Apple vulnerabilities
4,637 CVEs and advisories name Apple as an affected vendor, 90 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-43306A logic issue was addressed with improved checks.
- CVE-2026-20685An attacker in a privileged network position may be able to leak sensitive information.
- CVE-2025-46311An inconsistent user interface issue was addressed with improved state management.
- CVE-2025-43524An access issue was addressed with additional sandbox restrictions.
- CVE-2026-28976An information leakage was addressed with additional validation.
- CVE-2026-28872A resource exhaustion issue was addressed with improved input validation.
- CVE-2026-43653The issue was addressed with improved memory handling.
- CVE-2026-28848A buffer overflow was addressed with improved bounds checking.
- CVE-2026-28995A logic issue was addressed with improved restrictions.
- CVE-2026-28983A type confusion issue was addressed with improved checks.
- CVE-2026-28940The issue was addressed with improved memory handling.
- CVE-2026-28917The issue was addressed with improved input validation.
- CVE-2026-39869The issue was addressed with improved memory handling.
- CVE-2026-28901The issue was addressed with improved memory handling.
- CVE-2026-28956A memory corruption issue was addressed with improved input validation.
- CVE-2026-28957An issue with app access to camera metadata was addressed with improved logic.
- CVE-2026-28941The issue was addressed with improved checks.
- CVE-2026-28994A use after free issue was addressed with improved memory management.
- CVE-2026-43668A use after free issue was addressed with improved memory management.
- CVE-2026-43652A permissions issue was addressed with additional restrictions.
- CVE-2026-28936The issue was addressed with improved checks.
- CVE-2026-28873This issue was addressed with additional entitlement checks.
- CVE-2026-28961This issue was addressed with improved checks.
- CVE-2026-28977The issue was addressed with improved bounds checks.
- CVE-2026-28920An information leakage was addressed with additional validation.
- CVE-2026-28993This issue was addressed by adding an additional prompt for user consent.
- CVE-2026-28985A null pointer dereference was addressed with improved input validation.
- CVE-2026-43659A race condition was addressed with additional validation.
- CVE-2026-28897A buffer overflow was addressed with improved input validation.
- CVE-2026-28946A use-after-free issue was addressed with improved memory management.