Class familyApple · Multiple Products
Apple iOS and macOS certificate validation flaws, 2022–2026
4 Multiple Products CVEs with CWE-295 weaknesses, 26 May 2022 to 14 Sep 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
2 2022’22
1 2023’23
2024’24
2025’25
1 2026’26
In CISA KEVNot in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2022-26766 | 26 May 2022 | A certificate parsing issue was addressed with improved checks | Grouped by weakness | 26.1 |
| CVE-2022-42813 | 1 Nov 2022 | A certificate validation issue existed in the handling of WKWebView | Grouped by weakness | 20.7 |
| CVE-2023-41991KEV | 21 Sep 2023 | Apple Multiple Products Improper Certificate Validation Vulnerability | Grouped by weakness | 66.1 |
| CVE-2026-86881 | 14 Sep 2026 | A certificate validation issue was addressed with improved certificate validation | Grouped by weakness | 18.2 |