Apple: exploited vulnerabilities
- 95exploited vulnerabilities
- 0used by ransomware
- Sep 29, 2026latest one added
- Multiple Products 54
- iOS, iPadOS, and macOS 11
- iOS 8
- macOS 6
- iOS and iPadOS 5
- iOS, iPadOS, and watchOS 4
- iOS and macOS 4
- OS X 2
- iOS, macOS, watchOS 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 29, 2026 | Out-of-Bounds Write | Multiple Products | High 8.8 | 26% |
| Aug 18, 2026 | Improper Authentication | macOS | Critical 9.8 | 1.7% |
| Mar 20, 2026 | Classic Buffer Overflow | Multiple Products | Medium 5.5 | 0.4% |
| Mar 20, 2026 | Improper Locking | Multiple Products | High 7.8 | 0.4% |
| Mar 20, 2026 | Buffer Overflow | Multiple Products | High 8.8 | 1.7% |
| Mar 5, 2026 | Use-After-Free | Multiple Products | High 8.8 | 4.0% |
| Mar 5, 2026 | Use-After-Free | iOS and iPadOS | High 7.8 | 2.0% |
| Mar 5, 2026 | Integer Overflow or Wraparound | Multiple Products | High 8.8 | 7.0% |
| Feb 12, 2026 | Multiple Buffer Overflow | Multiple Products | High 7.8 | 1.7% |
| Dec 15, 2025 | Use-After-Free WebKit | Multiple Products | High 8.8 | 26% |
| Oct 20, 2025 | Unspecified | Multiple Products | High 8.8 | 3.2% |
| Aug 21, 2025 | Out-of-Bounds Write | iOS, iPadOS, and macOS | Critical 10.0 | 65% |
| Jun 16, 2025 | Unspecified | Multiple Products | Medium 4.2 | 1.2% |
| Apr 17, 2025 | Arbitrary Read and Write | Multiple Products | Critical 9.8 | 14% |
| Apr 17, 2025 | Memory Corruption | Multiple Products | Critical 9.8 | 21% |
| Mar 13, 2025 | WebKit Out-of-Bounds Write | Multiple Products | Critical 10.0 | 3.8% |
| Feb 12, 2025 | Incorrect Authorization | iOS and iPadOS | Medium 6.1 | 4.5% |
| Jan 29, 2025 | Use-After-Free | Multiple Products | Critical 10.0 | 18% |
| Nov 21, 2024 | Cross-Site Scripting (XSS) | Multiple Products | Medium 6.3 | 23% |
| Nov 21, 2024 | Code Execution | Multiple Products | High 8.8 | 10% |
| Mar 6, 2024 | Memory Corruption | Multiple Products | High 7.8 | 1.4% |
| Mar 6, 2024 | Memory Corruption | Multiple Products | High 7.8 | 1.5% |
| Jan 31, 2024 | Memory Corruption | Multiple Products | High 7.0 | 0.5% |
| Jan 23, 2024 | WebKit Type Confusion | Multiple Products | High 8.8 | 11% |
| Jan 8, 2024 | Code Execution | Multiple Products | High 7.8 | 1.4% |
| Dec 4, 2023 | WebKit Memory Corruption | Multiple Products | High 8.8 | 9.3% |
| Dec 4, 2023 | WebKit Out-of-Bounds Read | Multiple Products | Medium 6.5 | 18% |
| Oct 5, 2023 | Kernel Privilege Escalation | iOS and iPadOS | High 7.8 | 1.0% |
| Sep 25, 2023 | WebKit Code Execution | Multiple Products | High 8.8 | 24% |
| Sep 25, 2023 | Kernel Privilege Escalation | Multiple Products | High 7.8 | 9.5% |
| Sep 25, 2023 | Improper Certificate Validation | Multiple Products | Medium 5.5 | 13% |
| Sep 11, 2023 | ImageIO Buffer Overflow | iOS, iPadOS, and macOS | High 7.8 | 53% |
| Sep 11, 2023 | Wallet Code Execution | iOS, iPadOS, and watchOS | High 7.8 | 4.4% |
| Jul 26, 2023 | Kernel Unspecified | Multiple Products | Medium 5.5 | 2.9% |
| Jul 13, 2023 | WebKit Code Execution | Multiple Products | High 8.8 | 19% |
| Jun 23, 2023 | WebKit Type Confusion | Multiple Products | High 8.8 | 24% |
| Jun 23, 2023 | WebKit Memory Corruption | Multiple Products | High 8.8 | 23% |
| Jun 23, 2023 | Integer Overflow | Multiple Products | High 7.8 | 52% |
| May 22, 2023 | WebKit Sandbox Escape | Multiple Products | High 8.6 | 17% |
| May 22, 2023 | WebKit Use-After-Free | Multiple Products | High 8.8 | 12% |
| May 22, 2023 | WebKit Out-of-Bounds Read | Multiple Products | Medium 6.5 | 14% |
| Apr 17, 2023 | Use-After-Free | macOS | High 7.8 | 0.7% |
| Apr 10, 2023 | IOSurfaceAccelerator Out-of-Bounds Write | iOS, iPadOS, and macOS | High 8.6 | 23% |
| Apr 10, 2023 | WebKit Use-After-Free | Multiple Products | High 8.8 | 27% |
| Mar 30, 2023 | Out-of-Bounds Write | iOS, iPadOS, and macOS | High 7.8 | 5.2% |
| Feb 14, 2023 | WebKit Type Confusion | Multiple Products | High 8.8 | 9.4% |
| Dec 14, 2022 | Type Confusion | iOS | High 8.8 | 8.5% |
| Oct 25, 2022 | Out-of-Bounds Write | iOS and iPadOS | High 7.8 | 1.1% |
| Sep 14, 2022 | Remote Code Execution | iOS, iPadOS, and macOS | High 7.8 | 5.6% |
| Sep 8, 2022 | Input Validation | iOS, iPadOS, and macOS | Medium 5.5 | 3.2% |
| Aug 25, 2022 | Sandbox Bypass | iOS, macOS, watchOS | High 7.5 | 3.7% |
| Aug 18, 2022 | Out-of-Bounds Write | iOS and macOS | High 7.8 | 3.3% |
| Aug 18, 2022 | Out-of-Bounds Write | iOS and macOS | High 8.8 | 9.9% |
| Jun 27, 2022 | Buffer Overflow | iOS and iPadOS | High 7.8 | 2.9% |
| Jun 27, 2022 | Memory Corruption | Multiple Products | High 7.8 | 3.2% |
| Jun 27, 2022 | Memory Corruption | Multiple Products | High 7.8 | 15% |
| Jun 27, 2022 | Use-After-Free | Multiple Products | High 7.8 | 18% |
| Jun 27, 2022 | Memory Corruption | Multiple Products | High 7.8 | 2.4% |
| May 24, 2022 | Webkit Memory Corruption | iOS | High 8.8 | 67% |
| May 24, 2022 | Memory Corruption | iOS | High 7.8 | 24% |
| May 24, 2022 | Information Disclosure | iOS | Medium 5.5 | 33% |
| May 23, 2022 | Memory Corruption | Multiple Products | High 7.8 | 15% |
| May 23, 2022 | Memory Corruption | iOS | High 7.8 | 4.6% |
| May 23, 2022 | Memory Corruption | Multiple Products | High 7.8 | 16% |
| May 4, 2022 | Type Confusion | Multiple Products | High 8.8 | 14% |
| May 4, 2022 | Type Confusion | Multiple Products | High 8.8 | 16% |
| Apr 4, 2022 | Out-of-Bounds Write | macOS | High 7.8 | 12% |
| Apr 4, 2022 | Out-of-Bounds Read | macOS | Medium 5.5 | 1.1% |
| Feb 11, 2022 | Webkit Use-After-Free | iOS, iPadOS, and macOS | High 8.8 | 16% |
| Feb 10, 2022 | Authentication Bypass | OS X | High 7.8 | 9.9% |
| Feb 10, 2022 | Heap-Based Buffer Overflow | OS X | High 7.8 | 49% |
| Jan 28, 2022 | Memory Corruption | iOS and macOS | Critical 9.8 | 12% |
| Nov 3, 2021 | Type Confusion | iOS, iPadOS, and macOS | High 7.8 | 4.1% |
| Nov 3, 2021 | Integer Overflow | Multiple Products | High 7.8 | 76% |
| Nov 3, 2021 | iOS, iPadOS, macOS Use-After-Free | iOS, iPadOS, and macOS | High 8.8 | 13% |
| Nov 3, 2021 | Memory Corruption | Multiple Products | High 7.8 | 29% |
| Nov 3, 2021 | WebKit Use-After-Free | iOS | High 8.8 | 11% |
| Nov 3, 2021 | WebKit Memory Corruption | iOS | High 8.8 | 11% |
| Nov 3, 2021 | Unspecified | macOS | High 7.8 | 7.0% |
| Nov 3, 2021 | WebKit Buffer Overflow | iOS | High 8.8 | 3.0% |
| Nov 3, 2021 | WebKit Memory Corruption | Multiple Products | High 8.8 | 3.7% |
| Nov 3, 2021 | WebKit Integer Overflow | Multiple Products | High 7.8 | 3.5% |
| Nov 3, 2021 | WebKit Storage Use-After-Free | Multiple Products | High 8.8 | 4.5% |
| Nov 3, 2021 | Unspecified | macOS | Medium 5.5 | 69% |
| Nov 3, 2021 | WebKit Cross-Site Scripting (XSS) | iOS, iPadOS, and watchOS | Medium 6.1 | 7.1% |
| Nov 3, 2021 | WebKit Remote Code Execution | iOS, iPadOS, and macOS | Critical 9.8 | 7.0% |
| Nov 3, 2021 | WebKit Remote Code Execution | iOS, iPadOS, and macOS | Critical 9.8 | 7.7% |
| Nov 3, 2021 | Race Condition | Multiple Products | High 7.0 | 2.2% |
| Nov 3, 2021 | Code Execution | Multiple Products | High 7.8 | 0.8% |
| Nov 3, 2021 | Memory Corruption | iOS, iPadOS, and watchOS | Medium 4.3 | 2.2% |
| Nov 3, 2021 | Out-of-Bounds Write | iOS, iPadOS, and watchOS | High 8.8 | 2.3% |
| Nov 3, 2021 | Memory Initialization | Multiple Products | Medium 5.5 | 17% |
| Nov 3, 2021 | Type Confusion | Multiple Products | High 7.8 | 10% |
| Nov 3, 2021 | Memory Corruption | Multiple Products | High 7.8 | 22% |
| Nov 3, 2021 | Group Facetime | iOS and macOS | High 7.5 | 2.6% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.