Skip to content
CVE Tracker
Apple

Apple macOS vulnerabilities

3,811 published CVEs name Apple macOS among the affected products; CISA lists 72 of them as exploited in the wild.

Published CVEs
3,811
Last 12 months
1,128
Critical
285
Known exploited
72

Critical 285High 1,540Medium 1,752Low 156Not scored 78

CVEs per yearBy the year they were published

  1. 201812
  2. 2020238
  3. 20201
  4. 2021365
  5. 20218
  6. 2023295
  7. 2024313
  8. 2025470
  9. 20261,008
  10. 2026627
  11. 2026474

Known exploitedNewest addition to KEV first

  • CVE-2026-86950

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1,…

    Apple · iOS and iPadOS

    ExploitedHigh8.8
  • CVE-2026-65400

    An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9,…

    Apple · macOS

    ExploitedCritical9.8
  • CVE-2025-43510

    A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS…

    Apple · iOS and iPadOS

    ExploitedHigh7.8
  • CVE-2025-43520

    A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS…

    Apple · iOS and iPadOS

    ExploitedMedium5.5
  • CVE-2025-31277

    The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS…

    Apple · Safari

    ExploitedHigh8.8
  • CVE-2023-43000

    A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS…

    Apple · macOS

    ExploitedHigh8.8
  • CVE-2021-30952

    An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2,…

    Apple · watchOS

    ExploitedHigh8.8
  • CVE-2026-20700

    A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS…

    Apple · iOS and iPadOS

    ExploitedHigh7.8
  • CVE-2025-43529

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS…

    Apple · Safari

    ExploitedHigh8.8
  • CVE-2022-48503

    The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6.…

    Apple · macOS

    ExploitedHigh8.8

Newest CVEs

  • CVE-2026-86925

    An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An…

    Apple · iOS and iPadOS

    Medium5.5
  • CVE-2026-84627

    A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27,…

    Apple · iOS and iPadOS

    High7.8
  • CVE-2026-113945

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system…

    Apple · macOS

    Medium5.5
  • CVE-2026-65327

    A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A local attacker may…

    Apple · macOS

    High8.4
  • CVE-2026-112529

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…

    Apple · macOS

    High7.5
  • CVE-2026-86972

    A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…

    Apple · iOS and iPadOS

    High7.8
  • CVE-2026-112483

    A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app…

    Apple · macOS

    Medium5.5
  • CVE-2026-113912

    An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS…

    Apple · iOS and iPadOS

    High7.1
  • CVE-2026-112495

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…

    Apple · macOS

    High7.1
  • CVE-2026-86964

    A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2,…

    Apple · iOS and iPadOS

    High7.5