Apple vendor intelligence
Apple Known Exploited Vulnerabilities
Track evidence-backed exploitation affecting Apple products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.
- Total KEVs
- 98
- Known exploited vulnerabilities affecting Apple products
- In CISA KEV
- 97
- Records also listed in the official catalog
- Beyond CISA KEV
- 1
- Additional exploited vulnerability absent from CISA KEV
- Sensor Observed
- 0
- Apple KEVs with sensor-observed exploitation activity
The catalog gap matters for Apple exposure
One of the 98 exploited Apple vulnerabilities tracked by Previdian is not in CISA KEV. Teams relying on the official catalog alone would miss 1% of this vendor portfolio.
- 99%
- Covered by CISA
- 1%
- Beyond CISA
- 46
- Product families
Attested Apple vulnerabilities
98 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.
How exploitation is verified| CVE / description | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2026-86950
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia... |
iOS and iPadOS, macOS | Confirmed | In CISA | 28 Sep 2026 |
|
CVE-2026-65400
An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS... |
macOS | Confirmed | In CISA | 15 Aug 2026 |
|
CVE-2023-43000
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari... |
macOS, iOS and iPadOS, Safari | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-31277
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6,... |
Safari, iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-43520
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS... |
iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-43510
A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS... |
iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2023-41974
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An... |
iOS and iPadOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2021-30952
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and... |
watchOS, iOS and iPadOS, macOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2026-20700
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS... |
iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-43529
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2... |
Safari, iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2022-48503
The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5,... |
macOS, tvOS, Safari, watchOS, iOS and iPadOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-43300
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and... |
iOS and iPadOS, iPadOS, macOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-43200
This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and... |
iOS and iPadOS, iPadOS, macOS, visionOS, watchOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2011-0226
Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and... |
iOS | High | Beyond CISA | 19 Jul 2011 |
|
CVE-2020-9859
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5... |
iOS, macOS, tvOS, watchOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30869
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2,... |
iOS and iPadOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30761
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web... |
iOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30663
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3,... |
macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30665
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS... |
macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30657
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A... |
macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30713
A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to... |
macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30666
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content... |
iOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30661
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5,... |
iOS and iPadOS, Safari, tvOS, watchOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-1879
This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS... |
iOS and iPadOS, iOS, watchOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-1871
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security... |
iOS and iPadOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-1870
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security... |
iOS and iPadOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-1782
A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update... |
iOS and iPadOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30762
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content... |
iOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-9819
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5,... |
iOS, iOS-1, watchOS, watchOS-1 | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-9818
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS... |
iOS, iOS-1, watchOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-27932
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS... |
watchOS, iOS and iPadOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-27950
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update... |
watchOS, iOS and iPadOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30807
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1,... |
macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-27930
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9,... |
watchOS, iOS and iPadOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30860
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS... |
macOS, watchOS, iOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2019-6223
A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS... |
iOS, macOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-30858
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6.... |
macOS, iOS | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2022-22587
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3,... |
iOS and iPadOS, macOS | Confirmed | In CISA | 28 Jan 2022 |
|
CVE-2014-4404
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged... |
iOS, Apple TV | Confirmed | In CISA | 10 Feb 2022 |
|
CVE-2015-1130
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via... |
OS X | Confirmed | In CISA | 10 Feb 2022 |
|
CVE-2022-22620
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1,... |
Safari (v and ), macOS | Confirmed | In CISA | 11 Feb 2022 |
|
CVE-2022-22674
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is... |
macOS | Confirmed | In CISA | 04 Apr 2022 |
|
CVE-2022-22675
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6,... |
iOS and iPadOS, macOS, watchOS | Confirmed | In CISA | 04 Apr 2022 |
|
CVE-2019-8506
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes... |
iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for Windows | Confirmed | In CISA | 04 May 2022 |
|
CVE-2021-1789
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina,... |
iOS and iPadOS, macOS | Confirmed | In CISA | 04 May 2022 |
|
CVE-2019-8720
A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code... |
webkitgtk | Confirmed | In CISA | 23 May 2022 |
|
CVE-2019-7287
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute... |
iOS | Confirmed | In CISA | 23 May 2022 |
|
CVE-2019-7286
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental... |
iOS, macOS | Confirmed | In CISA | 23 May 2022 |
|
CVE-2021-30883
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1,... |
iOS and iPadOS, macOS | Confirmed | In CISA | 23 May 2022 |
|
CVE-2016-4657
WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted... |
iOS | Confirmed | In CISA | 24 May 2022 |
No Apple vulnerabilities match this search or filter.
Showing 50 of 50 on this page (98 Apple known exploited vulnerabilities).
Recurring weakness patterns
Out-of-bounds write, use after free, and access account for 49 mapped occurrences across this Apple KEV portfolio.
CWE-787
Out-of-bounds Write
CWE-416
Use After Free
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-190
Integer Overflow or Wraparound
CWE-125
Out-of-bounds Read
CWE-667
Improper Locking