Vendor
Apple
95 of 145 Apple CVEs in Patchfirst (66%) are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it. of vulnerabilities exploited in the wild.
- CVEs
- 145
- In CISA KEV
- 9566%
- Known ransomware use
- 0
- Median days to KEV
- 71
- from publication
- Latest KEV listing
- 29 Sep 2026
Products
In KEVOther CVEs
- Multiple Products In KEV: 54 CVEs: 54
- iOS, iPadOS, and macOS In KEV: 11 CVEs: 11
- iOS In KEV: 8 CVEs: 14
- macOS In KEV: 6 CVEs: 26
- iOS and iPadOS In KEV: 5 CVEs: 17
- iOS and macOS In KEV: 4 CVEs: 4
- iOS, iPadOS, and watchOS In KEV: 4 CVEs: 4
- OS X In KEV: 2 CVEs: 2
- iOS, macOS, watchOS In KEV: 1 CVEs: 1
- tvOS In KEV: 0 CVEs: 8
Top ATT&CK techniques
What attackers do with Apple CVEs- T1068Exploitation for Privilege Escalation CVEs: 39
- T1059Command and Scripting Interpreter CVEs: 37
- T1189Drive-by Compromise CVEs: 32
- T1204.002Malicious File CVEs: 25
- T1211Exploitation for Stealth CVEs: 10
Counts are Apple CVEs linked to the technique. Each link’s provenance is on the CVE page.
Apple CVEs
Top 100 of 145 by priority- CVE-2016-4657Apple iOS Webkit Memory Corruption VulnerabilityApple · iOSKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter66.8%Top 0.71%79.0priority
- CVE-2026-86950Apple Multiple Products Out-of-Bounds Write VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1059Command and Scripting Interpreter26.2%Top 2%78.8priority
- CVE-2016-4656Apple iOS Memory Corruption VulnerabilityApple · iOSKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation23.6%Top 2.2%78.0priority
- CVE-2016-4655Apple iOS Information Disclosure Vulnerability33.4%Top 1.6%76.5priority
- CVE-2026-65400Apple macOS Improper Authentication Vulnerability1.7%Top 23%75.4priority
- CVE-2025-43529Apple Multiple Products Use-After-Free WebKit VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter25.7%Top 2%73.8priority
- CVE-2023-43000Apple Multiple products Use-After-Free VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution4.0%Top 9.4%72.3priority
- CVE-2021-30952Apple Multiple Products Integer Overflow or Wraparound VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter7.0%Top 5.9%72.3priority
- CVE-2021-30657Apple macOS Unspecified Vulnerability68.5%Top 0.66%70.6priority
- CVE-2025-43300Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityApple · iOS, iPadOS, and macOSKEVPublic exploitCritical · 10.065.2%Top 0.75%69.9priority
- CVE-2019-8646An out-of-bounds read was addressed with improved input validationApple · iOSPublic exploit11.0%Top 4.1%69.9priority
- CVE-2025-31277Apple Multiple Products Buffer Overflow VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution1.7%Top 23%69.5priority
- CVE-2023-41974Apple iOS and iPadOS Use-After-Free VulnerabilityApple · iOS and iPadOSKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation2.0%Top 20%69.5priority
- CVE-2025-31200Apple Multiple Products Memory Corruption VulnerabilityApple · Multiple ProductsKEVPublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1106Native API+3 more20.9%Top 2.4%69.4priority
- CVE-2025-24085Apple Multiple Products Use-After-Free VulnerabilityApple · Multiple ProductsKEVPublic exploitCritical · 10.0T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation17.5%Top 2.9%69.4priority
- CVE-2025-31201Apple Multiple Products Arbitrary Read and Write VulnerabilityApple · Multiple ProductsKEVPublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1106Native API+3 more14.0%Top 3.5%69.2priority
- CVE-2026-20700Apple Multiple Buffer Overflow VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation1.7%Top 23%68.8priority
- CVE-2023-28205Apple Multiple Products WebKit Use-After-Free VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter27.1%Top 2%68.8priority
- CVE-2023-41993Apple Multiple Products WebKit Code Execution VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter24.3%Top 2.1%68.7priority
- CVE-2023-28206Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability23.2%Top 2.2%68.6priority
- CVE-2022-22620Apple iOS, iPadOS, and macOS Webkit Use-After-Free VulnerabilityApple · iOS, iPadOS, and macOSKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter16.3%Top 3%68.6priority
- CVE-2019-8506Apple Multiple Products Type Confusion VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter16.2%Top 3.1%68.5priority
- CVE-2021-30860Apple Multiple Products Integer Overflow VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter76.0%Top 0.47%68.4priority
- CVE-2021-30858Apple iOS, iPadOS, macOS Use-After-Free VulnerabilityApple · iOS, iPadOS, and macOSKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter13.4%Top 3.6%68.4priority
- CVE-2024-44308Apple Multiple Products Code Execution VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution9.9%Top 4.4%68.3priority
- CVE-2024-23222Apple Multiple Products WebKit Type Confusion VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter10.6%Top 4.2%68.3priority
- CVE-2023-41064Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow VulnerabilityApple · iOS, iPadOS, and macOSKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter53.4%Top 1%68.3priority
- CVE-2023-32434Apple Multiple Products Integer Overflow Vulnerability51.5%Top 1.1%68.2priority
- CVE-2014-4404Apple OS X Heap-Based Buffer Overflow VulnerabilityApple · OS XKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation48.9%Top 1.1%68.2priority
- CVE-2021-30807Apple Multiple Products Memory Corruption Vulnerability28.8%Top 1.9%68.1priority
- CVE-2025-24201Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability3.8%Top 9.9%68.0priority
- CVE-2020-27930Apple Multiple Products Memory Corruption VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter22.0%Top 2.3%68.0priority
- CVE-2019-8605Apple Multiple Products Use-After-Free VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation17.6%Top 2.9%67.9priority
- CVE-2020-3837Apple Multiple Products Memory Corruption VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1211Exploitation for Stealth14.8%Top 3.3%67.8priority
- CVE-2019-7286Apple Multiple Products Memory Corruption VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation15.9%Top 3.1%67.8priority
- CVE-2020-27932Apple Multiple Products Type Confusion VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation10.3%Top 4.3%67.6priority
- CVE-2015-1130Apple OS X Authentication Bypass VulnerabilityApple · OS XKEVPublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation9.9%Top 4.4%67.6priority
- CVE-2023-41992Apple Multiple Products Kernel Privilege Escalation Vulnerability9.5%Top 4.6%67.5priority
- CVE-2021-1789Apple Multiple Products Type Confusion VulnerabilityApple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter1 report14.0%Top 3.5%67.3priority
- CVE-2020-27950Apple Multiple Products Memory Initialization VulnerabilityApple · Multiple ProductsKEVPublic exploitMedium · 5.5T1204.002Malicious FileT1005Data from Local System16.5%Top 3%66.2priority
- CVE-2023-41991Apple Multiple Products Improper Certificate Validation Vulnerability13.4%Top 3.6%66.1priority
- CVE-2022-46689A race condition was addressed with additional validationApple · macOSPublic exploitHigh · 7.048.2%Top 1.1%66.0priority
- CVE-2020-9802A logic issue was addressed with improved restrictionsApple · iOSPublic exploitHigh · 8.88.3%Top 5.1%65.8priority
- CVE-2021-30869Apple iOS, iPadOS, and macOS Type Confusion VulnerabilityApple · iOS, iPadOS, and macOSKEVHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation1 report4.1%Top 9.2%65.5priority
- CVE-2020-9934Apple iOS, iPadOS, and macOS Input Validation VulnerabilityApple · iOS, iPadOS, and macOSKEVPublic exploitMedium · 5.5T1068Exploitation for Privilege EscalationT1005Data from Local System3.2%Top 12%64.5priority
- CVE-2021-1782Apple Multiple Products Race Condition VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.0T1204.002Malicious FileT1068Exploitation for Privilege Escalation2.2%Top 17%64.4priority
- CVE-2022-22587Apple Memory Corruption Vulnerability11.6%Top 4%64.1priority
- CVE-2021-1870Apple iOS, iPadOS, and macOS WebKit Remote Code Execution VulnerabilityApple · iOS, iPadOS, and macOSKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter7.7%Top 5.4%63.8priority
- CVE-2023-32439Apple Multiple Products WebKit Type Confusion VulnerabilityApple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter24.0%Top 2.2%63.7priority
- CVE-2023-32435Apple Multiple Products WebKit Memory Corruption VulnerabilityApple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter23.0%Top 2.3%63.7priority
- CVE-2021-1871Apple iOS, iPadOS, and macOS WebKit Remote Code Execution VulnerabilityApple · iOS, iPadOS, and macOSKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter7.0%Top 5.8%63.7priority
- CVE-2023-37450Apple Multiple Products WebKit Code Execution VulnerabilityApple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter18.9%Top 2.7%63.6priority
- CVE-2023-32409Apple Multiple Products WebKit Sandbox Escape Vulnerability16.5%Top 3%63.4priority
- CVE-2023-32373Apple Multiple Products WebKit Use-After-Free VulnerabilityApple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter12.2%Top 3.8%63.4priority
- CVE-2022-32893Apple iOS and macOS Out-of-Bounds Write Vulnerability9.9%Top 4.4%63.3priority
- CVE-2021-30762Apple iOS WebKit Use-After-Free Vulnerability11.0%Top 4.1%63.3priority
- CVE-2021-30761Apple iOS WebKit Memory Corruption Vulnerability10.5%Top 4.2%63.3priority
- CVE-2018-5383Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchangeApple · macOSHigh · 8.00.8%Top 43%63.3priority
- CVE-2023-42917Apple Multiple Products WebKit Memory Corruption VulnerabilityApple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter9.3%Top 4.6%63.2priority
- CVE-2023-23529Apple Multiple Products WebKit Type Confusion VulnerabilityApple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution9.4%Top 4.6%63.2priority
- CVE-2022-42856Apple iOS Type Confusion Vulnerability8.5%Top 5%63.2priority
- CVE-2024-23296Apple Multiple Products Memory Corruption VulnerabilityApple · Multiple ProductsKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1211Exploitation for Stealth1.4%Top 27%63.0priority
- CVE-2021-30883Apple Multiple Products Memory Corruption VulnerabilityApple · Multiple ProductsKEVHigh · 7.8T1068Exploitation for Privilege EscalationT1211Exploitation for Stealth14.7%Top 3.3%62.8priority
- CVE-2022-22675Apple macOS Out-of-Bounds Write Vulnerability12.5%Top 3.8%62.7priority
- CVE-2021-30661Apple Multiple Products WebKit Storage Use-After-Free VulnerabilityApple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter4.5%Top 8.5%62.5priority
- CVE-2021-30713Apple macOS Unspecified VulnerabilityApple · macOSKEVHigh · 7.8T1068Exploitation for Privilege EscalationT1548Abuse Elevation Control Mechanism7.0%Top 5.8%62.3priority
- CVE-2021-30665Apple Multiple Products WebKit Memory Corruption VulnerabilityApple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution3.7%Top 10%62.1priority
- CVE-2023-42916Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability17.8%Top 2.8%62.0priority
- CVE-2022-32917Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability5.6%Top 7.1%62.0priority
- CVE-2021-30663Apple Multiple Products WebKit Integer Overflow VulnerabilityApple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter3.5%Top 11%62.0priority
- CVE-2021-30900Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityApple · iOS, iPadOS, and macOSKEVHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation5.2%Top 7.5%62.0priority
- CVE-2024-44309Apple Multiple Products Cross-Site Scripting (XSS) VulnerabilityApple · Multiple ProductsKEVMedium · 6.3T1189Drive-by CompromiseT1059Command and Scripting Interpreter21.9%Top 2.3%61.9priority
- CVE-2023-28204Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability14.3%Top 3.4%61.9priority
- CVE-2022-48503Apple Multiple Products Unspecified VulnerabilityApple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter3.2%Top 12%61.8priority
- CVE-2019-7287Apple iOS Memory Corruption Vulnerability4.6%Top 8.4%61.8priority
- CVE-2023-41061Apple iOS, iPadOS, and watchOS Wallet Code Execution VulnerabilityApple · iOS, iPadOS, and watchOSKEVHigh · 7.8T1204.001Malicious LinkT1059Command and Scripting Interpreter4.4%Top 8.7%61.7priority
- CVE-2021-30666Apple iOS WebKit Buffer Overflow Vulnerability3.0%Top 13%61.6priority
- CVE-2022-32894Apple iOS and macOS Out-of-Bounds Write Vulnerability3.3%Top 12%61.2priority
- CVE-2021-31010Apple iOS, macOS, watchOS Sandbox Bypass VulnerabilityApple · iOS, macOS, watchOSKEVHigh · 7.5T1068Exploitation for Privilege EscalationT1211Exploitation for Stealth3.7%Top 10%61.2priority
- CVE-2021-1879Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability7.1%Top 5.8%61.1priority
- CVE-2020-9907Apple Multiple Products Memory Corruption VulnerabilityApple · Multiple ProductsKEVHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation3.2%Top 12%61.1priority
- CVE-2021-30983Apple iOS and iPadOS Buffer Overflow VulnerabilityApple · iOS and iPadOSKEVHigh · 7.8T1068Exploitation for Privilege EscalationT1211Exploitation for Stealth2.9%Top 13%60.9priority
- CVE-2020-9818Apple iOS, iPadOS, and watchOS Out-of-Bounds Write VulnerabilityApple · iOS, iPadOS, and watchOSKEVHigh · 8.8T1204.001Malicious LinkT1499.004Application or System Exploitation2.3%Top 16%60.9priority
- CVE-2023-42824Apple iOS and iPadOS Kernel Privilege Escalation VulnerabilityApple · iOS and iPadOSKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1548Abuse Elevation Control Mechanism1.0%Top 38%60.8priority
- CVE-2025-24200Apple iOS and iPadOS Incorrect Authorization Vulnerability4.5%Top 8.6%60.6priority
- CVE-2019-6223Apple iOS and macOS Group Facetime Vulnerability2.6%Top 15%60.3priority
- CVE-2018-4344Apple Multiple Products Memory Corruption Vulnerability2.4%Top 16%60.2priority
- CVE-2025-43520Apple Multiple Products Classic Buffer Overflow VulnerabilityApple · Multiple ProductsKEVPublic exploitMedium · 5.5T1204.002Malicious FileT1068Exploitation for Privilege Escalation+1 more0.4%Top 63%59.2priority
- CVE-2023-38606Apple Multiple Products Kernel Unspecified VulnerabilityApple · Multiple ProductsKEVMedium · 5.5T1068Exploitation for Privilege EscalationT1211Exploitation for Stealth2.9%Top 13%59.2priority
- CVE-2025-43542This issue was addressed with improved state managementApple · iOS and iPadOSHigh · 7.50.9%Top 42%58.5priority
- CVE-2022-42837An issue existed in the parsing of URLsApple · macOSCritical · 9.82.3%Top 17%58.5priority
- CVE-2024-23225Apple Multiple Products Memory Corruption VulnerabilityApple · Multiple ProductsKEVHigh · 7.8T1068Exploitation for Privilege EscalationT1211Exploitation for Stealth1.5%Top 26%58.2priority
- CVE-2023-41990Apple Multiple Products Code Execution Vulnerability1.4%Top 28%57.9priority
- CVE-2020-9819Apple iOS, iPadOS, and watchOS Memory Corruption VulnerabilityApple · iOS, iPadOS, and watchOSKEVMedium · 4.3T1204.001Malicious LinkT1059Command and Scripting Interpreter2.2%Top 17%57.6priority
- CVE-2024-44258This issue was addressed with improved handling of symlinksApple · iOS and iPadOSPublic exploitHigh · 7.10.8%Top 45%57.3priority
- CVE-2022-42864A race condition was addressed with improved state handlingApple · macOSPublic exploitHigh · 7.00.9%Top 40%56.8priority
- CVE-2022-46691A memory consumption issue was addressed with improved memory handlingApple · tvOSHigh · 8.81.6%Top 24%56.4priority
- CVE-2022-42827Apple iOS and iPadOS Out-of-Bounds Write VulnerabilityApple · iOS and iPadOSKEVHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation1.1%Top 35%56.4priority
- CVE-2025-24113The issue was addressed with improved UIApple · SafariMedium · 4.30.8%Top 43%55.7priority
- CVE-2022-46700A memory corruption issue was addressed with improved input validationApple · tvOSHigh · 8.81.3%Top 29%55.3priority