Apple vulnerabilities
4,637 CVEs and advisories name Apple as an affected vendor, 90 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-43743A race condition was addressed with improved state handling.
- CVE-2026-43722The issue was addressed with improved input sanitization.
- CVE-2026-43734A use-after-free issue was addressed with improved memory management.
- CVE-2026-43718A stack overflow was addressed with improved input validation.
- CVE-2026-28979An out-of-bounds access issue was addressed with improved bounds checking.
- CVE-2026-43735The issue was addressed with improved checks.
- CVE-2026-43703The issue was addressed with improved memory handling.
- CVE-2026-43742A use-after-free issue was addressed with improved memory management.
- CVE-2026-43715A use-after-free issue was addressed with improved memory management.
- CVE-2026-28898swift-nio-http2's HTTP/2-to-HTTP/1.1 codec did not validate pseudo-header values for control characters before placing them into the transla
- CVE-2025-30431The issue was addressed with improved checks.
- CVE-2025-24268A parsing issue in the handling of directory paths was addressed with improved path validation.
- CVE-2025-43339An access issue was addressed with additional sandbox restrictions.
- CVE-2025-46293This issue was addressed with improved handling of symlinks.
- CVE-2025-46315A permissions issue was addressed with additional restrictions.
- CVE-2025-31272The issue was addressed with improved checks.
- CVE-2025-30459A privacy issue was addressed by removing the vulnerable code.
- CVE-2025-24284This issue was addressed with improved checks to prevent unauthorized actions.
- CVE-2025-24165A permissions issue was addressed with additional restrictions.
- CVE-2025-46313A logging issue was addressed with improved data redaction.
- CVE-2025-43278This issue was addressed with improved handling of symlinks.
- CVE-2025-46308An authorization issue was addressed with improved state management.
- CVE-2022-48575A person with access to a Mac may be able to bypass Login Window.
- CVE-2022-26758A malicious application may cause unexpected changes in memory shared between processes.
- CVE-2025-43451A permissions issue was addressed by removing the vulnerable code.
- CVE-2025-46307A logic issue was addressed with improved restrictions.
- CVE-2025-46280An out-of-bounds read was addressed with improved bounds checking.
- CVE-2025-43289A logic issue was addressed with improved validation.
- CVE-2025-43290A permissions issue was addressed with additional restrictions.
- CVE-2025-46284A race condition was addressed with additional validation.