Apple vulnerabilities
4,637 CVEs and advisories name Apple as an affected vendor, 90 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-86919A stack overflow was addressed with improved input validation.
- CVE-2026-86918An out-of-bounds write issue was addressed with improved bounds checking.
- CVE-2026-86915A race condition was addressed with improved locking.
- CVE-2026-86914An information disclosure issue was addressed with improved state management.
- CVE-2026-86913A use after free issue was addressed with improved memory management.
- CVE-2026-86907An authorization issue was addressed with improved entitlement checks.
- CVE-2026-86875An input validation issue was addressed with improved input validation.
- CVE-2026-86874An out-of-bounds read was addressed with improved input validation.
- CVE-2026-86872A logic issue was addressed with improved state management.
- CVE-2026-86871An integer underflow was addressed with improved input validation.
- CVE-2026-86868An authentication issue was addressed with improved state management.
- CVE-2026-84613An out-of-bounds write issue was addressed with improved bounds checking.
- CVE-2026-84582A privacy issue was addressed with improved access restrictions.
- CVE-2026-84579A logic issue was addressed with improved checks.
- CVE-2026-84547A memory corruption issue was addressed with improved input validation.
- CVE-2026-84508This issue was addressed with improved validation of the caller's access.
- CVE-2026-84490This issue was addressed through improved state management.
- CVE-2026-65396A buffer overflow was addressed with improved size validation.
- CVE-2026-65379The issue was addressed with improved handling of secure input state.
- CVE-2026-65372A race condition was addressed with additional validation.
- CVE-2026-65356An access issue was addressed with improved access controls.
- CVE-2026-28854The issue was addressed with additional app bundle integrity checks.
- CVE-2026-28853The issue was addressed with improved checks.
- CVE-2026-28850An authorization issue was addressed with improved state management.
- CVE-2026-86950An out-of-bounds write issue was addressed with improved bounds checking.
- CVE-2026-65388A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and d
- CVE-2026-65409A type confusion issue was addressed with improved memory handling.
- CVE-2026-84559A permissions issue was addressed with improved validation.
- CVE-2026-28960A denial-of-service issue was addressed with improved validation.
- CVE-2026-43741A logic issue was addressed with improved state management.