEV 2026-09-29TI-2026-46583 Apple macOS Improper Authentication Vulnerability Priority CRITICAL 100KEV 2026-08-18TI-2025-22512 Apple Multiple Products Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2026-03-20TI-2025-28211 Apple Multiple Products Improper Locking Vulnerability Priority CRITICAL 93KEV 2026-03-20

Components

Products in the NVD configurations · select one to filter the records
Iphone Os 4501 records CRITICAL Macos 3491 records CRITICAL Mac Os X 3210 records CRITICAL Ipados 2383 records CRITICAL Tvos 2229 records CRITICAL Watchos 1995 records CRITICAL Safari 1694 records CRITICAL Itunes 922 records CRITICAL

Records

1995 records in Watchos · all components

TI-2025-22440 CVE-2025-31200 · GHSA-8f6m-fvf9-6397

Memory corruption in Apple iOS and iPadOS

Priority CRITICAL 100KEV

A memory corruption issue was addressed with improved bounds checking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.20898 Published 2025-04-16 Fixed in 18.4.1, 15.4.1 +2 CWE-119
TI-2025-17951 CVE-2025-24201 · GHSA-2j99-5q75-3f57

Out-of-bounds write in Apple Safari

Priority CRITICAL 100KEV

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03847 Published 2025-03-11 Partial fix · 18.3.1, 15.8.4 +6 CWE-787
TI-2025-17847 CVE-2025-24085 · GHSA-7h23-57pg-3hwc

Use after free in Apple iOS and iPadOS

Priority CRITICAL 100KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.17401 Published 2025-01-27 Fixed in 18.3, 17.7.6 +5 CWE-416
TI-2025-28228 CVE-2025-43529 · GHSA-m9mp-fmfc-g6gc

Use after free in Apple Safari

Priority CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.2565 Published 2025-12-17 Partial fix · 26.2, 18.7.3 CWE-416
TI-2025-22512 CVE-2025-31277 · GHSA-vrfh-8v52-6452

Memory corruption in Apple Safari

Priority CRITICAL 97KEV

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01678 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-119
TI-2025-12953 CVE-2025-14174 · GHSA-9fjm-6w64-76r7

Memory corruption in Google Chrome

Priority CRITICAL 97KEV

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.55334 Published 2025-12-12 Fixed in 143.0.7499.110 CWE-119
TI-2025-05957 CVE-2025-6558 · GHSA-5w32-633g-38jh

Improper input validation in Google Chrome

Priority CRITICAL 97KEV

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10927 Published 2025-07-15 Partial fix · 138.0.7204.157 CWE-20
TI-2023-15664 CVE-2023-32373 · GHSA-3x5r-c923-f923

Use after free in Apple macOS

Priority CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.12172 Published 2023-06-23 Partial fix · 13.4, 16.5 +2 CWE-416
TI-2022-24081 CVE-2022-48503 · GHSA-hqf2-wqhm-8v23

Improper array index validation in Apple macOS

Priority CRITICAL 97KEV

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03213 Published 2023-08-14 Partial fix · 12.5, 15.6 +1 CWE-129
TI-2022-02117 CVE-2022-2294 · GHSA-9q96-cwq7-cr4m

Out-of-bounds write in Google Chrome

Priority CRITICAL 97KEV

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.70833 Published 2022-07-28 Fixed in 103.0.5060.114 CWE-787
TI-2021-11319 CVE-2021-30952

Integer overflow in Apple watchOS

Priority CRITICAL 97KEV

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06964 Published 2021-08-24 Partial fix · 8.3, 15.2 +1 CWE-190
TI-2021-11050 CVE-2021-30665 · GHSA-fgq5-6x94-h566

Out-of-bounds write in Apple macOS

Priority CRITICAL 97KEV

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03706 Published 2021-09-08 Partial fix · 11.3, 14.5 +3 CWE-787
TI-2021-11046 CVE-2021-30661 · GHSA-79qq-9x66-f5r5

Use after free in Apple iOS and iPadOS

Priority CRITICAL 97KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04491 Published 2021-09-08 Partial fix · 14.5, 14.1 +3 CWE-416
TI-2021-01502 CVE-2021-1789 · GHSA-c838-pj7m-89q4

Type confusion in Apple iOS and iPadOS

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.13975 Published 2021-04-02 Partial fix · 14.4, 11.2 +2 CWE-843
TI-2020-07896 CVE-2020-9818 · GHSA-r647-89qj-xwmp

Out-of-bounds write in Apple iOS

Priority CRITICAL 97KEV

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02344 Published 2020-06-09 Fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7 +1 CWE-787
TI-2019-06084 CVE-2019-8506 · GHSA-fg7h-q67h-82rg

Type confusion in Apple iOS

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.16159 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-843
TI-2026-16755 CVE-2026-20700 · GHSA-j5x8-2r52-c3ff

Memory corruption in Apple iOS and iPadOS

Priority CRITICAL 93KEV

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01654 Published 2026-02-11 Fixed in 26.3 CWE-119
TI-2024-15401 CVE-2024-23296 · GHSA-v4rc-hq4f-4cmp

Out-of-bounds write in Apple iOS and iPadOS

Priority CRITICAL 93KEV

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01411 Published 2024-03-05 Fixed in 16.7.8, 17.4 +5 CWE-787
TI-2024-15331 CVE-2024-23225 · GHSA-7r4v-4jv2-pj5p

Out-of-bounds write in Apple iOS and iPadOS

Priority CRITICAL 93KEV

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01481 Published 2024-03-05 Fixed in 16.7.6, 17.4 +5 CWE-787
TI-2023-15721 CVE-2023-32434 · GHSA-4pvh-jrgh-mpvj

Integer overflow in Apple macOS

Priority CRITICAL 93KEV

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.51517 Published 2023-06-23 Fixed in 12.6, 15.7 +5 CWE-190
Load more
Open these records in search →