Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

Apple: actively exploited vulnerabilities

95 vulnerabilities in Apple products (iOS / iPadOS / macOS, Safari / WebKit, iOS / iPadOS…) are in CISA’s catalog of exploited vulnerabilities, 2 of them added in the last 90 days. Last added: September 29, 2026.

Apple security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Apple category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

Follow a single Apple product (iOS / iPadOS / macOS, Safari / WebKit…) rather than the whole brand.

  • iOS / iPadOS / macOS39 vulnerabilities, Phones and tablets
  • Safari / WebKit36 vulnerabilities, Browsers
  • iOS / iPadOS12 vulnerabilities, Phones and tablets
  • macOS (OS X)8 vulnerabilities, Operating systems

Name used by CISA: Apple. Product families: indicative classification by this site.

Pace of additions

Number of Apple vulnerabilities added to CISA’s KEV catalog, per 30-day period (the last one, still in progress, ends on October 3, 2026). Source: CISA KEV catalog.
Catalog additions per 30-day period
PeriodVulnerabilities added
Sep 9, 2025 to Oct 8, 20250
Oct 9, 2025 to Nov 7, 20251
Nov 8, 2025 to Dec 7, 20250
Dec 8, 2025 to Jan 6, 20261
Jan 7, 2026 to Feb 5, 20260
Feb 6, 2026 to Mar 7, 20264
Mar 8, 2026 to Apr 6, 20263
Apr 7, 2026 to May 6, 20260
May 7, 2026 to Jun 5, 20260
Jun 6, 2026 to Jul 5, 20260
Jul 6, 2026 to Aug 4, 20260
Aug 5, 2026 to Sep 3, 20261
Sep 4, 2026 to Oct 3, 2026 (in progress)1

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Apple list.

  1. Rank 1

    Apple iOS / iPadOS / macOSCVE-2026-86950

    Apple Multiple Products Out-of-Bounds Write Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 8.8high

    Added Sep 29, 2026

  2. Rank 2

    Apple macOS (OS X)CVE-2026-65400

    Apple macOS Improper Authentication Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Aug 18, 2026

  3. Rank 3

    Apple Safari / WebKitCVE-2025-31277

    Apple Multiple Products Buffer Overflow Vulnerability

    CVSS severity 8.8high

    Added Mar 20, 2026

  4. Rank 4

    Apple Safari / WebKitCVE-2023-43000

    Apple Multiple products Use-After-Free Vulnerability

    CVE from 2023, added in 2026

    CVSS severity 8.8high

    Added Mar 5, 2026

  5. Rank 5

    Apple Safari / WebKitCVE-2025-43529

    Apple Multiple Products Use-After-Free WebKit Vulnerability

    CVSS severity 8.8high

    Added Dec 15, 2025

  6. Rank 6

    Apple Safari / WebKitCVE-2022-48503

    Apple Multiple Products Unspecified Vulnerability

    CVE from 2022, added in 2025

    CVSS severity 8.8high

    Added Oct 20, 2025

  7. Rank 7

    Apple iOS / iPadOS / macOSCVE-2025-43510

    Apple Multiple Products Improper Locking Vulnerability

    CVSS severity 7.8high

    Added Mar 20, 2026

  8. Rank 8

    Apple Safari / WebKitCVE-2021-30952

    Apple Multiple Products Integer Overflow or Wraparound Vulnerability

    CVE from 2021, added in 2026

    CVSS severity 7.8high

    Added Mar 5, 2026

  9. Rank 9

    Apple iOS / iPadOSCVE-2023-41974

    Apple iOS and iPadOS Use-After-Free Vulnerability

    CVE from 2023, added in 2026

    CVSS severity 7.8high

    Added Mar 5, 2026

  10. Rank 10

    Apple iOS / iPadOS / macOSCVE-2026-20700

    Apple Multiple Buffer Overflow Vulnerability

    CVSS severity 7.8high

    Added Feb 12, 2026

Show 85 more vulnerabilities
  1. Rank 11

    Apple iOS / iPadOS / macOSCVE-2025-43520

    Apple Multiple Products Classic Buffer Overflow Vulnerability

    CVSS severity 5.5medium

    Added Mar 20, 2026

  2. Rank 12

    Apple iOS / iPadOS / macOSCVE-2025-43300

    Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

    CVSS severity 10.0critical

    Added Aug 21, 2025

  3. Rank 13

    Apple Safari / WebKitCVE-2025-24201

    Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

    CVSS severity 10.0critical

    Added Mar 13, 2025

  4. Rank 14

    Apple iOS / iPadOS / macOSCVE-2025-24085

    Apple Multiple Products Use-After-Free Vulnerability

    CVSS severity 10.0critical

    Added Jan 29, 2025

  5. Rank 15

    Apple iOS / iPadOS / macOSCVE-2025-31200

    Apple Multiple Products Memory Corruption Vulnerability

    CVSS severity 9.8critical

    Added Apr 17, 2025

  6. Rank 16

    Apple iOS / iPadOS / macOSCVE-2025-31201

    Apple Multiple Products Arbitrary Read and Write Vulnerability

    CVSS severity 9.8critical

    Added Apr 17, 2025

  7. Rank 17

    Apple iOS / iPadOS / macOSCVE-2022-22587

    Apple Memory Corruption Vulnerability

    CVSS severity 9.8critical

    Added Jan 28, 2022

  8. Rank 18

    Apple Safari / WebKitCVE-2021-1870

    Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  9. Rank 19

    Apple Safari / WebKitCVE-2021-1871

    Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  10. Rank 20

    Apple Safari / WebKitCVE-2024-44308

    Apple Multiple Products Code Execution Vulnerability

    CVSS severity 8.8high

    Added Nov 21, 2024

  11. Rank 21

    Apple Safari / WebKitCVE-2024-23222

    Apple Multiple Products WebKit Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Jan 23, 2024

  12. Rank 22

    Apple Safari / WebKitCVE-2023-42917

    Apple Multiple Products WebKit Memory Corruption Vulnerability

    CVSS severity 8.8high

    Added Dec 4, 2023

  13. Rank 23

    Apple Safari / WebKitCVE-2023-41993

    Apple Multiple Products WebKit Code Execution Vulnerability

    CVSS severity 8.8high

    Added Sep 25, 2023

  14. Rank 24

    Apple Safari / WebKitCVE-2023-37450

    Apple Multiple Products WebKit Code Execution Vulnerability

    CVSS severity 8.8high

    Added Jul 13, 2023

  15. Rank 25

    Apple Safari / WebKitCVE-2023-32435

    Apple Multiple Products WebKit Memory Corruption Vulnerability

    CVSS severity 8.8high

    Added Jun 23, 2023

  16. Rank 26

    Apple Safari / WebKitCVE-2023-32439

    Apple Multiple Products WebKit Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Jun 23, 2023

  17. Rank 27

    Apple Safari / WebKitCVE-2023-32373

    Apple Multiple Products WebKit Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added May 22, 2023

  18. Rank 28

    Apple Safari / WebKitCVE-2023-28205

    Apple Multiple Products WebKit Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Apr 10, 2023

  19. Rank 29

    Apple Safari / WebKitCVE-2023-23529

    Apple Multiple Products WebKit Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Feb 14, 2023

  20. Rank 30

    Apple Safari / WebKitCVE-2022-42856

    Apple iOS Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Dec 14, 2022

  21. Rank 31

    Apple Safari / WebKitCVE-2022-32893

    Apple iOS and macOS Out-of-Bounds Write Vulnerability

    CVSS severity 8.8high

    Added Aug 18, 2022

  22. Rank 32

    Apple Safari / WebKitCVE-2016-4657

    Apple iOS Webkit Memory Corruption Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 8.8high

    Added May 24, 2022

  23. Rank 33

    Apple Safari / WebKitCVE-2019-8506

    Apple Multiple Products Type Confusion Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 8.8high

    Added May 4, 2022

  24. Rank 34

    Apple Safari / WebKitCVE-2021-1789

    Apple Multiple Products Type Confusion Vulnerability

    CVSS severity 8.8high

    Added May 4, 2022

  25. Rank 35

    Apple Safari / WebKitCVE-2022-22620

    Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Feb 11, 2022

  26. Rank 36

    Apple iOS / iPadOSCVE-2020-9818

    Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  27. Rank 37

    Apple Safari / WebKitCVE-2021-30661

    Apple Multiple Products WebKit Storage Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  28. Rank 38

    Apple Safari / WebKitCVE-2021-30663

    Apple Multiple Products WebKit Integer Overflow Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  29. Rank 39

    Apple Safari / WebKitCVE-2021-30665

    Apple Multiple Products WebKit Memory Corruption Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  30. Rank 40

    Apple Safari / WebKitCVE-2021-30666

    Apple iOS WebKit Buffer Overflow Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  31. Rank 41

    Apple Safari / WebKitCVE-2021-30761

    Apple iOS WebKit Memory Corruption Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  32. Rank 42

    Apple Safari / WebKitCVE-2021-30762

    Apple iOS WebKit Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  33. Rank 43

    Apple Safari / WebKitCVE-2021-30858

    Apple iOS, iPadOS, macOS Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  34. Rank 44

    Apple Safari / WebKitCVE-2023-32409

    Apple Multiple Products WebKit Sandbox Escape Vulnerability

    CVSS severity 8.6high

    Added May 22, 2023

  35. Rank 45

    Apple iOS / iPadOS / macOSCVE-2023-28206

    Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

    CVSS severity 8.6high

    Added Apr 10, 2023

  36. Rank 46

    Apple iOS / iPadOS / macOSCVE-2024-23225

    Apple Multiple Products Memory Corruption Vulnerability

    CVSS severity 7.8high

    Added Mar 6, 2024

  37. Rank 47

    Apple iOS / iPadOS / macOSCVE-2024-23296

    Apple Multiple Products Memory Corruption Vulnerability

    CVSS severity 7.8high

    Added Mar 6, 2024

  38. Rank 48

    Apple iOS / iPadOS / macOSCVE-2023-41990

    Apple Multiple Products Code Execution Vulnerability

    CVSS severity 7.8high

    Added Jan 8, 2024

  39. Rank 49

    Apple iOS / iPadOSCVE-2023-42824

    Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Oct 5, 2023

  40. Rank 50

    Apple iOS / iPadOS / macOSCVE-2023-41992

    Apple Multiple Products Kernel Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Sep 25, 2023

  41. Rank 51

    Apple iOS / iPadOSCVE-2023-41061

    Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability

    CVSS severity 7.8high

    Added Sep 11, 2023

  42. Rank 52

    Apple iOS / iPadOS / macOSCVE-2023-41064

    Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

    CVSS severity 7.8high

    Added Sep 11, 2023

  43. Rank 53

    Apple iOS / iPadOS / macOSCVE-2023-32434

    Apple Multiple Products Integer Overflow Vulnerability

    CVSS severity 7.8high

    Added Jun 23, 2023

  44. Rank 54

    Apple macOS (OS X)CVE-2019-8526

    Apple macOS Use-After-Free Vulnerability

    CVE from 2019, added in 2023

    CVSS severity 7.8high

    Added Apr 17, 2023

  45. Rank 55

    Apple iOS / iPadOS / macOSCVE-2021-30900

    Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

    CVE from 2021, added in 2023

    CVSS severity 7.8high

    Added Mar 30, 2023

  46. Rank 56

    Apple iOS / iPadOSCVE-2022-42827

    Apple iOS and iPadOS Out-of-Bounds Write Vulnerability

    CVSS severity 7.8high

    Added Oct 25, 2022

  47. Rank 57

    Apple iOS / iPadOS / macOSCVE-2022-32917

    Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

    CVSS severity 7.8high

    Added Sep 14, 2022

  48. Rank 58

    Apple iOS / iPadOS / macOSCVE-2022-32894

    Apple iOS and macOS Out-of-Bounds Write Vulnerability

    CVSS severity 7.8high

    Added Aug 18, 2022

  49. Rank 59

    Apple iOS / iPadOS / macOSCVE-2018-4344

    Apple Multiple Products Memory Corruption Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 7.8high

    Added Jun 27, 2022

  50. Rank 60

    Apple iOS / iPadOS / macOSCVE-2019-8605

    Apple Multiple Products Use-After-Free Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 7.8high

    Added Jun 27, 2022

  51. Rank 61

    Apple iOS / iPadOS / macOSCVE-2020-3837

    Apple Multiple Products Memory Corruption Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 7.8high

    Added Jun 27, 2022

  52. Rank 62

    Apple iOS / iPadOSCVE-2020-9907

    Apple Multiple Products Memory Corruption Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 7.8high

    Added Jun 27, 2022

  53. Rank 63

    Apple iOS / iPadOSCVE-2021-30983

    Apple iOS and iPadOS Buffer Overflow Vulnerability

    CVSS severity 7.8high

    Added Jun 27, 2022

  54. Rank 64

    Apple iOS / iPadOSCVE-2016-4656

    Apple iOS Memory Corruption Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 7.8high

    Added May 24, 2022

  55. Rank 65

    Apple iOS / iPadOS / macOSCVE-2019-7286

    Apple Multiple Products Memory Corruption Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 7.8high

    Added May 23, 2022

  56. Rank 66

    Apple iOS / iPadOSCVE-2019-7287

    Apple iOS Memory Corruption Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 7.8high

    Added May 23, 2022

  57. Rank 67

    Apple iOS / iPadOS / macOSCVE-2021-30883

    Apple Multiple Products Memory Corruption Vulnerability

    CVSS severity 7.8high

    Added May 23, 2022

  58. Rank 68

    Apple macOS (OS X)CVE-2022-22675

    Apple macOS Out-of-Bounds Write Vulnerability

    CVSS severity 7.8high

    Added Apr 4, 2022

  59. Rank 69

    Apple macOS (OS X)CVE-2014-4404

    Apple OS X Heap-Based Buffer Overflow Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 7.8high

    Added Feb 10, 2022

  60. Rank 70

    Apple macOS (OS X)CVE-2015-1130

    Apple OS X Authentication Bypass Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 7.8high

    Added Feb 10, 2022

  61. Rank 71

    Apple iOS / iPadOS / macOSCVE-2020-27930

    Apple Multiple Products Memory Corruption Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  62. Rank 72

    Apple iOS / iPadOS / macOSCVE-2020-27932

    Apple Multiple Products Type Confusion Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  63. Rank 73

    Apple iOS / iPadOS / macOSCVE-2020-9859

    Apple Multiple Products Code Execution Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  64. Rank 74

    Apple macOS (OS X)CVE-2021-30713

    Apple macOS Unspecified Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  65. Rank 75

    Apple iOS / iPadOS / macOSCVE-2021-30807

    Apple Multiple Products Memory Corruption Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  66. Rank 76

    Apple iOS / iPadOS / macOSCVE-2021-30860

    Apple Multiple Products Integer Overflow Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  67. Rank 77

    Apple iOS / iPadOS / macOSCVE-2021-30869

    Apple iOS, iPadOS, and macOS Type Confusion Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  68. Rank 78

    Apple iOS / iPadOS / macOSCVE-2021-31010

    Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

    CVSS severity 7.5high

    Added Aug 25, 2022

  69. Rank 79

    Apple iOS / iPadOS / macOSCVE-2019-6223

    Apple iOS and macOS Group Facetime Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  70. Rank 80

    Apple iOS / iPadOS / macOSCVE-2022-48618

    Apple Multiple Products Memory Corruption Vulnerability

    CVE from 2022, added in 2024

    CVSS severity 7.0high

    Added Jan 31, 2024

  71. Rank 81

    Apple iOS / iPadOS / macOSCVE-2021-1782

    Apple Multiple Products Race Condition Vulnerability

    CVSS severity 7.0high

    Added Nov 3, 2021

  72. Rank 82

    Apple Safari / WebKitCVE-2023-42916

    Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

    CVSS severity 6.5medium

    Added Dec 4, 2023

  73. Rank 83

    Apple Safari / WebKitCVE-2023-28204

    Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

    CVSS severity 6.5medium

    Added May 22, 2023

  74. Rank 84

    Apple Safari / WebKitCVE-2024-44309

    Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

    CVSS severity 6.3medium

    Added Nov 21, 2024

  75. Rank 85

    Apple iOS / iPadOSCVE-2025-24200

    Apple iOS and iPadOS Incorrect Authorization Vulnerability

    CVSS severity 6.1medium

    Added Feb 12, 2025

  76. Rank 86

    Apple Safari / WebKitCVE-2021-1879

    Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability

    CVSS severity 6.1medium

    Added Nov 3, 2021

  77. Rank 87

    Apple iOS / iPadOS / macOSCVE-2023-41991

    Apple Multiple Products Improper Certificate Validation Vulnerability

    CVSS severity 5.5medium

    Added Sep 25, 2023

  78. Rank 88

    Apple iOS / iPadOS / macOSCVE-2023-38606

    Apple Multiple Products Kernel Unspecified Vulnerability

    CVSS severity 5.5medium

    Added Jul 26, 2023

  79. Rank 89

    Apple iOS / iPadOS / macOSCVE-2020-9934

    Apple iOS, iPadOS, and macOS Input Validation Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 5.5medium

    Added Sep 8, 2022

  80. Rank 90

    Apple iOS / iPadOSCVE-2016-4655

    Apple iOS Information Disclosure Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 5.5medium

    Added May 24, 2022

  81. Rank 91

    Apple macOS (OS X)CVE-2022-22674

    Apple macOS Out-of-Bounds Read Vulnerability

    CVSS severity 5.5medium

    Added Apr 4, 2022

  82. Rank 92

    Apple iOS / iPadOS / macOSCVE-2020-27950

    Apple Multiple Products Memory Initialization Vulnerability

    CVSS severity 5.5medium

    Added Nov 3, 2021

  83. Rank 93

    Apple macOS (OS X)CVE-2021-30657

    Apple macOS Unspecified Vulnerability

    CVSS severity 5.5medium

    Added Nov 3, 2021

  84. Rank 94

    Apple iOS / iPadOSCVE-2020-9819

    Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability

    CVSS severity 4.3medium

    Added Nov 3, 2021

  85. Rank 95

    Apple iOS / iPadOS / macOSCVE-2025-43200

    Apple Multiple Products Unspecified Vulnerability

    CVSS severity 4.2medium

    Added Jun 16, 2025

Follow and verify

Get new Apple vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.