Apple CVEs
4,637 CVEs and advisories name Apple as an affected vendor, 90 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-31223The issue was addressed with improved checks.
- CVE-2025-31235A double free issue was addressed with improved memory management.
- CVE-2025-24220A permissions issue was addressed with additional restrictions.
- CVE-2025-31219The issue was addressed with improved memory handling.
- CVE-2025-31258This issue was addressed by removing the vulnerable code.
- CVE-2025-30422A buffer overflow was addressed with improved input validation.
- CVE-2025-24132The issue was addressed with improved memory handling.
- CVE-2025-24091An app could impersonate system notifications.
- CVE-2025-24252A use-after-free issue was addressed with improved memory management.
- CVE-2025-31197The issue was addressed with improved checks.
- CVE-2025-24179A null pointer dereference was addressed with improved input validation.
- CVE-2025-24270This issue was addressed by removing the vulnerable code.
- CVE-2025-24271An access issue was addressed with improved access restrictions.
- CVE-2025-24206An authentication issue was addressed with improved state management.
- CVE-2025-24251The issue was addressed with improved checks.
- CVE-2025-31202A null pointer dereference was addressed with improved input validation.
- CVE-2025-31203An integer overflow was addressed with improved input validation.
- CVE-2025-30445A type confusion issue was addressed with improved checks.
- CVE-2025-31200A memory corruption issue was addressed with improved bounds checking.
- CVE-2025-31201This issue was addressed by removing the vulnerable code.
- CVE-2023-42983Processing a file may lead to a denial-of-service or potentially disclose memory contents.
- CVE-2023-42977A path handling issue was addressed with improved validation.
- CVE-2023-42961A path handling issue was addressed with improved validation.
- CVE-2023-42982Processing a file may lead to a denial-of-service or potentially disclose memory contents.
- CVE-2023-42970A use-after-free issue was addressed with improved memory management.
- CVE-2023-38614A permissions issue was addressed with additional restrictions.
- CVE-2023-42875Processing web content may lead to arbitrary code execution.
- CVE-2023-42969An app may be able to break out of its sandbox.
- CVE-2023-41076An app may be able to elevate privileges.
- CVE-2023-42973Private Browsing tabs may be accessed without authentication.