Apple known exploited vulnerabilities
Every Apple CVE on CISA's Known Exploited Vulnerabilities catalog, newest addition first: 95 in all, 10 added in the last 12 months.
- CVE-2026-86950An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-65400An authentication issue was addressed with improved state management.Apple macOS
- CVE-2025-43520A memory corruption issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43510A memory corruption issue was addressed with improved lock state checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-31277The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +4
- CVE-2023-43000A use-after-free issue was addressed with improved memory management.Apple macOS · Apple iOS and iPadOS +1
- CVE-2023-41974A use-after-free issue was addressed with improved memory management.Apple iOS and iPadOS
- CVE-2021-30952An integer overflow was addressed with improved input validation.Apple watchOS · Apple iOS and iPadOS +1
- CVE-2026-20700A memory corruption issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43529A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2022-48503The issue was addressed with improved bounds checks.Apple macOS · Apple tvOS +3
- CVE-2025-43300An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple iPadOS +1
- CVE-2025-43200This issue was addressed with improved checks.Apple iOS and iPadOS · Apple iPadOS +3
- CVE-2025-31201This issue was addressed by removing the vulnerable code.Apple iOS and iPadOS · Apple macOS +2
- CVE-2025-31200A memory corruption issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-24201An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-24200An authorization issue was addressed with improved state management.Apple iOS and iPadOS · Apple iPadOS
- CVE-2025-24085A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple iPadOS +4
- CVE-2024-44309A cookie management issue was addressed with improved state management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2024-44308The issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +2
- CVE-2024-23296A memory corruption issue was addressed with improved validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-23225A memory corruption issue was addressed with improved validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2022-48618The issue was addressed with improved checks.Apple tvOS · Apple macOS +2
- CVE-2024-23222A type confusion issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +3
- CVE-2023-41990The issue was addressed with improved handling of caches.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2023-42917A memory corruption vulnerability was addressed with improved locking.Apple Safari · Apple macOS +1
- CVE-2023-42916An out-of-bounds read was addressed with improved input validation.Apple Safari · Apple macOS +1
- CVE-2023-42824The issue was addressed with improved checks.Apple iOS and iPadOS
- CVE-2023-41993The issue was addressed with improved checks.Apple macOS
- CVE-2023-41992The issue was addressed with improved checks.Apple macOS · Apple iOS and iPadOS
- CVE-2023-41991A certificate validation issue was addressed.Apple iOS and iPadOS · Apple macOS
- CVE-2023-41064A buffer overflow issue was addressed with improved memory handling.Apple macOS · Apple iOS and iPadOS
- CVE-2023-41061A validation issue was addressed with improved logic.Apple iOS and iPadOS · Apple watchOS
- CVE-2023-38606This issue was addressed with improved state management.Apple tvOS · Apple iOS and iPadOS +2
- CVE-2023-37450The issue was addressed with improved checks.Apple Safari · Apple tvOS +3
- CVE-2023-32439A type confusion issue was addressed with improved checks.Apple iOS and iPadOS · Apple Safari +1
- CVE-2023-32435A memory corruption issue was addressed with improved state management.Apple macOS · Apple iOS and iPadOS +1
- CVE-2023-32434An integer overflow was addressed with improved input validation.Apple macOS · Apple iOS and iPadOS +1
- CVE-2023-32409The issue was addressed with improved bounds checks.Apple macOS · Apple Safari +3
- CVE-2023-32373A use-after-free issue was addressed with improved memory management.Apple macOS · Apple Safari +3
- CVE-2023-28204An out-of-bounds read was addressed with improved input validation.Apple macOS · Apple Safari +3
- CVE-2019-8526A use after free issue was addressed with improved memory management.Apple macOS
- CVE-2023-28206An out-of-bounds write issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2023-28205A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple Safari +1
- CVE-2021-30900An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS
- CVE-2023-23529A type confusion issue was addressed with improved checks.Apple iOS and iPadOS · Apple Safari +1
- CVE-2022-42856A type confusion issue was addressed with improved state handling.Apple tvOS
- CVE-2022-42827An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS
- CVE-2022-32917The issue was addressed with improved bounds checks.Apple iOS · Apple macOS
- CVE-2020-9934An issue existed in the handling of environment variables.Apple iOS · Apple macOS
FAQ
Apple KEV questions.
How many Apple vulnerabilities are in CISA KEV?
95 Apple vulnerabilities are on CISA's Known Exploited Vulnerabilities catalog, 10 of them added in the last 12 months. The newest is CVE-2026-86950 (Apple Multiple Products Out-of-Bounds Write Vulnerability), added 2026-09-29.
Which Apple products are in CISA KEV?
9 products, including Multiple Products, macOS, iOS and iPadOS. Attackers have exploited every one of these entries in the wild, and US federal agencies must patch each by its CISA due date.
Are Apple KEV vulnerabilities used by ransomware?
CISA has no known ransomware use on record for Apple's KEV entries.