Apple Known Exploited Vulnerabilities
Evidence-backed KEV intelligence for Apple products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.
Total KEVs
96
In CISA KEV
95
Beyond CISA KEV
1
Sensor Observed
0
Virtual Patch Available
0
Apple KEVs Added by Year
96 Apple KEVs added all time (primary attestation date).
Attested CVEs
| CVE | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2023-41061
A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted... |
iOS and iPadOS, watchOS | Confirmed | In CISA | 11 Sep 2023 |
|
CVE-2023-41064
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9,... |
macOS, iOS and iPadOS | Confirmed | In CISA | 11 Sep 2023 |
|
CVE-2023-41993
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution.... |
macOS | Confirmed | In CISA | 25 Sep 2023 |
|
CVE-2023-41992
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local... |
macOS, iOS and iPadOS | Confirmed | In CISA | 25 Sep 2023 |
|
CVE-2023-41991
A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to... |
iOS and iPadOS, macOS | Confirmed | In CISA | 25 Sep 2023 |
|
CVE-2023-42824
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their... |
iOS and iPadOS | Confirmed | In CISA | 05 Oct 2023 |
|
CVE-2023-42916
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2,... |
Safari, macOS, iOS and iPadOS | Confirmed | In CISA | 04 Dec 2023 |
|
CVE-2023-42917
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2,... |
Safari, macOS, iOS and iPadOS | Confirmed | In CISA | 04 Dec 2023 |
|
CVE-2023-41990
The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS... |
iOS and iPadOS, tvOS, macOS, watchOS | Confirmed | In CISA | 08 Jan 2024 |
|
CVE-2024-23222
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS... |
Safari, iOS and iPadOS, macOS, tvOS, visionOS | Confirmed | In CISA | 23 Jan 2024 |
|
CVE-2022-48618
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An... |
tvOS, macOS, iOS and iPadOS, watchOS | Confirmed | In CISA | 31 Jan 2024 |
|
CVE-2024-23296
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4,... |
iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 06 Mar 2024 |
|
CVE-2024-23225
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4,... |
iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 06 Mar 2024 |
|
CVE-2024-44308
The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1,... |
Safari, iOS and iPadOS, macOS, visionOS | Confirmed | In CISA | 21 Nov 2024 |
|
CVE-2024-44309
A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS... |
Safari, iOS and iPadOS, macOS, visionOS | Confirmed | In CISA | 21 Nov 2024 |
|
CVE-2025-24085
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia... |
iOS and iPadOS, iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 29 Jan 2025 |
|
CVE-2022-23748
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what... |
Audinate Dante Application Library for Windows | Confirmed | In CISA | 06 Feb 2025 |
|
CVE-2025-24200
An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS... |
iOS and iPadOS, iPadOS | Confirmed | In CISA | 12 Feb 2025 |
|
CVE-2025-24201
An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4... |
Safari, iOS and iPadOS, iPadOS, macOS, visionOS, watchOS | Confirmed | In CISA | 13 Mar 2025 |
|
CVE-2025-31200
A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1,... |
iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Confirmed | In CISA | 17 Apr 2025 |
|
CVE-2025-31201
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1,... |
iOS and iPadOS, macOS, tvOS, visionOS | Confirmed | In CISA | 17 Apr 2025 |
Common Vulnerability Classes (CWE)
- CWE-787 — Out-of-bounds Write 28
- CWE-416 — Use After Free 12
- CWE-843 — Access of Resource Using Incompatible Type ('Type Confusion') 8
- CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer 6
- CWE-120 — Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 4
- CWE-190 — Integer Overflow or Wraparound 4
- CWE-125 — Out-of-bounds Read 3
- CWE-667 — Improper Locking 2
Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology