Apple CVEs
4,637 CVEs and advisories name Apple as an affected vendor, 90 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-22587A memory corruption issue was addressed with improved input validation.
- CVE-2022-22585An issue existed within the path validation logic for symlinks.
- CVE-2022-22583A permissions issue was addressed with improved validation.
- CVE-2022-22579An information disclosure issue was addressed with improved state management.
- CVE-2022-22578A logic issue was addressed with improved validation.
- CVE-2021-30771An out-of-bounds write was addressed with improved input validation.
- CVE-2022-22643This issue was addressed with improved checks.
- CVE-2021-30767A logic issue was addressed with improved state management.
- CVE-2020-3886A use after free issue was addressed with improved memory management.
- CVE-2020-3896This issue was addressed by removing the vulnerable code.
- CVE-2019-8702This issue was addressed with a new entitlement.
- CVE-2019-8703This issue was addressed with improved entitlements.
- CVE-2017-13908An issue in handling file permissions was addressed with improved validation.
- CVE-2018-4302A null pointer dereference was addressed with improved validation.
- CVE-2019-8643CVE-2019-8643: Arun Sharma of VMWare This issue is fixed in macOS Mojave 10.14.
- CVE-2018-4478A validation issue was addressed with improved logic.
- CVE-2017-13910An access issue was addressed with additional sandbox restrictions on applications.
- CVE-2017-13909An issue existed in the storage of sensitive tokens.
- CVE-2017-13907A state management issue was addressed with improved state validation.
- CVE-2017-13906A memory corruption issue was addressed with improved memory handling.
- CVE-2017-13892An issue existed in the handling of Contact sharing.
- CVE-2017-13835A memory corruption issue was addressed with improved memory handling.
- CVE-2017-13905A race condition was addressed with additional validation.
- CVE-2017-13880A memory corruption issue was addressed with improved memory handling.
- CVE-2017-2375An issue existed in preventing the uploading of CallKit call history to iCloud.
- CVE-2017-2488A cryptographic weakness existed in the authentication protocol of Remote Desktop.
- CVE-2021-30836An out-of-bounds read was addressed with improved input validation.
- CVE-2021-30834A logic issue was addressed with improved state management.
- CVE-2021-30833This issue was addressed with improved checks.
- CVE-2021-30840This issue was addressed with improved checks.