Apple CVEs
4,637 CVEs and advisories name Apple as an affected vendor, 90 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-20610This issue was addressed with improved handling of symlinks.
- CVE-2026-20647This issue was addressed with improved data protection.
- CVE-2026-20606This issue was addressed by removing the vulnerable code.
- CVE-2025-43537A path handling issue was addressed with improved validation.
- CVE-2025-46306The issue was addressed with improved bounds checks.
- CVE-2025-46316An out-of-bounds read was addressed with improved input validation.
- CVE-2026-20613The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extract
- CVE-2025-31186A permissions issue was addressed with additional restrictions.
- CVE-2025-24090A permissions issue was addressed with additional restrictions.
- CVE-2025-43508A logging issue was addressed with improved data redaction.
- CVE-2024-44210This issue was addressed with improved permissions checking.
- CVE-2025-24089A permissions issue was addressed with additional restrictions.
- CVE-2024-54556This issue was addressed through improved state management.
- CVE-2024-44238The issue was addressed with improved bounds checks.
- CVE-2025-46297A permissions issue was addressed with additional restrictions.
- CVE-2025-46298The issue was addressed with improved memory handling.
- CVE-2025-46299A memory initialization issue was addressed with improved memory handling.
- CVE-2025-46286A logic issue was addressed with improved validation.
- CVE-2025-43514The issue was addressed with improved handling of caches.
- CVE-2025-46281A logic issue was addressed with improved checks.
- CVE-2025-46278The issue was addressed with improved handling of caches.
- CVE-2025-46279A permissions issue was addressed with additional restrictions.
- CVE-2025-43535The issue was addressed with improved memory handling.
- CVE-2025-46291A logic issue was addressed with improved validation.
- CVE-2025-43533The issue was addressed with improved bounds checks.
- CVE-2025-43529A use-after-free issue was addressed with improved memory management.
- CVE-2025-43475A logging issue was addressed with improved data redaction.
- CVE-2025-43526This issue was addressed with improved URL validation.
- CVE-2025-46288A permissions issue was addressed with additional restrictions.
- CVE-2025-43531A race condition was addressed with improved state handling.