Apple Known Exploited Vulnerabilities
Evidence-backed KEV intelligence for Apple products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.
Total KEVs
96
In CISA KEV
95
Beyond CISA KEV
1
Sensor Observed
0
Virtual Patch Available
0
Apple KEVs Added by Year
96 Apple KEVs added all time (primary attestation date).
Attested CVEs
| CVE | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2018-4344
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12,... |
iOS, macOS, tvOS, watchOS | Confirmed | In CISA | 27 Jun 2022 |
|
CVE-2019-8605
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS... |
iOS, macOS, tvOS, watchOS | Confirmed | In CISA | 27 Jun 2022 |
|
CVE-2020-9907
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An... |
iOS, tvOS | Confirmed | In CISA | 27 Jun 2022 |
|
CVE-2020-3837
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3,... |
iOS, macOS, tvOS, watchOS | Confirmed | In CISA | 27 Jun 2022 |
|
CVE-2021-30983
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to... |
iOS and iPadOS | Confirmed | In CISA | 27 Jun 2022 |
|
CVE-2022-32893
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey... |
Safari, iOS and iPadOS, macOS | Confirmed | In CISA | 18 Aug 2022 |
|
CVE-2022-32894
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey... |
iOS and iPadOS, macOS | Confirmed | In CISA | 18 Aug 2022 |
|
CVE-2021-31010
A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8... |
macOS, watchOS | Confirmed | In CISA | 25 Aug 2022 |
|
CVE-2020-9934
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and... |
iOS, macOS | Confirmed | In CISA | 08 Sep 2022 |
|
CVE-2022-32917
The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur... |
iOS, macOS | Confirmed | In CISA | 14 Sep 2022 |
|
CVE-2022-42827
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS... |
iOS and iPadOS | Confirmed | In CISA | 25 Oct 2022 |
|
CVE-2022-42856
A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2... |
tvOS | Confirmed | In CISA | 14 Dec 2022 |
|
CVE-2023-23529
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS... |
iOS and iPadOS, Safari, macOS | Confirmed | In CISA | 14 Feb 2023 |
|
CVE-2021-30900
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS... |
iOS and iPadOS | Confirmed | In CISA | 30 Mar 2023 |
|
CVE-2023-28206
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS... |
iOS and iPadOS, macOS | Confirmed | In CISA | 10 Apr 2023 |
|
CVE-2023-28205
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS... |
iOS and iPadOS, Safari, macOS | Confirmed | In CISA | 10 Apr 2023 |
|
CVE-2019-8526
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to... |
macOS | Confirmed | In CISA | 17 Apr 2023 |
|
CVE-2023-32373
A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6... |
macOS, Safari, watchOS, iOS and iPadOS, tvOS | Confirmed | In CISA | 22 May 2023 |
|
CVE-2023-28204
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6... |
macOS, Safari, watchOS, iOS and iPadOS, tvOS | Confirmed | In CISA | 22 May 2023 |
|
CVE-2023-32409
The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS... |
macOS, Safari, watchOS, iOS and iPadOS, tvOS | Confirmed | In CISA | 22 May 2023 |
|
CVE-2023-32439
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS... |
iOS and iPadOS, Safari, macOS | Confirmed | In CISA | 23 Jun 2023 |
|
CVE-2023-32435
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS... |
macOS, iOS and iPadOS, Safari | Confirmed | In CISA | 23 Jun 2023 |
|
CVE-2023-32434
An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS... |
macOS, iOS and iPadOS, watchOS | Confirmed | In CISA | 23 Jun 2023 |
|
CVE-2023-37450
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5,... |
Safari, tvOS, iOS and iPadOS, macOS, watchOS | Confirmed | In CISA | 13 Jul 2023 |
|
CVE-2023-38606
This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and... |
tvOS, iOS and iPadOS, macOS, watchOS | Confirmed | In CISA | 26 Jul 2023 |
Common Vulnerability Classes (CWE)
- CWE-787 — Out-of-bounds Write 28
- CWE-416 — Use After Free 12
- CWE-843 — Access of Resource Using Incompatible Type ('Type Confusion') 8
- CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer 6
- CWE-120 — Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 4
- CWE-190 — Integer Overflow or Wraparound 4
- CWE-125 — Out-of-bounds Read 3
- CWE-667 — Improper Locking 2
Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology