Vendor
Apple, page 2
As of , 95 Apple vulnerabilities are on CISA's list of exploited vulnerabilities; 9 were added in 2026. Patch first: CVE-2026-65400.
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 26 | CVE-2023-32439WebKit Type Confusion | Apple Multiple Products | Patch soon | 0.24 | ||
| 27 | CVE-2023-28206IOSurfaceAccelerator Out-of-Bounds Write | Apple iOS, iPadOS, and macOS | Patch soon | 0.23 | ||
| 28 | CVE-2020-27930Memory Corruption | Apple Multiple Products | Patch soon | 0.22 | ||
| 29 | CVE-2025-31201Arbitrary Read and Write | Apple Multiple Products | Patch soon | 0.14 | ||
| 30 | CVE-2023-41991Improper Certificate Validation | Apple Multiple Products | Patch soon | 0.13 | ||
| 31 | CVE-2023-28204WebKit Out-of-Bounds Read | Apple Multiple Products | Patch soon | 0.14 | ||
| 32 | CVE-2023-32373WebKit Use-After-Free | Apple Multiple Products | Patch soon | 0.12 | ||
| 33 | CVE-2023-32409WebKit Sandbox Escape | Apple Multiple Products | Patch soon | 0.17 | ||
| 34 | CVE-2019-7286Memory Corruption | Apple Multiple Products | Patch soon | 0.16 | ||
| 35 | CVE-2021-30883Memory Corruption | Apple Multiple Products | Patch soon | 0.15 | ||
| 36 | CVE-2021-1789Type Confusion | Apple Multiple Products | Patch soon | 0.14 | ||
| 37 | CVE-2022-22675Out-of-Bounds Write | Apple macOS | Patch soon | 0.12 | ||
| 38 | CVE-2022-22620Webkit Use-After-Free | Apple iOS, iPadOS, and macOS | Patch soon | 0.16 | ||
| 39 | CVE-2020-27950Memory Initialization | Apple Multiple Products | Patch soon | 0.17 | ||
| 40 | CVE-2021-30858iOS, iPadOS, macOS Use-After-Free | Apple iOS, iPadOS, and macOS | Patch soon | 0.13 | ||
| 41 | CVE-2025-43529Use-After-Free WebKit | Apple Multiple Products | Patch soon | 0.09 | ||
| 42 | CVE-2024-44308Code Execution | Apple Multiple Products | Patch soon | 0.10 | ||
| 43 | CVE-2024-23222WebKit Type Confusion | Apple Multiple Products | Patch soon | 0.11 | ||
| 44 | CVE-2023-42917WebKit Memory Corruption | Apple Multiple Products | Patch soon | 0.09 | ||
| 45 | CVE-2023-41992Kernel Privilege Escalation | Apple Multiple Products | Patch soon | 0.10 | ||
| 46 | CVE-2023-23529WebKit Type Confusion | Apple Multiple Products | Patch soon | 0.10 | ||
| 47 | CVE-2022-32893Out-of-Bounds Write | Apple iOS and macOS | Patch soon | 0.10 | ||
| 48 | CVE-2022-22587Memory Corruption | Apple iOS and macOS | Patch soon | 0.12 | ||
| 49 | CVE-2020-27932Type Confusion | Apple Multiple Products | Patch soon | 0.10 | ||
| 50 | CVE-2021-30761WebKit Memory Corruption | Apple iOS | Patch soon | 0.11 | ||
| 51 | CVE-2021-30762WebKit Use-After-Free | Apple iOS | Patch soon | 0.11 | ||
| 52 | CVE-2022-42856Type Confusion | Apple iOS | Patch soon | 0.09 | ||
| 53 | CVE-2021-1870WebKit Remote Code Execution | Apple iOS, iPadOS, and macOS | Patch soon | 0.08 | ||
| 54 | CVE-2021-1879WebKit Cross-Site Scripting (XSS) | Apple iOS, iPadOS, and watchOS | Patch soon | 0.07 | ||
| 55 | CVE-2021-30713Unspecified | Apple macOS | Patch soon | 0.07 | ||
| 56 | CVE-2021-30952Integer Overflow or Wraparound | Apple Multiple Products | Patch soon | 0.07 | ||
| 57 | CVE-2021-1871WebKit Remote Code Execution | Apple iOS, iPadOS, and macOS | Patch soon | 0.07 | ||
| 58 | CVE-2021-30900Out-of-Bounds Write | Apple iOS, iPadOS, and macOS | Patch soon | 0.05 | ||
| 59 | CVE-2022-32917Remote Code Execution | Apple iOS, iPadOS, and macOS | Patch soon | 0.06 | ||
| 60 | CVE-2025-24200Incorrect Authorization | Apple iOS and iPadOS | Patch soon | 0.04 | ||
| 61 | CVE-2023-41061Wallet Code Execution | Apple iOS, iPadOS, and watchOS | Patch soon | 0.04 | ||
| 62 | CVE-2019-7287Memory Corruption | Apple iOS | Patch soon | 0.05 | ||
| 63 | CVE-2021-30661WebKit Storage Use-After-Free | Apple Multiple Products | Patch soon | 0.04 | ||
| 64 | CVE-2023-43000Use-After-Free | Apple Multiple Products | Patch soon | 0.04 | ||
| 65 | CVE-2021-30869Type Confusion | Apple iOS, iPadOS, and macOS | Patch soon | 0.04 | ||
| 66 | CVE-2025-24201WebKit Out-of-Bounds Write | Apple Multiple Products | Patch soon | 0.04 | ||
| 67 | CVE-2021-31010Sandbox Bypass | Apple iOS, macOS, watchOS | Patch soon | 0.04 | ||
| 68 | CVE-2021-30665WebKit Memory Corruption | Apple Multiple Products | Patch soon | 0.04 | ||
| 69 | CVE-2022-32894Out-of-Bounds Write | Apple iOS and macOS | Patch soon | 0.03 | ||
| 70 | CVE-2021-30663WebKit Integer Overflow | Apple Multiple Products | Patch soon | 0.04 | ||
| 71 | CVE-2022-48503Unspecified | Apple Multiple Products | Patch soon | 0.03 | ||
| 72 | CVE-2020-9907Memory Corruption | Apple Multiple Products | Patch soon | 0.03 | ||
| 73 | CVE-2023-38606Kernel Unspecified | Apple Multiple Products | Patch soon | 0.03 | ||
| 74 | CVE-2021-30983Buffer Overflow | Apple iOS and iPadOS | Patch soon | 0.03 | ||
| 75 | CVE-2021-30666WebKit Buffer Overflow | Apple iOS | Patch soon | 0.03 | ||
| 76 | CVE-2019-6223Group Facetime | Apple iOS and macOS | Patch soon | 0.03 | ||
| 77 | CVE-2018-4344Memory Corruption | Apple Multiple Products | Patch soon | 0.02 | ||
| 78 | CVE-2020-9818Out-of-Bounds Write | Apple iOS, iPadOS, and watchOS | Patch soon | 0.02 | ||
| 79 | CVE-2021-1782Race Condition | Apple Multiple Products | Patch soon | 0.02 | ||
| 80 | CVE-2020-9819Memory Corruption | Apple iOS, iPadOS, and watchOS | Patch soon | 0.02 | ||
| 81 | CVE-2023-41974Use-After-Free | Apple iOS and iPadOS | Patch soon | 0.02 | ||
| 82 | CVE-2025-31277Buffer Overflow | Apple Multiple Products | Patch soon | 0.02 | ||
| 83 | CVE-2024-23225Memory Corruption | Apple Multiple Products | Patch soon | 0.01 | ||
| 84 | CVE-2026-20700Multiple Buffer Overflow | Apple Multiple Products | Patch soon | 0.01 | ||
| 85 | CVE-2024-23296Memory Corruption | Apple Multiple Products | Patch soon | 0.01 | ||
| 86 | CVE-2023-41990Code Execution | Apple Multiple Products | Patch soon | 0.01 | ||
| 87 | CVE-2025-43200Unspecified | Apple Multiple Products | Patch soon | 0.01 | ||
| 88 | CVE-2022-22674Out-of-Bounds Read | Apple macOS | Patch soon | 0.01 | ||
| 89 | CVE-2023-42824Kernel Privilege Escalation | Apple iOS and iPadOS | Patch soon | 0.01 | ||
| 90 | CVE-2022-42827Out-of-Bounds Write | Apple iOS and iPadOS | Patch soon | 0.01 | ||
| 91 | CVE-2020-9859Code Execution | Apple Multiple Products | Patch soon | 0.01 | ||
| 92 | CVE-2019-8526Use-After-Free | Apple macOS | Patch soon | 0.01 | ||
| 93 | CVE-2022-48618Memory Corruption | Apple Multiple Products | Patch soon | 0.00 | ||
| 94 | CVE-2025-43520Classic Buffer Overflow | Apple Multiple Products | Patch soon | 0.00 | ||
| 95 | CVE-2025-43510Improper Locking | Apple Multiple Products | Patch soon | 0.00 |