Apple vendor intelligence
Apple Known Exploited Vulnerabilities
Track evidence-backed exploitation affecting Apple products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.
- Total KEVs
- 98
- Known exploited vulnerabilities affecting Apple products
- In CISA KEV
- 97
- Records also listed in the official catalog
- Beyond CISA KEV
- 1
- Additional exploited vulnerability absent from CISA KEV
- Sensor Observed
- 0
- Apple KEVs with sensor-observed exploitation activity
The catalog gap matters for Apple exposure
One of the 98 exploited Apple vulnerabilities tracked by Previdian is not in CISA KEV. Teams relying on the official catalog alone would miss 1% of this vendor portfolio.
- 99%
- Covered by CISA
- 1%
- Beyond CISA
- 46
- Product families
Attested Apple vulnerabilities
98 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.
How exploitation is verified| CVE / description | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2016-4656
The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory... |
iOS | Confirmed | In CISA | 24 May 2022 |
|
CVE-2016-4655
The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app. |
iOS | Confirmed | In CISA | 24 May 2022 |
|
CVE-2018-4344
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12,... |
iOS, macOS, tvOS, watchOS | Confirmed | In CISA | 27 Jun 2022 |
|
CVE-2019-8605
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS... |
iOS, macOS, tvOS, watchOS | Confirmed | In CISA | 27 Jun 2022 |
|
CVE-2020-9907
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An... |
iOS, tvOS | Confirmed | In CISA | 27 Jun 2022 |
|
CVE-2020-3837
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3,... |
iOS, macOS, tvOS, watchOS | Confirmed | In CISA | 27 Jun 2022 |
|
CVE-2021-30983
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to... |
iOS and iPadOS | Confirmed | In CISA | 27 Jun 2022 |
|
CVE-2022-32893
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey... |
Safari, iOS and iPadOS, macOS | Confirmed | In CISA | 18 Aug 2022 |
|
CVE-2022-32894
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey... |
iOS and iPadOS, macOS | Confirmed | In CISA | 18 Aug 2022 |
|
CVE-2021-31010
A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8... |
macOS, watchOS | Confirmed | In CISA | 25 Aug 2022 |
|
CVE-2020-9934
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and... |
iOS, macOS | Confirmed | In CISA | 08 Sep 2022 |
|
CVE-2022-32917
The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur... |
iOS, macOS | Confirmed | In CISA | 14 Sep 2022 |
|
CVE-2022-42827
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS... |
iOS and iPadOS | Confirmed | In CISA | 25 Oct 2022 |
|
CVE-2022-42856
A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2... |
tvOS | Confirmed | In CISA | 14 Dec 2022 |
|
CVE-2023-23529
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS... |
iOS and iPadOS, Safari, macOS | Confirmed | In CISA | 14 Feb 2023 |
|
CVE-2021-30900
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS... |
iOS and iPadOS | Confirmed | In CISA | 30 Mar 2023 |
|
CVE-2023-28206
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS... |
iOS and iPadOS, macOS | Confirmed | In CISA | 10 Apr 2023 |
|
CVE-2023-28205
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS... |
iOS and iPadOS, Safari, macOS | Confirmed | In CISA | 10 Apr 2023 |
|
CVE-2019-8526
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to... |
macOS | Confirmed | In CISA | 17 Apr 2023 |
|
CVE-2023-32373
A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6... |
macOS, Safari, watchOS, iOS and iPadOS, tvOS | Confirmed | In CISA | 22 May 2023 |
|
CVE-2023-28204
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6... |
macOS, Safari, watchOS, iOS and iPadOS, tvOS | Confirmed | In CISA | 22 May 2023 |
|
CVE-2023-32409
The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS... |
macOS, Safari, watchOS, iOS and iPadOS, tvOS | Confirmed | In CISA | 22 May 2023 |
|
CVE-2023-32439
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS... |
iOS and iPadOS, Safari, macOS | Confirmed | In CISA | 23 Jun 2023 |
|
CVE-2023-32435
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS... |
macOS, iOS and iPadOS, Safari | Confirmed | In CISA | 23 Jun 2023 |
|
CVE-2023-32434
An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS... |
macOS, iOS and iPadOS, watchOS | Confirmed | In CISA | 23 Jun 2023 |
|
CVE-2023-37450
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5,... |
Safari, tvOS, iOS and iPadOS, macOS, watchOS | Confirmed | In CISA | 13 Jul 2023 |
|
CVE-2023-38606
This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and... |
tvOS, iOS and iPadOS, macOS, watchOS | Confirmed | In CISA | 26 Jul 2023 |
|
CVE-2023-41061
A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted... |
iOS and iPadOS, watchOS | Confirmed | In CISA | 11 Sep 2023 |
|
CVE-2023-41064
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9,... |
macOS, iOS and iPadOS | Confirmed | In CISA | 11 Sep 2023 |
|
CVE-2023-41993
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution.... |
macOS | Confirmed | In CISA | 25 Sep 2023 |
|
CVE-2023-41992
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local... |
macOS, iOS and iPadOS | Confirmed | In CISA | 25 Sep 2023 |
|
CVE-2023-41991
A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to... |
iOS and iPadOS, macOS | Confirmed | In CISA | 25 Sep 2023 |
|
CVE-2023-42824
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their... |
iOS and iPadOS | Confirmed | In CISA | 05 Oct 2023 |
|
CVE-2023-42916
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2,... |
Safari, macOS, iOS and iPadOS | Confirmed | In CISA | 04 Dec 2023 |
|
CVE-2023-42917
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2,... |
Safari, macOS, iOS and iPadOS | Confirmed | In CISA | 04 Dec 2023 |
|
CVE-2023-41990
The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS... |
iOS and iPadOS, tvOS, macOS, watchOS | Confirmed | In CISA | 08 Jan 2024 |
|
CVE-2024-23222
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS... |
Safari, iOS and iPadOS, macOS, tvOS, visionOS | Confirmed | In CISA | 23 Jan 2024 |
|
CVE-2022-48618
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An... |
tvOS, macOS, iOS and iPadOS, watchOS | Confirmed | In CISA | 31 Jan 2024 |
|
CVE-2024-23296
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4,... |
iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 06 Mar 2024 |
|
CVE-2024-23225
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4,... |
iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 06 Mar 2024 |
|
CVE-2024-44308
The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1,... |
Safari, iOS and iPadOS, macOS, visionOS | Confirmed | In CISA | 21 Nov 2024 |
|
CVE-2024-44309
A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS... |
Safari, iOS and iPadOS, macOS, visionOS | Confirmed | In CISA | 21 Nov 2024 |
|
CVE-2025-24085
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia... |
iOS and iPadOS, iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 29 Jan 2025 |
|
CVE-2022-23748
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what... |
Audinate Dante Application Library for Windows | Confirmed | In CISA | 06 Feb 2025 |
|
CVE-2025-24200
An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS... |
iOS and iPadOS, iPadOS | Confirmed | In CISA | 12 Feb 2025 |
|
CVE-2025-24201
An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4... |
Safari, iOS and iPadOS, iPadOS, macOS, visionOS, watchOS | Confirmed | In CISA | 13 Mar 2025 |
|
CVE-2025-31200
A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1,... |
iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 17 Apr 2025 |
|
CVE-2025-31201
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1,... |
iOS and iPadOS, macOS, tvOS, visionOS | Confirmed | In CISA | 17 Apr 2025 |
No Apple vulnerabilities match this search or filter.
Showing 48 of 48 on this page (98 Apple known exploited vulnerabilities).
Recurring weakness patterns
Out-of-bounds write, use after free, and access account for 49 mapped occurrences across this Apple KEV portfolio.
CWE-787
Out-of-bounds Write
CWE-416
Use After Free
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-190
Integer Overflow or Wraparound
CWE-125
Out-of-bounds Read
CWE-667
Improper Locking