Apple
Vulnerability activity for Apple: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 150
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 234
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 2
- With exploit code
- 0
Last 365 days
- CVEs
- 437
- Critical (CVSS 9+)
- 18
- Exploited (CISA KEV)
- 10
- With exploit code
- 0
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 8.8HighSep 28, 2026Apple Multiple Products Memory corruptionCVE-2026-86950An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.Added to KEV Sep 29, 2026 · same day as publicationExploited1.2% likely
- 9.8CriticalAug 18, 2026Apple macOS Auth bypass / access controlCVE-2026-65400Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials.Added to KEV Aug 18, 2026Exploited1.7% likely
- 8.8HighMar 20, 2026Apple Multiple Products Memory corruptionCVE-2025-31277Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could allow the processing of maliciously crafted web content which may lead to memory corruption.Added to KEV Mar 20, 2026Exploited1.7% likely
- 5.5MediumMar 20, 2026Apple Multiple Products Memory corruptionCVE-2025-43520Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain a classic buffer overflow vulnerability which could allow a malicious application to cause unexpected system termination or write kernel memory.Added to KEV Mar 20, 2026Exploited
- 7.8HighMar 20, 2026Apple Multiple ProductsCVE-2025-43510Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes.Added to KEV Mar 20, 2026Exploited
- 7.8HighMar 5, 2026Apple iOS and iPadOS Memory corruptionCVE-2023-41974Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges.Added to KEV Mar 5, 2026Exploited2% likely
- 8.8HighMar 5, 2026Apple Multiple Products Memory corruptionCVE-2021-30952Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.Added to KEV Mar 5, 2026Exploited7% likely
- 8.8HighMar 5, 2026Apple Multiple Products Memory corruptionCVE-2023-43000Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory corruption.Added to KEV Mar 5, 2026Exploited4% likely
- 7.8HighFeb 12, 2026Apple Multiple Products Memory corruptionCVE-2026-20700Apple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow an attacker with memory write the capability to execute arbitrary code.Added to KEV Feb 12, 2026Exploited1.4% likely
- 8.8HighDec 15, 2025Apple Multiple Products Memory corruptionCVE-2025-43529Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Added to KEV Dec 15, 2025Exploited8.8% likely
- 8.8HighOct 20, 2025Apple Multiple ProductsCVE-2022-48503Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead to arbitrary code execution. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Added to KEV Oct 20, 2025Exploited3.2% likely
- 10.0CriticalAug 21, 2025Apple iOS, iPadOS, and macOS Memory corruptionCVE-2025-43300Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework.Added to KEV Aug 21, 2025 · same day as publicationExploited65% likely
- 4.2MediumJun 16, 2025Apple Multiple ProductsCVE-2025-43200Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link.Added to KEV Jun 16, 2025 · same day as publicationExploited1.2% likely
- 9.8CriticalApr 16, 2025Apple Multiple Products Memory corruptionCVE-2025-31200Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execution when processing an audio stream in a maliciously crafted media file.Added to KEV Apr 17, 2025 · same day as publicationExploited21% likely
- 9.8CriticalApr 16, 2025Apple Multiple ProductsCVE-2025-31201Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication.Added to KEV Apr 17, 2025 · same day as publicationExploited14% likely
- 10.0CriticalMar 11, 2025Apple Multiple Products Memory corruptionCVE-2025-24201Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Added to KEV Mar 13, 2025 · 1 day after publicationExploited3.8% likely
- 6.1MediumFeb 10, 2025Apple iOS and iPadOS Auth bypass / access controlCVE-2025-24200Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a locked device.Added to KEV Feb 12, 2025 · 1 day after publicationExploited4.5% likely
- 10.0CriticalJan 27, 2025Apple Multiple Products Memory corruptionCVE-2025-24085Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privileges.Added to KEV Jan 29, 2025 · 1 day after publicationExploited18% likelyExploit codeExploit-DB
- 8.8HighNov 19, 2024Apple Multiple Products Code / command injectionCVE-2024-44308Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to arbitrary code execution.Added to KEV Nov 21, 2024 · 1 day after publicationExploited9.9% likely
- 6.3MediumNov 19, 2024Apple Multiple Products XSSCVE-2024-44309Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting (XSS) attack.Added to KEV Nov 21, 2024 · 1 day after publicationExploited22% likely
- 7.8HighMar 5, 2024Apple Multiple Products Memory corruptionCVE-2024-23296Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.Added to KEV Mar 6, 2024 · same day as publicationExploited1.4% likely
- 7.8HighMar 5, 2024Apple Multiple Products Memory corruptionCVE-2024-23225Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS kernel contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.Added to KEV Mar 6, 2024 · same day as publicationExploited1.5% likely
- 7.0HighJan 9, 2024Apple Multiple Products Memory corruptionCVE-2022-48618Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check/time-of-use (TOCTOU) memory corruption vulnerability that allows an attacker with read and write capabilities to bypass Pointer Authentication.Added to KEV Jan 31, 2024 · 21 days after publicationExploited
- 8.8HighJan 23, 2024Apple Multiple Products Memory corruptionCVE-2024-23222Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Added to KEV Jan 23, 2024 · same day as publicationExploited11% likely
- 7.8HighSep 11, 2023Apple Multiple Products Code / command injectionCVE-2023-41990Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file.Added to KEV Jan 8, 2024 · 118 days after publicationExploited1.4% likely
Recent
- –UnscoredOct 29, 2026Apple containerCVE-2026-113957An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the one they pinned. The fix compares the returned digest to the pinned digest and fails the pull on a mismatch. Tag pulls are exempt, because a tag is mutable by design. The fix also verifies the hash of manifests and blobs when they are fetched. This vulnerability is addressed in container version 1.6.0
- –UnscoredOct 28, 2026Apple swift-cryptoCVE-2026-86983A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length. This vulnerability is addressed in swift-crypto version 5.0.3.
- –UnscoredOct 28, 2026AppleADV-cccs-c0bbd6b0af73Serial number: AV26-1099 Date: October 28, 2026 As of October 26, 2026, Apple is affected by vulnerabilities in the following products: iOS and iPadOS Prior to 18.7.11 Prior to 26.7.2 Prior to 27.2 MacOS (Golden Gate/Tahoe/Sequoia) Prior to 27.2 Prior to 26.7.2 Prior to 15.8.2 visionOS Prior to 27.2 tvOS Prior to 27.2 watchOS Prior to 27.2 Safari Prior to 27.2 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become avail
- 8.8HighOct 26, 2026Apple macOS Memory corruptionCVE-2026-86929An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to arbitrary code execution.
- 5.5MediumOct 26, 2026Apple iOS and iPadOS Auth bypass / access controlCVE-2026-86925An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.
- 7.8HighOct 26, 2026Apple iOS and iPadOS Memory corruptionCVE-2026-86916A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2. An app may be able to execute arbitrary code with kernel privileges.
- 8.4HighOct 26, 2026Apple macOSCVE-2026-65327A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A local attacker may be able to elevate their privileges.
- 8.8HighOct 26, 2026Apple iOS and iPadOS Memory corruptionCVE-2026-64759An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted image may lead to arbitrary code execution.
- 8.8HighOct 26, 2026Apple macOS Privilege escalationCVE-2026-113947This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2. Unpacking a maliciously crafted archive may lead to unexpected app termination or arbitrary code execution.
- 6.5MediumOct 26, 2026Apple macOS Memory corruptionCVE-2026-113943An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
- 6.5MediumOct 26, 2026Apple macOS Memory corruptionCVE-2026-113939An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
- 6.5MediumOct 26, 2026Apple iOS and iPadOS Information disclosureCVE-2026-113913An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing web content may disclose sensitive information.
- 5.3MediumOct 26, 2026Apple macOSCVE-2026-112708A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt process memory.
- 8.8HighOct 26, 2026Apple iOS and iPadOS Memory corruptionCVE-2026-112688A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Parsing a file may lead to an unexpected app termination or arbitrary code execution.
- –UnscoredOct 26, 2026Apple macOS Auth bypass / access controlCVE-2026-112677An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An application may be able to execute arbitrary code with system privileges.
- 8.8HighOct 26, 2026Apple Safari Memory corruptionCVE-2026-112659A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
- 8.8HighOct 26, 2026Apple Safari Memory corruptionCVE-2026-112655A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
- 8.8HighOct 26, 2026Apple Safari Memory corruptionCVE-2026-112651A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
- 6.5MediumOct 26, 2026Apple iOS and iPadOS Memory corruptionCVE-2026-112646An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2. An app may be able to cause unexpected system termination or corrupt process memory.
- 8.8HighOct 26, 2026Apple Safari Memory corruptionCVE-2026-112637A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
- 6.5MediumOct 26, 2026Apple iOS and iPadOS Memory corruptionCVE-2026-112634An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted image may lead to unexpected app termination.
- 6.5MediumOct 26, 2026Apple iOS and iPadOS Memory corruptionCVE-2026-112633An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may lead to unexpected app termination.
- 6.5MediumOct 26, 2026Apple iOS and iPadOS Memory corruptionCVE-2026-112629An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted image may lead to unexpected app termination.
- 8.8HighOct 26, 2026Apple Safari Memory corruptionCVE-2026-112626A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
- 8.8HighOct 26, 2026Apple Safari Memory corruptionCVE-2026-112623A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
- 5.5MediumOct 26, 2026Apple iOS and iPadOS Auth bypass / access controlCVE-2026-112618An access issue was addressed with improved access restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, visionOS 27.2. An app may be able to access sensitive user data.
- 5.5MediumOct 26, 2026Apple macOS Information disclosureCVE-2026-112617An information disclosure issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user data.
- 5.5MediumOct 26, 2026Apple iOS and iPadOS Auth bypass / access controlCVE-2026-112616An authorization issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.
- 6.5MediumOct 26, 2026Apple iOS and iPadOS Memory corruptionCVE-2026-112614An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may lead to unexpected app termination.
- 5.5MediumOct 26, 2026Apple iOS and iPadOS Auth bypass / access controlCVE-2026-112609This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.
- 5.5MediumOct 26, 2026Apple iOS and iPadOS Auth bypass / access controlCVE-2026-112559An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
- 4.8MediumOct 26, 2026Apple macOSCVE-2026-112556A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker may tamper with code-signed applications to execute arbitrary code in the application's context.
- 5.5MediumOct 26, 2026Apple iOS and iPadOS Memory corruptionCVE-2026-112547A type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.
- 5.5MediumOct 26, 2026Apple macOS Auth bypass / access controlCVE-2026-112533An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.
- 5.5MediumOct 26, 2026Apple macOS Auth bypass / access controlCVE-2026-112506A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user data.
- 7.8HighOct 26, 2026Apple macOSCVE-2026-112484This issue was addressed with improved file handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application may be able to execute arbitrary code with system privileges.
- 4.3MediumOct 26, 2026Apple macOS Memory corruptionCVE-2026-112471A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may lead to unexpected process termination.
- 7.1HighOct 26, 2026Apple macOS Memory corruptionCVE-2026-112457A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker on the local network may be able to cause unexpected system termination or corrupt process memory.
- 5.5MediumOct 26, 2026Apple iOS and iPadOS Auth bypass / access controlCVE-2026-112455An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
- 8.8HighOct 26, 2026Apple macOSCVE-2026-112438A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An unprivileged attacker may be able to execute arbitrary code as root.
- 8.1HighOct 26, 2026Apple macOS Auth bypass / access controlCVE-2026-112427An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execution.
- –UnscoredOct 26, 2026Apple iOS and iPadOS Memory corruptionCVE-2026-86972A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted audio file may lead to memory corruption.
- 7.1HighOct 26, 2026Apple iOS and iPadOS Memory corruptionCVE-2026-113912An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
- –UnscoredOct 26, 2026Apple Safari Memory corruptionCVE-2026-113904A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected proce
- –UnscoredOct 26, 2026Apple macOSCVE-2026-112568A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may bypass Gatekeeper checks.
- –UnscoredOct 26, 2026Apple macOS Information disclosureCVE-2026-112704An information leakage was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to break out of its sandbox.
- –UnscoredOct 26, 2026Apple iOS and iPadOS Memory corruptionCVE-2026-112456An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to heap corruption.
- 6.5MediumOct 26, 2026Apple macOS Memory corruptionCVE-2026-112544An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a malicious disk image may cause unexpected system termination.
- –UnscoredOct 26, 2026Apple macOS Memory corruptionCVE-2026-112525An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.
- –UnscoredOct 26, 2026Apple iOS and iPadOSCVE-2026-86987An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker may be able to access sensitive user data.
Top products
- iOS and iPadOS213 CVEs in the last year, 14 critical, 1 exploited
- Safari124 CVEs in the last year
- macOS67 CVEs in the last year, 4 critical, 1 exploited
- Multiple Products8 CVEs in the last year, 8 exploited
- Xcode6 CVEs in the last year
- Container2 CVEs in the last year
- swift-crypto1 CVE in the last year
- private cloud compute1 CVE in the last year
- macOS Sequoia1 CVE in the last year
- ipados1 CVE in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- CCCS (Canada) · Oct 28, 2026Apple security advisory (AV26-1099)ADV-cccs-c0bbd6b0af73
- Apple · Oct 26, 2026macOS Sequoia 15.8.2CVE-2026-112415CVE-2026-112416CVE-2026-112466CVE-2026-112468CVE-2026-112469CVE-2026-112470
- Apple · Oct 26, 2026tvOS 27.2CVE-2026-112416CVE-2026-112446CVE-2026-112454CVE-2026-112466CVE-2026-112468CVE-2026-112469
- Apple · Oct 26, 2026iOS 18.7.11 and iPadOS 18.7.11CVE-2026-65339CVE-2026-86950CVE-2026-86990
- Apple · Oct 26, 2026iOS 26.7.2 and iPadOS 26.7.2CVE-2026-112415CVE-2026-112416CVE-2026-112466CVE-2026-112468CVE-2026-112469CVE-2026-112470
- Apple · Oct 26, 2026macOS Tahoe 26.7.2CVE-2026-112415CVE-2026-112416CVE-2026-112467CVE-2026-112468CVE-2026-112470CVE-2026-112525
- Apple · Oct 26, 2026Safari 27.2CVE-2026-112599CVE-2026-112615CVE-2026-112621CVE-2026-112623CVE-2026-112640CVE-2026-112651
- Apple · Oct 26, 2026macOS Golden Gate 27.2CVE-2026-112415CVE-2026-112416CVE-2026-112446CVE-2026-112454CVE-2026-112467CVE-2026-112525
- Apple · Oct 26, 2026visionOS 27.2CVE-2026-112415CVE-2026-112416CVE-2026-112446CVE-2026-112454CVE-2026-112466CVE-2026-112468
- Apple · Oct 26, 2026iOS 27.2 and iPadOS 27.2CVE-2026-112415CVE-2026-112416CVE-2026-112446CVE-2026-112454CVE-2026-112466CVE-2026-112468
- Apple · Oct 26, 2026watchOS 27.2CVE-2026-112432CVE-2026-112446CVE-2026-112454CVE-2026-112466CVE-2026-112470CVE-2026-112518
- Apple · Oct 23, 2026iOS 27.1ADV-apple-413fcf7a4145
- Apple · Oct 19, 2026macOS 27.2 RC (26B118)ADV-apple-ea80849e930a
- Apple · Oct 19, 2026watchOS 27.2 RC (24S116)ADV-apple-ab1fb8b17ad8
- Apple · Oct 19, 2026iOS 27.2 RC (24B115)ADV-apple-71e279a39126
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.