Apple CVEs
4,637 CVEs and advisories name Apple as an affected vendor, 90 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-28963A privacy issue was addressed by removing the vulnerable code.
- CVE-2026-28918An out-of-bounds access issue was addressed with improved bounds checking.
- CVE-2026-39870The issue was addressed with improved memory handling.
- CVE-2026-28959A buffer overflow was addressed with improved bounds checking.
- CVE-2026-28909Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaint
- CVE-2026-28950A logging issue was addressed with improved data redaction.
- CVE-2026-28815A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path, potentially
- CVE-2025-43236A type confusion issue was addressed with improved memory handling.
- CVE-2025-43257This issue was addressed with improved handling of symlinks.
- CVE-2024-40849A race condition was addressed with additional validation.
- CVE-2024-44303The issue was addressed with improved checks.
- CVE-2025-43210An out-of-bounds access issue was addressed with improved bounds checking.
- CVE-2024-44250A permissions issue was addressed with additional restrictions.
- CVE-2024-40858A permissions issue was addressed with additional restrictions.
- CVE-2025-43264The issue was addressed with improved memory handling.
- CVE-2024-44286This issue was addressed through improved state management.
- CVE-2024-44219A permissions issue was addressed with additional restrictions.
- CVE-2025-43202This issue was addressed with improved memory handling.
- CVE-2025-43238An integer overflow was addressed with improved input validation.
- CVE-2025-43219The issue was addressed with improved memory handling.
- CVE-2026-28864This issue was addressed with improved permissions checking.
- CVE-2026-20691An authorization issue was addressed with improved state management.
- CVE-2026-28833A permissions issue was addressed with additional restrictions.
- CVE-2026-28825An out-of-bounds write issue was addressed with improved bounds checking.
- CVE-2026-20668A logging issue was addressed with improved data redaction.
- CVE-2026-20687A use after free issue was addressed with improved memory management.
- CVE-2026-20701An access issue was addressed with additional sandbox restrictions.
- CVE-2025-43534A path handling issue was addressed with improved validation.
- CVE-2026-28868A logging issue was addressed with improved data redaction.
- CVE-2026-20633This issue was addressed with improved handling of symlinks.