Class familyApple · iOS, iPadOS, and macOS
Apple iOS and macOS out-of-bounds write flaws, 2016–2026
88 iOS, iPadOS, and macOS CVEs with CWE-787 weaknesses, 25 Aug 2016 to 26 Oct 2026. 28 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
2 2016’16
2017’17
2018’18
2 2019’19
5 2020’20
5 2021’21
39 2022’22
15 2023’23
9 2024’24
2 2025’25
9 2026’26
In CISA KEVNot in KEV
20162 CVEs, 2 in KEV
20192 CVEs, 2 in KEV
20205 CVEs, 5 in KEV
20215 CVEs, 5 in KEV
202239 CVEs, 6 in KEV
- CVE-2022-22587
- CVE-2022-22675
- CVE-2022-26768
- CVE-2022-26771
- CVE-2022-32793
- CVE-2022-32810
- CVE-2022-32813
- CVE-2022-32893
- CVE-2022-32894
- CVE-2022-32908
- CVE-2022-32911
- CVE-2022-32917
- CVE-2022-32787
- CVE-2022-32792
- CVE-2022-32815
- CVE-2022-32820
- CVE-2022-32821
- CVE-2022-26716
- CVE-2022-26762
- CVE-2022-32866
- CVE-2022-32888
- CVE-2022-32925
- CVE-2022-32932
- CVE-2022-32944
- CVE-2022-32947
- CVE-2022-42795
- CVE-2022-42808
- CVE-2022-42827
- CVE-2022-32860
- CVE-2022-42840
- CVE-2022-42842
- CVE-2022-42845
- CVE-2022-42850
- CVE-2022-42863
- CVE-2022-46690
- CVE-2022-46691
- CVE-2022-46694
- CVE-2022-46699
- CVE-2022-46700
202315 CVEs, 3 in KEV
20249 CVEs, 2 in KEV
20252 CVEs, 2 in KEV
20269 CVEs, 1 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2016-4656KEV | 25 Aug 2016 | Apple iOS Memory Corruption Vulnerability | Grouped by weakness | 78.0 |
| CVE-2016-4657KEV | 25 Aug 2016 | Apple iOS Webkit Memory Corruption Vulnerability | Grouped by weakness | 79.0 |
| CVE-2019-7286KEV | 18 Dec 2019 | Apple Multiple Products Memory Corruption Vulnerability | Grouped by weakness | 67.8 |
| CVE-2019-7287KEV | 18 Dec 2019 | Apple iOS Memory Corruption Vulnerability | Grouped by weakness | 61.8 |
| CVE-2020-3837KEV | 27 Feb 2020 | Apple Multiple Products Memory Corruption Vulnerability | Grouped by weakness | 67.8 |
| CVE-2020-9818KEV | 9 Jun 2020 | Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability | Grouped by weakness | 60.9 |
| CVE-2020-9819KEV | 9 Jun 2020 | Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability | Grouped by weakness | 57.6 |
| CVE-2020-9907KEV | 16 Oct 2020 | Apple Multiple Products Memory Corruption Vulnerability | Grouped by weakness | 61.1 |
| CVE-2020-27930KEV | 8 Dec 2020 | Apple Multiple Products Memory Corruption Vulnerability | Grouped by weakness | 68.0 |
| CVE-2021-30883KEV | 24 Aug 2021 | Apple Multiple Products Memory Corruption Vulnerability | Grouped by weakness | 62.8 |
| CVE-2021-30900KEV | 24 Aug 2021 | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | Grouped by weakness | 62.0 |
| CVE-2021-30665KEV | 8 Sep 2021 | Apple Multiple Products WebKit Memory Corruption Vulnerability | Grouped by weakness | 62.1 |
| CVE-2021-30761KEV | 8 Sep 2021 | Apple iOS WebKit Memory Corruption Vulnerability | Grouped by weakness | 63.3 |
| CVE-2021-30807KEV | 19 Oct 2021 | Apple Multiple Products Memory Corruption Vulnerability | Grouped by weakness | 68.1 |
| CVE-2022-22587KEV | 18 Mar 2022 | Apple Memory Corruption Vulnerability | Grouped by weakness | 64.1 |
| CVE-2022-22675KEV | 26 May 2022 | Apple macOS Out-of-Bounds Write Vulnerability | Grouped by weakness | 62.7 |
| CVE-2022-26768 | 26 May 2022 | A memory corruption issue was addressed with improved state management | Grouped by weakness | 20.0 |
| CVE-2022-26771 | 26 May 2022 | A memory corruption issue was addressed with improved state management | Grouped by weakness | 18.6 |
| CVE-2022-32793 | 24 Aug 2022 | Multiple out-of-bounds write issues were addressed with improved bounds checking | Grouped by weakness | 18.5 |
| CVE-2022-32810 | 24 Aug 2022 | The issue was addressed with improved memory handling | Grouped by weakness | 15.8 |
| CVE-2022-32813 | 24 Aug 2022 | The issue was addressed with improved memory handling | Grouped by weakness | 9.1 |
| CVE-2022-32893KEV | 24 Aug 2022 | Apple iOS and macOS Out-of-Bounds Write Vulnerability | Grouped by weakness | 63.3 |
| CVE-2022-32894KEV | 24 Aug 2022 | Apple iOS and macOS Out-of-Bounds Write Vulnerability | Grouped by weakness | 61.2 |
| CVE-2022-32908 | 20 Sep 2022 | A memory corruption issue was addressed with improved input validation | Grouped by weakness | 11.6 |
| CVE-2022-32911 | 20 Sep 2022 | The issue was addressed with improved memory handling | Grouped by weakness | 12.6 |
| CVE-2022-32917KEV | 20 Sep 2022 | Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability | Grouped by weakness | 62.0 |
| CVE-2022-32787 | 23 Sep 2022 | An out-of-bounds write issue was addressed with improved bounds checking | Grouped by weakness | 21.4 |
| CVE-2022-32792 | 23 Sep 2022 | An out-of-bounds write issue was addressed with improved input validation | Grouped by weakness | 22.8 |
| CVE-2022-32815 | 23 Sep 2022 | The issue was addressed with improved memory handling | Grouped by weakness | 11.3 |
| CVE-2022-32820 | 23 Sep 2022 | An out-of-bounds write issue was addressed with improved input validation | Grouped by weakness | 9.7 |
| CVE-2022-32821 | 23 Sep 2022 | A memory corruption issue was addressed with improved validation | Grouped by weakness | 16.1 |
| CVE-2022-26716 | 1 Nov 2022 | A memory corruption issue was addressed with improved state management | Grouped by weakness | 19.5 |
| CVE-2022-26762 | 1 Nov 2022 | A memory corruption issue was addressed with improved memory handling | Grouped by weakness | 11.9 |
| CVE-2022-32866 | 1 Nov 2022 | The issue was addressed with improved memory handling | Grouped by weakness | 10.5 |
| CVE-2022-32888 | 1 Nov 2022 | An out-of-bounds write issue was addressed with improved bounds checking | Grouped by weakness | 21.2 |
| CVE-2022-32925 | 1 Nov 2022 | An out-of-bounds write issue was addressed with improved bounds checking | Grouped by weakness | 8.9 |
| CVE-2022-32932 | 1 Nov 2022 | The issue was addressed with improved memory handling | Grouped by weakness | 20.4 |
| CVE-2022-32944 | 1 Nov 2022 | A memory corruption issue was addressed with improved state management | Grouped by weakness | 10.3 |
| CVE-2022-32947 | 1 Nov 2022 | The issue was addressed with improved memory handling | Grouped by weakness | 21.4 |
| CVE-2022-42795 | 1 Nov 2022 | A memory consumption issue was addressed with improved memory handling | Grouped by weakness | 21.4 |
| CVE-2022-42808 | 1 Nov 2022 | An out-of-bounds write issue was addressed with improved bounds checking | Grouped by weakness | 24.0 |
| CVE-2022-42827KEV | 1 Nov 2022 | Apple iOS and iPadOS Out-of-Bounds Write Vulnerability | Grouped by weakness | 56.4 |
| CVE-2022-32860 | 15 Dec 2022 | An out-of-bounds write was addressed with improved input validation | Grouped by weakness | 9.2 |
| CVE-2022-42840 | 15 Dec 2022 | The issue was addressed with improved memory handling | Grouped by weakness | 47.1 |
| CVE-2022-42842 | 15 Dec 2022 | The issue was addressed with improved memory handling | Grouped by weakness | 23.7 |
| CVE-2022-42845 | 15 Dec 2022 | The issue was addressed with improved memory handling | Grouped by weakness | 20.7 |
| CVE-2022-42850 | 15 Dec 2022 | The issue was addressed with improved memory handling | Grouped by weakness | 12.4 |
| CVE-2022-42863 | 15 Dec 2022 | A memory corruption issue was addressed with improved state management | Grouped by weakness | 20.0 |
| CVE-2022-46690 | 15 Dec 2022 | An out-of-bounds write issue was addressed with improved input validation | Grouped by weakness | 50.4 |
| CVE-2022-46691 | 15 Dec 2022 | A memory consumption issue was addressed with improved memory handling | Grouped by weakness | 56.4 |
| CVE-2022-46694 | 15 Dec 2022 | An out-of-bounds write issue was addressed with improved input validation | Grouped by weakness | 46.4 |
| CVE-2022-46699 | 15 Dec 2022 | A memory corruption issue was addressed with improved state management | Grouped by weakness | 20.3 |
| CVE-2022-46700 | 15 Dec 2022 | A memory corruption issue was addressed with improved input validation | Grouped by weakness | 55.3 |
| CVE-2022-46723 | 27 Feb 2023 | This issue was addressed with improved checks | Grouped by weakness | 12.1 |
| CVE-2023-23504 | 27 Feb 2023 | The issue was addressed with improved memory handling | Grouped by weakness | 11.3 |
| CVE-2023-23518 | 27 Feb 2023 | The issue was addressed with improved memory handling | Grouped by weakness | 18.1 |
| CVE-2022-42858 | 10 Apr 2023 | A memory corruption issue was addressed with improved input validation | Grouped by weakness | 8.8 |
| CVE-2022-46709 | 10 Apr 2023 | A memory corruption issue was addressed with improved state management | Grouped by weakness | 17.9 |
| CVE-2023-28206KEV | 10 Apr 2023 | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability | Grouped by weakness | 68.6 |
| CVE-2022-32885 | 8 May 2023 | A memory corruption issue was addressed with improved validation | Grouped by weakness | 17.5 |
| CVE-2023-27933 | 8 May 2023 | The issue was addressed with improved memory handling | Grouped by weakness | 8.0 |
| CVE-2023-27936 | 8 May 2023 | An out-of-bounds write issue was addressed with improved input validation | Grouped by weakness | 8.9 |
| CVE-2023-27959 | 8 May 2023 | The issue was addressed with improved memory handling | Grouped by weakness | 8.7 |
| CVE-2023-27970 | 8 May 2023 | An out-of-bounds write issue was addressed with improved bounds checking | Grouped by weakness | 8.6 |
| CVE-2023-23516 | 23 Jun 2023 | The issue was addressed with improved memory handling | Grouped by weakness | 3.2 |
| CVE-2023-32397 | 23 Jun 2023 | A logic issue was addressed with improved state management | Grouped by weakness | 11.0 |
| CVE-2023-32435KEV | 23 Jun 2023 | Apple Multiple Products WebKit Memory Corruption Vulnerability | Grouped by weakness | 63.7 |
| CVE-2023-42917KEV | 30 Nov 2023 | Apple Multiple Products WebKit Memory Corruption Vulnerability | Grouped by weakness | 63.2 |
| CVE-2023-32366 | 10 Jan 2024 | An out-of-bounds write issue was addressed with improved input validation | Grouped by weakness | 7.7 |
| CVE-2023-42871 | 10 Jan 2024 | The issue was addressed with improved memory handling | Grouped by weakness | 8.0 |
| CVE-2024-23214 | 23 Jan 2024 | Multiple memory corruption issues were addressed with improved memory handling | Grouped by weakness | 18.8 |
| CVE-2023-42873 | 21 Feb 2024 | The issue was addressed with improved bounds checks | Grouped by weakness | 8.1 |
| CVE-2024-23225KEV | 5 Mar 2024 | Apple Multiple Products Memory Corruption Vulnerability | Grouped by weakness | 58.2 |
| CVE-2024-23296KEV | 5 Mar 2024 | Apple Multiple Products Memory Corruption Vulnerability | Grouped by weakness | 63.0 |
| CVE-2024-23270 | 8 Mar 2024 | The issue was addressed with improved memory handling | Grouped by weakness | 9.5 |
| CVE-2024-27802 | 10 Jun 2024 | An out-of-bounds read was addressed with improved input validation | Grouped by weakness | 12.7 |
| CVE-2024-27815 | 10 Jun 2024 | An out-of-bounds write issue was addressed with improved input validation | Grouped by weakness | 25.4 |
| CVE-2025-24201KEV | 11 Mar 2025 | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability | Grouped by weakness | 68.0 |
| CVE-2025-43300KEV | 21 Aug 2025 | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | Grouped by weakness | 69.9 |
| CVE-2026-28819 | 11 May 2026 | An out-of-bounds write issue was addressed with improved bounds checking | Grouped by weakness | 22.5 |
| CVE-2026-28918 | 11 May 2026 | An out-of-bounds access issue was addressed with improved bounds checking | Grouped by weakness | 12.9 |
| CVE-2026-64764 | 27 Jul 2026 | An out-of-bounds write issue was addressed with improved bounds checking | Grouped by weakness | 7.0 |
| CVE-2026-84531 | 14 Sep 2026 | An out-of-bounds write issue was addressed with improved bounds checking | Grouped by weakness | 5.2 |
| CVE-2026-86869 | 14 Sep 2026 | An out-of-bounds write issue was addressed with improved bounds checking | Grouped by weakness | 10.1 |
| CVE-2026-86950KEV | 28 Sep 2026 | Apple Multiple Products Out-of-Bounds Write Vulnerability | Grouped by weakness | 78.8 |
| CVE-2026-86918 | 20 Oct 2026 | An out-of-bounds write issue was addressed with improved bounds checking | Grouped by weakness | 7.3 |
| CVE-2026-112614 | 26 Oct 2026 | An out-of-bounds write issue was addressed with improved bounds checking | Grouped by weakness | 13.1 |
| CVE-2026-112646 | 26 Oct 2026 | An out-of-bounds write issue was addressed with improved bounds checking | Grouped by weakness | 13.8 |