Apple: every exploited CVE on CISA KEV
All 95 Apple bugs attackers are confirmed to be using, with attack scores and free detection rules.
Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.
95
Apple bugs on CISA’s exploited list
9 added in 2026.
0
are linked to ransomware
Every Apple vulnerability the US government has confirmed attackers are using, newest first, with each bug’s EPSS (predicted attack chance) and VEDAS (exploit evidence) scores and any free Nuclei or Suricata detection rule. US federal agencies must fix KEV-listed bugs by a deadline; everyone else should treat the list as “patch first”.
| Added | CVE | Product | Bug | EPSS | VEDAS | Detection rule | Ransomware |
|---|---|---|---|---|---|---|---|
| 2026-09-29 | CVE-2026-86950 | Apple Multiple Products | Apple Multiple Products Out-of-Bounds Write Vulnerability | 0.26 | 0.97 | None yet | No |
| 2026-08-18 | CVE-2026-65400 | Apple macOS | Apple macOS Improper Authentication Vulnerability | 0.02 | 0.97 | None yet | No |
| 2026-03-20 | CVE-2025-43520 | Apple Multiple Products | Apple Multiple Products Classic Buffer Overflow Vulnerability | 0.00 | 0.51 | Out of scope (local) | No |
| 2026-03-20 | CVE-2025-43510 | Apple Multiple Products | Apple Multiple Products Improper Locking Vulnerability | 0.00 | 0.51 | Out of scope (local) | No |
| 2026-03-20 | CVE-2025-31277 | Apple Multiple Products | Apple Multiple Products Buffer Overflow Vulnerability | 0.02 | 0.97 | None yet | No |
| 2026-03-05 | CVE-2023-43000 | Apple Multiple Products | Apple Multiple products Use-After-Free Vulnerability | 0.04 | 0.53 | None yet | No |
| 2026-03-05 | CVE-2023-41974 | Apple iOS and iPadOS | Apple iOS and iPadOS Use-After-Free Vulnerability | 0.02 | 0.97 | Out of scope (local) | No |
| 2026-03-05 | CVE-2021-30952 | Apple Multiple Products | Apple Multiple Products Integer Overflow or Wraparound Vulnerability | 0.07 | 0.97 | None yet | No |
| 2026-02-12 | CVE-2026-20700 | Apple Multiple Products | Apple Multiple Buffer Overflow Vulnerability | 0.02 | 0.97 | Out of scope (local) | No |
| 2025-12-15 | CVE-2025-43529 | Apple Multiple Products | Apple Multiple Products Use-After-Free WebKit Vulnerability | 0.26 | 0.97 | None yet | No |
| 2025-10-20 | CVE-2022-48503 | Apple Multiple Products | Apple Multiple Products Unspecified Vulnerability | 0.03 | 0.97 | None yet | No |
| 2025-08-21 | CVE-2025-43300 | Apple iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | 0.65 | 0.98 | None yet | No |
| 2025-06-16 | CVE-2025-43200 | Apple Multiple Products | Apple Multiple Products Unspecified Vulnerability | 0.01 | 0.74 | None yet | No |
| 2025-04-17 | CVE-2025-31201 | Apple Multiple Products | Apple Multiple Products Arbitrary Read and Write Vulnerability | 0.14 | 0.98 | None yet | No |
| 2025-04-17 | CVE-2025-31200 | Apple Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | 0.21 | 0.98 | None yet | No |
| 2025-03-13 | CVE-2025-24201 | Apple Multiple Products | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability | 0.04 | 0.98 | None yet | No |
| 2025-02-12 | CVE-2025-24200 | Apple iOS and iPadOS | Apple iOS and iPadOS Incorrect Authorization Vulnerability | 0.04 | 0.97 | Out of scope (local) | No |
| 2025-01-29 | CVE-2025-24085 | Apple Multiple Products | Apple Multiple Products Use-After-Free Vulnerability | 0.18 | 0.97 | None yet | No |
| 2024-11-21 | CVE-2024-44309 | Apple Multiple Products | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability | 0.22 | 0.97 | None yet | No |
| 2024-11-21 | CVE-2024-44308 | Apple Multiple Products | Apple Multiple Products Code Execution Vulnerability | 0.10 | 0.97 | None yet | No |
| 2024-03-06 | CVE-2024-23296 | Apple Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | 0.01 | 0.98 | Out of scope (local) | No |
| 2024-03-06 | CVE-2024-23225 | Apple Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | 0.01 | 0.97 | Out of scope (local) | No |
| 2024-01-31 | CVE-2022-48618 | Apple Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | 0.00 | 0.69 | Out of scope (local) | No |
| 2024-01-23 | CVE-2024-23222 | Apple Multiple Products | Apple Multiple Products WebKit Type Confusion Vulnerability | 0.11 | 0.97 | None yet | No |
| 2024-01-08 | CVE-2023-41990 | Apple Multiple Products | Apple Multiple Products Code Execution Vulnerability | 0.01 | 0.69 | Out of scope (local) | No |
| 2023-12-04 | CVE-2023-42917 | Apple Multiple Products | Apple Multiple Products WebKit Memory Corruption Vulnerability | 0.09 | 0.97 | None yet | No |
| 2023-12-04 | CVE-2023-42916 | Apple Multiple Products | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 0.18 | 0.97 | None yet | No |
| 2023-10-05 | CVE-2023-42824 | Apple iOS and iPadOS | Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability | 0.01 | 0.88 | Out of scope (local) | No |
| 2023-09-25 | CVE-2023-41993 | Apple Multiple Products | Apple Multiple Products WebKit Code Execution Vulnerability | 0.24 | 0.98 | None yet | No |
| 2023-09-25 | CVE-2023-41992 | Apple Multiple Products | Apple Multiple Products Kernel Privilege Escalation Vulnerability | 0.10 | 0.98 | Out of scope (local) | No |
| 2023-09-25 | CVE-2023-41991 | Apple Multiple Products | Apple Multiple Products Improper Certificate Validation Vulnerability | 0.13 | 0.97 | Out of scope (local) | No |
| 2023-09-11 | CVE-2023-41064 | Apple iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability | 0.53 | 0.97 | Out of scope (local) | No |
| 2023-09-11 | CVE-2023-41061 | Apple iOS, iPadOS, and watchOS | Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability | 0.04 | 0.98 | Out of scope (local) | No |
| 2023-07-26 | CVE-2023-38606 | Apple Multiple Products | Apple Multiple Products Kernel Unspecified Vulnerability | 0.03 | 0.74 | Out of scope (local) | No |
| 2023-07-13 | CVE-2023-37450 | Apple Multiple Products | Apple Multiple Products WebKit Code Execution Vulnerability | 0.19 | 0.98 | None yet | No |
| 2023-06-23 | CVE-2023-32439 | Apple Multiple Products | Apple Multiple Products WebKit Type Confusion Vulnerability | 0.24 | 0.98 | None yet | No |
| 2023-06-23 | CVE-2023-32435 | Apple Multiple Products | Apple Multiple Products WebKit Memory Corruption Vulnerability | 0.23 | 0.56 | None yet | No |
| 2023-06-23 | CVE-2023-32434 | Apple Multiple Products | Apple Multiple Products Integer Overflow Vulnerability | 0.52 | 0.97 | Out of scope (local) | No |
| 2023-05-22 | CVE-2023-32409 | Apple Multiple Products | Apple Multiple Products WebKit Sandbox Escape Vulnerability | 0.17 | 0.97 | None yet | No |
| 2023-05-22 | CVE-2023-32373 | Apple Multiple Products | Apple Multiple Products WebKit Use-After-Free Vulnerability | 0.12 | 0.97 | None yet | No |
| 2023-05-22 | CVE-2023-28204 | Apple Multiple Products | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 0.14 | 0.97 | None yet | No |
| 2023-04-17 | CVE-2019-8526 | Apple macOS | Apple macOS Use-After-Free Vulnerability | 0.01 | 0.97 | Out of scope (local) | No |
| 2023-04-10 | CVE-2023-28206 | Apple iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability | 0.23 | 0.98 | Out of scope (local) | No |
| 2023-04-10 | CVE-2023-28205 | Apple Multiple Products | Apple Multiple Products WebKit Use-After-Free Vulnerability | 0.27 | 0.97 | None yet | No |
| 2023-03-30 | CVE-2021-30900 | Apple iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | 0.05 | 0.53 | Out of scope (local) | No |
| 2023-02-14 | CVE-2023-23529 | Apple Multiple Products | Apple Multiple Products WebKit Type Confusion Vulnerability | 0.09 | 0.98 | None yet | No |
| 2022-12-14 | CVE-2022-42856 | Apple iOS | Apple iOS Type Confusion Vulnerability | 0.09 | 0.98 | None yet | No |
| 2022-10-25 | CVE-2022-42827 | Apple iOS and iPadOS | Apple iOS and iPadOS Out-of-Bounds Write Vulnerability | 0.01 | 0.51 | Out of scope (local) | No |
| 2022-09-14 | CVE-2022-32917 | Apple iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability | 0.06 | 0.97 | Out of scope (local) | No |
| 2022-09-08 | CVE-2020-9934 | Apple iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Input Validation Vulnerability | 0.03 | 0.98 | Out of scope (local) | No |
| 2022-08-25 | CVE-2021-31010 | Apple iOS, macOS, watchOS | Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability | 0.04 | 0.52 | None yet | No |
| 2022-08-18 | CVE-2022-32894 | Apple iOS and macOS | Apple iOS and macOS Out-of-Bounds Write Vulnerability | 0.03 | 0.97 | Out of scope (local) | No |
| 2022-08-18 | CVE-2022-32893 | Apple iOS and macOS | Apple iOS and macOS Out-of-Bounds Write Vulnerability | 0.10 | 0.97 | None yet | No |
| 2022-06-27 | CVE-2021-30983 | Apple iOS and iPadOS | Apple iOS and iPadOS Buffer Overflow Vulnerability | 0.03 | 0.51 | Out of scope (local) | No |
| 2022-06-27 | CVE-2020-9907 | Apple Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | 0.03 | 0.51 | Out of scope (local) | No |
| 2022-06-27 | CVE-2020-3837 | Apple Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | 0.15 | 0.98 | Out of scope (local) | No |
| 2022-06-27 | CVE-2019-8605 | Apple Multiple Products | Apple Multiple Products Use-After-Free Vulnerability | 0.18 | 0.98 | Out of scope (local) | No |
| 2022-06-27 | CVE-2018-4344 | Apple Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | 0.02 | 0.52 | Out of scope (local) | No |
| 2022-05-24 | CVE-2016-4657 | Apple iOS | Apple iOS Webkit Memory Corruption Vulnerability | 0.67 | 0.98 | None yet | No |
| 2022-05-24 | CVE-2016-4656 | Apple iOS | Apple iOS Memory Corruption Vulnerability | 0.24 | 0.97 | Out of scope (local) | No |
| 2022-05-24 | CVE-2016-4655 | Apple iOS | Apple iOS Information Disclosure Vulnerability | 0.33 | 0.98 | Out of scope (local) | No |
| 2022-05-23 | CVE-2021-30883 | Apple Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | 0.15 | 0.98 | Out of scope (local) | No |
| 2022-05-23 | CVE-2019-7287 | Apple iOS | Apple iOS Memory Corruption Vulnerability | 0.05 | 0.97 | Out of scope (local) | No |
| 2022-05-23 | CVE-2019-7286 | Apple Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | 0.16 | 0.98 | Out of scope (local) | No |
| 2022-05-04 | CVE-2021-1789 | Apple Multiple Products | Apple Multiple Products Type Confusion Vulnerability | 0.14 | 0.97 | None yet | No |
| 2022-05-04 | CVE-2019-8506 | Apple Multiple Products | Apple Multiple Products Type Confusion Vulnerability | 0.16 | 0.99 | None yet | No |
| 2022-04-04 | CVE-2022-22675 | Apple macOS | Apple macOS Out-of-Bounds Write Vulnerability | 0.12 | 0.80 | Out of scope (local) | No |
| 2022-04-04 | CVE-2022-22674 | Apple macOS | Apple macOS Out-of-Bounds Read Vulnerability | 0.01 | 0.51 | Out of scope (local) | No |
| 2022-02-11 | CVE-2022-22620 | Apple iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability | 0.16 | 0.98 | None yet | No |
| 2022-02-10 | CVE-2015-1130 | Apple OS X | Apple OS X Authentication Bypass Vulnerability | 0.10 | 0.98 | Out of scope (local) | No |
| 2022-02-10 | CVE-2014-4404 | Apple OS X | Apple OS X Heap-Based Buffer Overflow Vulnerability | 0.49 | 0.98 | Out of scope (local) | No |
| 2022-01-28 | CVE-2022-22587 | Apple iOS and macOS | Apple Memory Corruption Vulnerability | 0.12 | 0.53 | None yet | No |
| 2021-11-03 | CVE-2021-30869 | Apple iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Type Confusion Vulnerability | 0.04 | 0.70 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-30860 | Apple Multiple Products | Apple Multiple Products Integer Overflow Vulnerability | 0.76 | 0.99 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-30858 | Apple iOS, iPadOS, and macOS | Apple iOS, iPadOS, macOS Use-After-Free Vulnerability | 0.13 | 0.97 | None yet | No |
| 2021-11-03 | CVE-2021-30807 | Apple Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | 0.29 | 0.98 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-30762 | Apple iOS | Apple iOS WebKit Use-After-Free Vulnerability | 0.11 | 0.54 | None yet | No |
| 2021-11-03 | CVE-2021-30761 | Apple iOS | Apple iOS WebKit Memory Corruption Vulnerability | 0.11 | 0.54 | None yet | No |
| 2021-11-03 | CVE-2021-30713 | Apple macOS | Apple macOS Unspecified Vulnerability | 0.07 | 0.52 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-30666 | Apple iOS | Apple iOS WebKit Buffer Overflow Vulnerability | 0.03 | 0.79 | None yet | No |
| 2021-11-03 | CVE-2021-30665 | Apple Multiple Products | Apple Multiple Products WebKit Memory Corruption Vulnerability | 0.04 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2021-30663 | Apple Multiple Products | Apple Multiple Products WebKit Integer Overflow Vulnerability | 0.04 | 0.97 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-30661 | Apple Multiple Products | Apple Multiple Products WebKit Storage Use-After-Free Vulnerability | 0.04 | 0.52 | None yet | No |
| 2021-11-03 | CVE-2021-30657 | Apple macOS | Apple macOS Unspecified Vulnerability | 0.69 | 0.99 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-1879 | Apple iOS, iPadOS, and watchOS | Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability | 0.07 | 0.97 | None yet | No |
| 2021-11-03 | CVE-2021-1871 | Apple iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 0.07 | 0.97 | None yet | No |
| 2021-11-03 | CVE-2021-1870 | Apple iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 0.08 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2021-1782 | Apple Multiple Products | Apple Multiple Products Race Condition Vulnerability | 0.02 | 0.97 | Out of scope (local) | No |
| 2021-11-03 | CVE-2020-9859 | Apple Multiple Products | Apple Multiple Products Code Execution Vulnerability | 0.01 | 0.69 | Out of scope (local) | No |
| 2021-11-03 | CVE-2020-9819 | Apple iOS, iPadOS, and watchOS | Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability | 0.02 | 0.51 | None yet | No |
| 2021-11-03 | CVE-2020-9818 | Apple iOS, iPadOS, and watchOS | Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability | 0.02 | 0.52 | None yet | No |
| 2021-11-03 | CVE-2020-27950 | Apple Multiple Products | Apple Multiple Products Memory Initialization Vulnerability | 0.17 | 0.97 | Out of scope (local) | No |
| 2021-11-03 | CVE-2020-27932 | Apple Multiple Products | Apple Multiple Products Type Confusion Vulnerability | 0.10 | 0.80 | Out of scope (local) | No |
| 2021-11-03 | CVE-2020-27930 | Apple Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | 0.22 | 0.98 | Out of scope (local) | No |
| 2021-11-03 | CVE-2019-6223 | Apple iOS and macOS | Apple iOS and macOS Group Facetime Vulnerability | 0.03 | 0.51 | None yet | No |
Industry partners
