Apple CVEs
4,637 CVEs and advisories name Apple as an affected vendor, 90 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-24145A privacy issue was addressed with improved private data redaction for log entries.
- CVE-2025-24153A buffer overflow issue was addressed with improved memory handling.
- CVE-2025-24104This issue was addressed with improved handling of symlinks.
- CVE-2024-54517The issue was addressed with improved bounds checks.
- CVE-2025-24128The issue was addressed by adding additional logic.
- CVE-2025-24094A race condition was addressed with additional validation.
- CVE-2025-24169A logging issue was addressed with improved data redaction.
- CVE-2024-54557A logic issue was addressed with improved restrictions.
- CVE-2025-24129A type confusion issue was addressed with improved checks.
- CVE-2024-54516A permissions issue was addressed with additional restrictions.
- CVE-2024-54541This issue was addressed through improved state management.
- CVE-2025-24152The issue was addressed with improved memory handling.
- CVE-2025-24113The issue was addressed with improved UI.
- CVE-2024-54536The issue was addressed with improved validation of environment variables.
- CVE-2025-24109A downgrade issue was addressed with additional code-signing restrictions.
- CVE-2024-54520A path handling issue was addressed with improved validation.
- CVE-2024-54470A logic issue was addressed with improved checks.
- CVE-2024-54535A path handling issue was addressed with improved logic.
- CVE-2024-40854A memory initialization issue was addressed with improved memory handling.
- CVE-2024-40839This issue was addressed through improved state management.
- CVE-2024-40771The issue was addressed with improved memory handling.
- CVE-2024-27856The issue was addressed with improved checks.
- CVE-2024-44136This issue was addressed through improved state management.
- CVE-2024-54540The issue was addressed with improved input sanitization.
- CVE-2018-4301This issue is fixed in SCSSU-201801.
- CVE-2024-44298A privacy issue was addressed with improved private data redaction for log entries.
- CVE-2024-44293A privacy issue was addressed with improved private data redaction for log entries.
- CVE-2024-44211This issue was addressed with improved validation of symlinks.
- CVE-2024-44231This issue was addressed through improved state management.
- CVE-2024-44292A privacy issue was addressed with improved private data redaction for log entries.