Apple CVEs
4,637 CVEs and advisories name Apple as an affected vendor, 90 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-8539A memory initialization issue was addressed with improved memory handling.
- CVE-2019-7291A denial of service issue was addressed with improved memory handling.
- CVE-2019-8532A permissions issue was addressed by removing vulnerable code and adding additional checks.
- CVE-2019-8509This issue was addressed by removing the vulnerable code.
- CVE-2019-8525A memory corruption issue was addressed with improved state management.
- CVE-2019-7288The issue was addressed with improved validation on the FaceTime server.
- CVE-2018-4474A memory consumption issue was addressed with improved memory handling.
- CVE-2019-6238A validation issue existed in the handling of symlinks.
- CVE-2018-4467A memory corruption issue was addressed with improved state management.
- CVE-2018-4448A memory initialization issue was addressed with improved memory handling.
- CVE-2018-4452A memory consumption issue was addressed with improved memory handling.
- CVE-2018-4468This issue was addressed by removing additional entitlements.
- CVE-2018-4451This issue is fixed in macOS Mojave 10.14.
- CVE-2018-4433A configuration issue was addressed with additional restrictions.
- CVE-2018-4444A logic issue was addressed with improved state management.
- CVE-2018-4391An inconsistent user interface issue was addressed with improved state management.
- CVE-2018-4428A lock screen issue allowed access to the share function on a locked device.
- CVE-2018-4381A resource exhaustion issue was addressed with improved input validation.
- CVE-2018-4390An inconsistent user interface issue was addressed with improved state management.
- CVE-2018-4339This issue was addressed with a new entitlement.
- CVE-2018-4296This issue is fixed in macOS Mojave 10.14.
- CVE-2020-9994A path handling issue was addressed with improved validation.
- CVE-2020-9997An information disclosure issue was addressed with improved state management.
- CVE-2020-9985A buffer overflow issue was addressed with improved memory handling.
- CVE-2020-9984An out-of-bounds read was addressed with improved input validation.
- CVE-2020-9990A race condition was addressed with additional validation.
- CVE-2020-9986A file access issue existed with certain home folder files.
- CVE-2020-9937An out-of-bounds write issue was addressed with improved bounds checking.
- CVE-2020-9940A buffer overflow issue was addressed with improved memory handling.
- CVE-2020-9927A memory corruption issue was addressed with improved input validation.