VulnSea

apple has 872 CVEs on record. Disclosure cadence is accelerating: 654 in the last 90 days against 55 in the 90 before. The busiest recent month was October 2026 with 375. The median CVSS is 5.9 (medium), with 25 rated critical. 1% have been exploited in the wild, in line with the corpus average. The median gap from publication to a KEV listing is 98 days (9 cases). The dominant weakness classes are CWE-120 (43) and CWE-787 (43). Most affected products: macOS (366), ipados (199), iOS and iPadOS (189).

CVEs per month

Last 12 months, by publish date

120102030405060708091011
Exploited share
1% vs 1% corpus
Median CVSS
5.9
Publish → KEV
98 d median(9)
Last 90 days
654 prev 55

Products

  • macOS 366
  • ipados 199
  • iOS and iPadOS 189
  • Safari 94
  • Xcode 8
  • Container 3
Follow apple:RSS feedSave a search →Embed badge ↗
872
Total CVEs
25
Critical
10
CISA KEV
10
Exploited

Worst active — by depth score

apple vulnerabilities

CVEs affecting apple, newest first. Open any entry for full detail, references, and exploit status.

872 CVEsRSS

CVE-2026-64715Medium· 6.5⚖ disputed
2mo ago

A use-after-free issue was addressed with improved memory management

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing ma…

▾ Sunlitapple · safariEPSS 0.47%via NVD
CVE-2026-64778Medium· 6.5
2mo ago

The issue was addressed with improved checks

The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Visiting a maliciously crafted websit…

▾ Sunlitapple · safariEPSS 0.34%via NVD
CVE-2026-65333Medium· 4.3⚖ disputed
2mo ago

This issue was addressed through improved state management

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content m…

▾ Sunlitapple · ipadosEPSS 0.58%via NVD
CVE-2026-65343High· 7.5PoC
2mo ago

A use after free issue was addressed with improved memory management

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. A remote attacker may be able to cause unexpected system ter…

▾ Midnightapple · ipadosEPSS 0.69%via NVD
CVE-2026-65338Medium· 4.3⚖ disputed
2mo ago

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may le…

▾ Sunlitapple · safariEPSS 0.58%via NVD
CVE-2026-65334Medium· 4.3⚖ disputed
2mo ago

A memory corruption issue was addressed with improved state management

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted w…

▾ Sunlitapple · safariEPSS 0.58%via NVD
CVE-2026-65335Medium· 4.3⚖ disputed
2mo ago

This issue was addressed through improved state management

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content m…

▾ Sunlitapple · ipadosEPSS 0.58%via NVD
CVE-2026-65339Medium· 5.0
2mo ago

A logic issue was addressed with improved checks

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to leak sensitive user information.

▾ Sunlitapple · ipadosEPSS 0.15%via NVD
CVE-2026-64787Medium· 6.5⚖ disputed
2mo ago

A use-after-free issue was addressed with improved memory management

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing ma…

▾ Sunlitapple · safariEPSS 0.33%via NVD
CVE-2026-65341Medium· 5.4⚖ disputed
2mo ago

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously craft…

▾ Sunlitapple · safariEPSS 0.30%via NVD
CVE-2026-64784Medium· 4.3⚖ disputed
2mo ago

An out-of-bounds access issue was addressed with improved bounds checking

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafte…

▾ Sunlitapple · safariEPSS 0.58%via NVD
CVE-2026-65336Medium· 4.3⚖ disputed
2mo ago

This issue was addressed through improved state management

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content m…

▾ Sunlitapple · ipadosEPSS 0.58%via NVD
CVE-2026-64788Medium· 5.4PoC
2mo ago

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.

▾ Twilightapple · ipadosEPSS 0.25%via NVD
CVE-2026-65337Medium· 4.3⚖ disputed
2mo ago

This issue was addressed through improved state management

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content m…

▾ Sunlitapple · safariEPSS 0.65%via NVD
CVE-2026-65340Medium· 4.3⚖ disputed
2mo ago

This issue was addressed through improved state management

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content m…

▾ Sunlitapple · safariEPSS 0.65%via NVD
CVE-2026-65330Medium· 6.5PoC
2mo ago

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system terminati…

▾ Twilightapple · ipadosEPSS 0.45%via NVD
CVE-2026-43795Medium· 4.3⚖ disputed
2mo ago

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may le…

▾ Sunlitapple · safariEPSS 0.58%via NVD
CVE-2026-65347Medium· 6.5
2mo ago

The issue was addressed with improved checks

The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to a denial-of-service.

▾ Sunlitapple · ipadosEPSS 0.42%via NVD
CVE-2026-64782Low· 3.1⚖ disputed
2mo ago

A memory corruption vulnerability was addressed with improved locking

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted we…

▾ Sunlitapple · safariEPSS 0.43%via NVD
CVE-2026-65351Medium· 4.3PoC⚖ disputed
2mo ago

This issue was addressed through improved state management

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content m…

▾ Twilightapple · safariEPSS 0.65%via NVD
CVE-2026-65346High· 8.8
2mo ago

An integer overflow was addressed with improved input validation

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to arbitrary co…

▾ Twilightapple · ipadosEPSS 0.59%via NVD
CVE-2026-65331Medium· 4.3⚖ disputed
2mo ago

This issue was addressed through improved state management

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content m…

▾ Sunlitapple · safariEPSS 0.65%via NVD
CVE-2026-64760Medium· 5.5
2mo ago

An information leakage was addressed with additional validation

An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to leak sensitive ke…

▾ Sunlitapple · ipadosEPSS 0.16%via NVD
CVE-2026-43794High· 8.8
2mo ago

A memory corruption issue was addressed with improved memory handling

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing m…

▾ Twilightapple · safariEPSS 0.42%via NVD
CVE-2026-65400Critical· 9.8CISA KEVPoC
3mo ago

An authentication issue was addressed with improved state management

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to…

▾ Hadalapple · macosEPSS 1.7%via NVD
CVE-2026-39875High· 7.8PoC
3mo ago

A permissions issue was addressed with additional restrictions

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.

▾ MidnightApple · macOSEPSS 0.15%via CVEORG
CVE-2026-64767Critical· 9.8
3mo ago

A buffer overflow was addressed with improved bounds checking

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sequoia 15.8.2, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote attacker may be able to cause unexpected system termination…

▾ MidnightApple · macOSEPSS 0.90%via CVEORG
CVE-2026-64758High· 7.8
3mo ago

The issue was addressed with improved bounds checks

The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafte…

▾ TwilightApple · iOS and iPadOSEPSS 0.17%via CVEORG
CVE-2026-64718Medium· 5.5⚖ disputed
3mo ago

A use-after-free issue was addressed with improved memory management

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, Safari 27, iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.6, tvOS 2…

▾ Sunlitapple · safariEPSS 0.26%via NVD
CVE-2026-43763Medium· 5.5
3mo ago

A permissions issue was addressed by removing the vulnerable code

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.8, macOS Sequoia 15.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may be able to read files outside of its …

▾ Sunlitapple · macosEPSS 0.15%via NVD
apple vulnerabilities (CVEs) — page 22 · VulnSea