Apple known exploited vulnerabilities
The Beam CVE database tracks 95 known exploited vulnerabilities for Apple: 9 critical, 71 high and 15 medium severity. The newest is CVE-2026-86950, published Sep 28, 2026.
These are the Apple vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog: flaws with confirmed exploitation in the wild. Each entry links the vendor bulletin and CISA’s required action.
- Vulnerabilities tracked
- 95
- Critical
- 9
- Known exploited (CISA KEV)
- 95
- Published in the last 30 days
- 1
All entries, newest first
CVE-2026-86950
Apple Multiple Products Out-of-Bounds Write Vulnerability
high8.8ExploitedSep 28, 2026CVE-2026-65400
Apple macOS Improper Authentication Vulnerability
critical9.8ExploitedAug 6, 2026CVE-2026-20700
Apple Multiple Buffer Overflow Vulnerability
high7.8ExploitedFeb 11, 2026CVE-2025-43529
Apple Multiple Products Use-After-Free WebKit Vulnerability
high8.8ExploitedDec 17, 2025CVE-2025-43510
Apple Multiple Products Improper Locking Vulnerability
high7.8ExploitedDec 12, 2025CVE-2025-43520
Apple Multiple Products Classic Buffer Overflow Vulnerability
medium5.5ExploitedDec 12, 2025CVE-2023-43000
Apple Multiple products Use-After-Free Vulnerability
high8.8ExploitedNov 5, 2025CVE-2025-43300
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
critical10.0ExploitedAug 21, 2025CVE-2025-31277
Apple Multiple Products Buffer Overflow Vulnerability
high8.8ExploitedJul 30, 2025CVE-2025-43200
Apple Multiple Products Unspecified Vulnerability
medium4.2ExploitedJun 16, 2025CVE-2025-31200
Apple Multiple Products Memory Corruption Vulnerability
critical9.8ExploitedApr 16, 2025CVE-2025-31201
Apple Multiple Products Arbitrary Read and Write Vulnerability
critical9.8ExploitedApr 16, 2025CVE-2025-24201
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
critical10.0ExploitedMar 11, 2025CVE-2025-24200
Apple iOS and iPadOS Incorrect Authorization Vulnerability
medium6.1ExploitedFeb 10, 2025CVE-2025-24085
Apple Multiple Products Use-After-Free Vulnerability
critical10.0ExploitedJan 27, 2025CVE-2024-44308
Apple Multiple Products Code Execution Vulnerability
high8.8ExploitedNov 20, 2024CVE-2024-44309
Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability
medium6.3ExploitedNov 20, 2024CVE-2024-23225
Apple Multiple Products Memory Corruption Vulnerability
high7.8ExploitedMar 5, 2024CVE-2024-23296
Apple Multiple Products Memory Corruption Vulnerability
high7.8ExploitedMar 5, 2024CVE-2024-23222
Apple Multiple Products WebKit Type Confusion Vulnerability
high8.8ExploitedJan 23, 2024CVE-2023-41974
Apple iOS and iPadOS Use-After-Free Vulnerability
high7.8ExploitedJan 10, 2024CVE-2022-48618
Apple Multiple Products Memory Corruption Vulnerability
high7.0ExploitedJan 9, 2024CVE-2023-42916
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
medium6.5ExploitedNov 30, 2023CVE-2023-42917
Apple Multiple Products WebKit Memory Corruption Vulnerability
high8.8ExploitedNov 30, 2023CVE-2023-42824
Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability
high7.8ExploitedOct 4, 2023CVE-2023-41991
Apple Multiple Products Improper Certificate Validation Vulnerability
medium5.5ExploitedSep 21, 2023CVE-2023-41992
Apple Multiple Products Kernel Privilege Escalation Vulnerability
high7.8ExploitedSep 21, 2023CVE-2023-41993
Apple Multiple Products WebKit Code Execution Vulnerability
high8.8ExploitedSep 21, 2023CVE-2023-41990
Apple Multiple Products Code Execution Vulnerability
high7.8ExploitedSep 12, 2023CVE-2023-41061
Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability
high7.8ExploitedSep 7, 2023CVE-2023-41064
Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability
high7.8ExploitedSep 7, 2023CVE-2022-48503
Apple Multiple Products Unspecified Vulnerability
high8.8ExploitedAug 14, 2023CVE-2023-37450
Apple Multiple Products WebKit Code Execution Vulnerability
high8.8ExploitedJul 27, 2023CVE-2023-38606
Apple Multiple Products Kernel Unspecified Vulnerability
medium5.5ExploitedJul 27, 2023CVE-2023-28204
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
medium6.5ExploitedJun 23, 2023CVE-2023-32373
Apple Multiple Products WebKit Use-After-Free Vulnerability
high8.8ExploitedJun 23, 2023CVE-2023-32409
Apple Multiple Products WebKit Sandbox Escape Vulnerability
high8.6ExploitedJun 23, 2023CVE-2023-32434
Apple Multiple Products Integer Overflow Vulnerability
high7.8ExploitedJun 23, 2023CVE-2023-32435
Apple Multiple Products WebKit Memory Corruption Vulnerability
high8.8ExploitedJun 23, 2023CVE-2023-32439
Apple Multiple Products WebKit Type Confusion Vulnerability
high8.8ExploitedJun 23, 2023CVE-2023-28205
Apple Multiple Products WebKit Use-After-Free Vulnerability
high8.8ExploitedApr 10, 2023CVE-2023-28206
Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability
high8.6ExploitedApr 10, 2023CVE-2023-23529
Apple Multiple Products WebKit Type Confusion Vulnerability
high8.8ExploitedFeb 27, 2023CVE-2022-42856
Apple iOS Type Confusion Vulnerability
high8.8ExploitedDec 15, 2022CVE-2022-42827
Apple iOS and iPadOS Out-of-Bounds Write Vulnerability
high7.8ExploitedNov 1, 2022CVE-2022-32917
Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability
high7.8ExploitedSep 20, 2022CVE-2022-32893
Apple iOS and macOS Out-of-Bounds Write Vulnerability
high8.8ExploitedAug 24, 2022CVE-2022-32894
Apple iOS and macOS Out-of-Bounds Write Vulnerability
high7.8ExploitedAug 24, 2022CVE-2022-22674
Apple macOS Out-of-Bounds Read Vulnerability
medium5.5ExploitedMay 26, 2022CVE-2022-22675
Apple macOS Out-of-Bounds Write Vulnerability
high7.8ExploitedMay 26, 2022CVE-2022-22587
Apple Memory Corruption Vulnerability
critical9.8ExploitedMar 18, 2022CVE-2022-22620
Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability
high8.8ExploitedMar 18, 2022CVE-2021-30807
Apple Multiple Products Memory Corruption Vulnerability
high7.8ExploitedOct 19, 2021CVE-2021-30657
Apple macOS Unspecified Vulnerability
medium5.5ExploitedSep 8, 2021CVE-2021-30661
Apple Multiple Products WebKit Storage Use-After-Free Vulnerability
high8.8ExploitedSep 8, 2021CVE-2021-30663
Apple Multiple Products WebKit Integer Overflow Vulnerability
high8.8ExploitedSep 8, 2021CVE-2021-30665
Apple Multiple Products WebKit Memory Corruption Vulnerability
high8.8ExploitedSep 8, 2021CVE-2021-30666
Apple iOS WebKit Buffer Overflow Vulnerability
high8.8ExploitedSep 8, 2021CVE-2021-30713
Apple macOS Unspecified Vulnerability
high7.8ExploitedSep 8, 2021CVE-2021-30761
Apple iOS WebKit Memory Corruption Vulnerability
high8.8ExploitedSep 8, 2021CVE-2021-30762
Apple iOS WebKit Use-After-Free Vulnerability
high8.8ExploitedSep 8, 2021CVE-2021-30858
Apple iOS, iPadOS, macOS Use-After-Free Vulnerability
high8.8ExploitedAug 24, 2021CVE-2021-30860
Apple Multiple Products Integer Overflow Vulnerability
high7.8ExploitedAug 24, 2021CVE-2021-30869
Apple iOS, iPadOS, and macOS Type Confusion Vulnerability
high7.8ExploitedAug 24, 2021CVE-2021-30883
Apple Multiple Products Memory Corruption Vulnerability
high7.8ExploitedAug 24, 2021CVE-2021-30900
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
high7.8ExploitedAug 24, 2021CVE-2021-30952
Apple Multiple Products Integer Overflow or Wraparound Vulnerability
high7.8ExploitedAug 24, 2021CVE-2021-30983
Apple iOS and iPadOS Buffer Overflow Vulnerability
high7.8ExploitedAug 24, 2021CVE-2021-31010
Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability
high7.5ExploitedAug 24, 2021CVE-2021-1782
Apple Multiple Products Race Condition Vulnerability
high7.0ExploitedApr 2, 2021CVE-2021-1789
Apple Multiple Products Type Confusion Vulnerability
high8.8ExploitedApr 2, 2021CVE-2021-1870
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
critical9.8ExploitedApr 2, 2021CVE-2021-1871
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
critical9.8ExploitedApr 2, 2021CVE-2021-1879
Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability
medium6.1ExploitedApr 2, 2021CVE-2020-27930
Apple Multiple Products Memory Corruption Vulnerability
high7.8ExploitedDec 8, 2020CVE-2020-27932
Apple Multiple Products Type Confusion Vulnerability
high7.8ExploitedDec 8, 2020CVE-2020-27950
Apple Multiple Products Memory Initialization Vulnerability
medium5.5ExploitedDec 8, 2020CVE-2020-9907
Apple Multiple Products Memory Corruption Vulnerability
high7.8ExploitedOct 16, 2020CVE-2020-9934
Apple iOS, iPadOS, and macOS Input Validation Vulnerability
medium5.5ExploitedOct 16, 2020CVE-2020-9818
Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability
high8.8ExploitedJun 9, 2020CVE-2020-9819
Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability
medium4.3ExploitedJun 9, 2020CVE-2020-9859
Apple Multiple Products Code Execution Vulnerability
high7.8ExploitedJun 5, 2020CVE-2020-3837
Apple Multiple Products Memory Corruption Vulnerability
high7.8ExploitedFeb 27, 2020CVE-2019-7286
Apple Multiple Products Memory Corruption Vulnerability
high7.8ExploitedDec 18, 2019CVE-2019-7287
Apple iOS Memory Corruption Vulnerability
high7.8ExploitedDec 18, 2019CVE-2019-8506
Apple Multiple Products Type Confusion Vulnerability
high8.8ExploitedDec 18, 2019CVE-2019-8526
Apple macOS Use-After-Free Vulnerability
high7.8ExploitedDec 18, 2019CVE-2019-8605
Apple Multiple Products Use-After-Free Vulnerability
high7.8ExploitedDec 18, 2019CVE-2018-4344
Apple Multiple Products Memory Corruption Vulnerability
high7.8ExploitedApr 3, 2019CVE-2019-6223
Apple iOS and macOS Group Facetime Vulnerability
high7.5ExploitedMar 5, 2019CVE-2016-4655
Apple iOS Information Disclosure Vulnerability
medium5.5ExploitedAug 25, 2016CVE-2016-4656
Apple iOS Memory Corruption Vulnerability
high7.8ExploitedAug 25, 2016CVE-2016-4657
Apple iOS Webkit Memory Corruption Vulnerability
high8.8ExploitedAug 25, 2016CVE-2015-1130
Apple OS X Authentication Bypass Vulnerability
high7.8ExploitedApr 10, 2015CVE-2014-4404
Apple OS X Heap-Based Buffer Overflow Vulnerability
high7.8ExploitedSep 18, 2014
