Apple vulnerabilities
4,637 CVEs and advisories name Apple as an affected vendor, 90 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-113971This issue was addressed by restricting options offered on a locked device.
- CVE-2026-113970A use-after-free issue was addressed with improved memory management.
- CVE-2026-113969A logic issue was addressed with improved state management.
- CVE-2026-113968A logic issue was addressed with improved state management.
- CVE-2026-113965This issue was addressed with improved checks.
- CVE-2026-113964A logic issue was addressed with improved state management.
- CVE-2026-113963An authorization issue was addressed with improved state management.
- CVE-2026-113961An authorization issue was addressed with improved validation.
- CVE-2026-113960This issue was addressed by removing the vulnerable code.
- CVE-2026-112605This issue was addressed with improved handling of symlinks.
- CVE-2026-112602An authorization issue was addressed with improved state management.
- CVE-2026-113957An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a…
- CVE-2026-86983A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its…
- CVE-2026-86925An authorization issue was addressed with improved state management.
- CVE-2026-84627A buffer overflow was addressed with improved bounds checking.
- CVE-2026-113945An out-of-bounds read was addressed with improved bounds checking.
- CVE-2026-65327A logic issue was addressed with improved checks.
- CVE-2026-112529An out-of-bounds read was addressed with improved bounds checking.
- CVE-2026-86972A buffer overflow was addressed with improved size validation.
- CVE-2026-112483A path handling issue was addressed with improved validation.
- CVE-2026-113912An out-of-bounds access issue was addressed with improved bounds checking.
- CVE-2026-112495An out-of-bounds read was addressed with improved bounds checking.
- CVE-2026-86964A null pointer dereference was addressed with improved input validation.
- CVE-2026-113904A use-after-free issue was addressed with improved memory management.
- CVE-2026-112616An authorization issue was addressed with improved access control.
- CVE-2026-112568A logic issue was addressed with improved checks.
- CVE-2026-112704An information leakage was addressed with additional validation.
- CVE-2026-112456An out-of-bounds write issue was addressed with improved input validation.
- CVE-2026-112513This issue was addressed with improved validation of symlinks.
- CVE-2026-112544An out-of-bounds write issue was addressed with improved bounds checking.