Apple known exploited vulnerabilities
Every Apple CVE on CISA's Known Exploited Vulnerabilities catalog, newest addition first: 95 in all, 10 added in the last 12 months.
- CVE-2021-31010A deserialization issue was addressed through improved validation.Apple macOS · Apple watchOS
- CVE-2022-32894An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2022-32893An out-of-bounds write issue was addressed with improved bounds checking.Apple Safari · Apple iOS and iPadOS +1
- CVE-2015-1130The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileg
- CVE-2014-4404Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privil
- CVE-2021-30983A buffer overflow issue was addressed with improved memory handling.Apple iOS and iPadOS
- CVE-2020-9907A memory corruption issue was addressed by removing the vulnerable code.Apple iOS · Apple tvOS
- CVE-2020-3837A memory corruption issue was addressed with improved memory handling.Apple iOS · Apple macOS +2
- CVE-2019-8605A use after free issue was addressed with improved memory management.Apple iOS · Apple macOS +2
- CVE-2018-4344A memory corruption issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2016-4657WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a cr
- CVE-2016-4656The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory
- CVE-2016-4655The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.
- CVE-2021-30883A memory corruption issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2019-7287A memory corruption issue was addressed with improved input validation.Apple iOS
- CVE-2019-7286A memory corruption issue was addressed with improved input validation.Apple iOS · Apple macOS
- CVE-2021-1789A type confusion issue was addressed with improved state handling.Apple iOS and iPadOS · Apple macOS
- CVE-2019-8506A type confusion issue was addressed with improved memory handling.Apple iOS · Apple tvOS +4
- CVE-2020-9859A memory consumption issue was addressed with improved memory handling.Apple iOS · Apple macOS +2
- CVE-2020-9819A memory consumption issue was addressed with improved memory handling.Apple iOS · Apple iOS-1 +2
- CVE-2020-9818An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS · Apple iOS-1 +1
- CVE-2020-27950A memory initialization issue was addressed.Apple watchOS · Apple iOS and iPadOS +1
- CVE-2020-27932A type confusion issue was addressed with improved state handling.Apple watchOS · Apple iOS and iPadOS +1
- CVE-2020-27930A memory corruption issue was addressed with improved input validation.Apple watchOS · Apple iOS and iPadOS +1
- CVE-2019-6223A logic issue existed in the handling of Group FaceTime calls.Apple iOS · Apple macOS
- CVE-2022-22675An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
- CVE-2022-22674An out-of-bounds read issue existed that led to the disclosure of kernel memory.Apple macOS
- CVE-2022-22620A use after free issue was addressed with improved memory management.Apple Safari · Apple macOS
- CVE-2022-22587A memory corruption issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30869A type confusion issue was addressed with improved state handling.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30860An integer overflow was addressed with improved input validation.Apple macOS · Apple watchOS +1
- CVE-2021-30858A use after free issue was addressed with improved memory management.Apple macOS · Apple iOS
- CVE-2021-30807A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2021-30762A use after free issue was addressed with improved memory management.Apple iOS
- CVE-2021-30761A memory corruption issue was addressed with improved state management.Apple iOS
- CVE-2021-30713A permissions issue was addressed with improved validation.Apple macOS
- CVE-2021-30666A buffer overflow issue was addressed with improved memory handling.Apple iOS
- CVE-2021-30665A memory corruption issue was addressed with improved state management.Apple macOS
- CVE-2021-30663An integer overflow was addressed with improved input validation.Apple macOS
- CVE-2021-30661A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple Safari +3
- CVE-2021-30657A logic issue was addressed with improved state management.Apple macOS
- CVE-2021-1879This issue was addressed by improved management of object lifetimes.Apple iOS and iPadOS · Apple iOS +1
- CVE-2021-1871A logic issue was addressed with improved restrictions.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1870A logic issue was addressed with improved restrictions.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1782A race condition was addressed with improved locking.Apple iOS and iPadOS · Apple macOS
FAQ
Apple KEV questions.
How many Apple vulnerabilities are in CISA KEV?
95 Apple vulnerabilities are on CISA's Known Exploited Vulnerabilities catalog, 10 of them added in the last 12 months. The newest is CVE-2026-86950 (Apple Multiple Products Out-of-Bounds Write Vulnerability), added 2026-09-29.
Which Apple products are in CISA KEV?
9 products, including Multiple Products, macOS, iOS and iPadOS. Attackers have exploited every one of these entries in the wild, and US federal agencies must patch each by its CISA due date.
Are Apple KEV vulnerabilities used by ransomware?
CISA has no known ransomware use on record for Apple's KEV entries.