Apple CVEs
4,637 CVEs and advisories name Apple as an affected vendor, 90 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-28827A parsing issue in the handling of directory paths was addressed with improved path validation.
- CVE-2026-28831An authorization issue was addressed with improved state management.
- CVE-2026-20693This issue was addressed through improved state management.
- CVE-2026-28866This issue was addressed with improved validation of symlinks.
- CVE-2026-28889A permissions issue was addressed with additional restrictions.
- CVE-2026-28893A privacy issue was addressed with improved handling of temporary files.
- CVE-2026-20631A logic issue was addressed with improved checks.
- CVE-2026-20670An authorization issue was addressed with improved state management.
- CVE-2026-20688A path handling issue was addressed with improved validation.
- CVE-2026-28892A permissions issue was addressed by removing the vulnerable code.
- CVE-2026-28867This issue was addressed with improved authentication.
- CVE-2026-28888A race condition was addressed with improved state handling.
- CVE-2026-20692A privacy issue was addressed with improved handling of user preferences.
- CVE-2026-28826A logic issue was addressed with improved restrictions.
- CVE-2026-28871A logic issue was addressed with improved checks.
- CVE-2026-20684A permissions issue was addressed with additional restrictions.
- CVE-2026-20651A privacy issue was addressed with improved handling of temporary files.
- CVE-2026-20643A cross-origin issue in the Navigation API was addressed with improved input validation.
- CVE-2023-43010The issue was addressed with improved memory handling.
- CVE-2026-20629A privacy issue was addressed with improved handling of temporary files.
- CVE-2026-20644The issue was addressed with improved memory handling.
- CVE-2026-20652The issue was addressed with improved memory handling.
- CVE-2026-20605The issue was addressed with improved memory handling.
- CVE-2026-20625A parsing issue in the handling of directory paths was addressed with improved path validation.
- CVE-2026-20648A privacy issue was addressed by moving sensitive data to a protected location.
- CVE-2026-20609The issue was addressed with improved memory handling.
- CVE-2026-20608This issue was addressed through improved state management.
- CVE-2026-20649A logging issue was addressed with improved data redaction.
- CVE-2026-20624An injection issue was addressed with improved validation.
- CVE-2026-20673A logic issue was addressed with improved checks.