Apple macOS vulnerabilities
3,811 published CVEs name Apple macOS among the affected products; CISA lists 72 of them as exploited in the wild.
- Published CVEs
- 3,811
- Last 12 months
- 1,128
- Critical
- 285
- Known exploited
- 72
Critical 285High 1,540Medium 1,752Low 156Not scored 78
CVEs per yearBy the year they were published
- 201812
- 2020238
- 20201
- 2021365
- 20218
- 2023295
- 2024313
- 2025470
- 20261,008
- 2026627
- 2026474
Known exploitedNewest addition to KEV first
- CVE-2026-86950
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1,…
Apple · iOS and iPadOS
ExploitedHigh8.8 - CVE-2026-65400
An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9,…
Apple · macOS
ExploitedCritical9.8 - CVE-2025-43510
A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS…
Apple · iOS and iPadOS
ExploitedHigh7.8 - CVE-2025-43520
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS…
Apple · iOS and iPadOS
ExploitedMedium5.5 - CVE-2025-31277
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS…
Apple · Safari
ExploitedHigh8.8 - CVE-2023-43000
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS…
Apple · macOS
ExploitedHigh8.8 - CVE-2021-30952
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2,…
Apple · watchOS
ExploitedHigh8.8 - CVE-2026-20700
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS…
Apple · iOS and iPadOS
ExploitedHigh7.8 - CVE-2025-43529
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS…
Apple · Safari
ExploitedHigh8.8 - CVE-2022-48503
The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6.…
Apple · macOS
ExploitedHigh8.8
Newest CVEs
- CVE-2026-86925
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An…
Apple · iOS and iPadOS
Medium5.5 - CVE-2026-84627
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27,…
Apple · iOS and iPadOS
High7.8 - CVE-2026-113945
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…
Apple · macOS
Medium5.5 - CVE-2026-65327
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A local attacker may…
Apple · macOS
High8.4 - CVE-2026-112529
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…
Apple · macOS
High7.5 - CVE-2026-86972
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…
Apple · iOS and iPadOS
High7.8 - CVE-2026-112483
A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…
Apple · macOS
Medium5.5 - CVE-2026-113912
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS…
Apple · iOS and iPadOS
High7.1 - CVE-2026-112495
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…
Apple · macOS
High7.1 - CVE-2026-86964
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2,…
Apple · iOS and iPadOS
High7.5
Most common weaknesses
- CWE-787 Out-of-bounds write521
- CWE-125 Out-of-bounds read358
- CWE-284 Improper access control206
- CWE-200 Exposure of sensitive information199
- CWE-416 Use after free186
- CWE-119 Memory buffer bounds error167
- CWE-120 Classic buffer overflow147
- CWE-20 Improper input validation126
- CWE-362 Race condition116
- CWE-863 Incorrect authorization75